Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/19d70864-8c2a-3832-a9c8-7652fc2f2974.roa
File: 19d70864-8c2a-3832-a9c8-7652fc2f2974.roa (raw, json)
Hash identifier: SCdEbBRI4PG79gjAnYJ9mkNbukrEdtIskrj8fM7rHmc=
Subject key identifier: 86:2B:AF:F6:09:62:FE:60:53:5A:FA:66:4E:EE:9E:01:8E:B7:3B:7C
Certificate issuer: /CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
Certificate serial: 010D0C9F43285849033C0F8551CD840C70DE1230
Authority key identifier: 48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/19d70864-8c2a-3832-a9c8-7652fc2f2974.roa
Signing time: Wed 26 Feb 2025 16:42:16 +0000
ROA not before: Wed 26 Feb 2025 16:42:16 +0000
ROA not after: Tue 27 May 2025 15:42:16 +0000
asID: 22056
IP address blocks: 204.153.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 16:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:03:3c:0f:85:51:cd:84:0c:70:de:12:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
Validity
Not Before: Feb 26 16:42:16 2025 GMT
Not After : May 27 15:42:16 2025 GMT
Subject: CN=ab0053c6-a9c0-4981-b740-737d1d882f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:9d:06:1e:95:69:93:b7:10:82:e2:37:d1:
49:b8:7e:1c:c3:46:39:4c:20:00:90:12:4d:6f:db:
d3:63:3a:48:2c:6c:cc:2a:22:62:fd:cf:3f:49:cb:
29:4e:35:cf:06:0c:47:7a:ea:ab:26:eb:0f:88:e1:
c8:31:73:0f:55:8f:97:c8:59:23:5f:07:a9:6f:5c:
c1:f6:37:c9:ac:34:b0:73:7e:b4:fc:d3:b4:ce:d9:
1d:cd:59:ba:b2:7e:9f:a4:c9:6e:e5:9c:26:48:bd:
d9:8e:c7:b3:de:54:7d:d8:3f:ca:95:ad:8b:d2:a4:
24:c2:02:ad:fc:7f:60:f0:9e:a4:71:1d:c0:c8:91:
fe:be:bb:bb:c1:9f:64:2e:e9:1c:81:84:28:0b:c0:
b4:8d:c4:68:c1:3c:b3:18:b0:20:a1:a9:04:43:96:
62:0a:be:10:a5:2a:81:e0:b1:b6:02:7f:43:b2:af:
40:dc:59:3d:f3:07:fc:12:0b:6a:38:ca:22:d6:97:
39:39:86:61:df:0c:26:69:6d:93:2a:2e:da:05:01:
e5:93:12:0b:c3:cf:85:bc:0e:1b:45:fd:72:82:f0:
5b:a7:91:80:87:8c:c1:9e:70:df:04:f9:43:86:16:
5f:f5:26:ff:11:e2:82:9c:8f:88:0d:3b:be:63:00:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:AF:F6:09:62:FE:60:53:5A:FA:66:4E:EE:9E:01:8E:B7:3B:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/19d70864-8c2a-3832-a9c8-7652fc2f2974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl
X509v3 Authority Key Identifier:
keyid:48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
sbgp-ipAddrBlock: critical
IPv4:
204.153.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:d9:ec:46:a7:0e:83:d2:33:0a:ae:e7:48:2c:8d:a5:76:37:
bc:a9:71:55:49:ca:e6:94:fc:e9:6a:d2:94:e1:3d:34:8c:1f:
39:bd:f5:d5:df:12:c2:9c:8b:f1:6d:f1:ae:19:69:d1:9b:70:
7b:4b:4b:b2:02:47:26:eb:66:79:00:b6:b0:2f:f7:b1:c0:47:
2b:48:76:7d:f9:05:e4:5b:5d:2d:e5:aa:79:b9:49:ad:a1:68:
9f:ad:10:fc:04:dc:3b:c9:3b:c7:97:b0:50:d6:14:e8:74:e1:
2e:b6:8f:f7:76:aa:f8:2d:e2:6e:2e:48:0e:bb:23:41:3c:7d:
ac:20:49:83:aa:93:c1:1e:90:88:b3:ed:35:61:08:80:d8:11:
45:b1:5c:28:f8:4e:92:c9:55:70:1d:bb:d5:9c:b1:8f:34:8e:
8a:d2:0c:47:d4:ca:d7:7f:71:3e:4a:cb:85:36:ce:ba:46:62:
da:d5:a6:91:9b:9b:e7:72:bc:8a:2e:ca:97:57:dc:a3:b4:42:
d5:a7:ab:0e:1b:dc:7b:cb:d6:79:31:22:6a:f8:cb:8e:80:a2:
62:b7:1b:30:f8:f2:a6:1c:6d:3b:b6:ac:a5:0a:c3:fa:e2:20:
8c:81:49:d8:20:36:c8:2a:a1:71:0c:09:06:1f:39:d5:4a:59:
1b:54:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:53 2025 by rpki-client