Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/8d8443eb-dcee-3a2b-af78-24ad5ec1049c.roa
File: 8d8443eb-dcee-3a2b-af78-24ad5ec1049c.roa (raw, json)
Hash identifier: KIL8ZQ9gqYGWhhp3v74rVERXsn3s41aa0wCY80P2dLo=
Subject key identifier: B8:2A:5A:91:BB:31:1A:1F:A5:43:7A:38:22:BB:DE:68:39:96:D2:4A
Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial: 010D0C9F43285848C6837B48A6262AEBE284DD80
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/8d8443eb-dcee-3a2b-af78-24ad5ec1049c.roa
Signing time: Tue 04 Feb 2025 22:41:52 +0000
ROA not before: Tue 04 Feb 2025 22:41:52 +0000
ROA not after: Mon 05 May 2025 21:41:52 +0000
asID: 14618
IP address blocks: 159.172.64.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 12:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:83:7b:48:a6:26:2a:eb:e2:84:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Validity
Not Before: Feb 4 22:41:52 2025 GMT
Not After : May 5 21:41:52 2025 GMT
Subject: CN=3c289b63-0f37-4cb9-86a1-7954ce5ca42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:8c:f2:41:23:be:63:67:d4:02:14:63:9a:
0f:4d:e3:5f:d1:f9:99:b9:80:31:47:96:e4:45:71:
21:09:93:bd:f9:e4:e0:6a:2e:20:2f:7d:50:4b:0b:
47:12:97:2a:64:09:15:4d:99:8b:f1:70:ea:e5:0b:
27:a1:04:50:d4:03:e7:9d:81:54:74:41:8b:bc:d7:
87:d5:1b:1d:5e:e6:a8:1c:b2:33:6d:9e:7e:6b:a1:
ca:3d:5d:d8:af:b6:6d:19:fd:1c:fc:5c:a7:20:9f:
67:81:eb:ae:7b:02:3d:59:eb:f3:88:1d:6d:e0:64:
17:60:44:a3:c7:3b:b1:bc:94:13:57:c8:19:6e:e4:
e8:18:af:e1:08:7b:5f:e4:09:cf:98:41:0f:1e:95:
bf:9a:60:d1:aa:c0:07:d8:57:39:71:68:18:f6:2d:
14:f2:86:43:7b:af:2a:14:37:a7:31:93:fb:57:fc:
f7:2d:a3:b7:13:ee:65:a4:ec:ca:ba:4c:d2:d6:28:
95:d7:5b:05:04:76:6b:3b:58:2a:ff:6b:c7:72:bd:
94:e1:2a:ae:96:06:e5:81:eb:b1:b6:e4:60:21:c0:
97:0d:61:83:5d:62:6d:a8:ad:c7:3f:6c:01:8b:d4:
ca:94:3b:9b:76:07:77:68:c2:22:47:17:d8:7c:15:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2A:5A:91:BB:31:1A:1F:A5:43:7A:38:22:BB:DE:68:39:96:D2:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/8d8443eb-dcee-3a2b-af78-24ad5ec1049c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
X509v3 Authority Key Identifier:
keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
sbgp-ipAddrBlock: critical
IPv4:
159.172.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b1:bc:77:53:fc:44:38:a3:f6:76:29:68:b5:c3:08:cb:8d:
01:40:2a:65:9c:61:d5:89:9e:de:e3:be:71:fb:c2:7b:1c:cf:
90:24:0e:ab:44:2e:06:52:9f:fb:13:76:75:b3:62:e0:cb:78:
d9:3d:fa:b5:f5:2e:7d:a8:64:ba:0e:97:76:3f:71:28:7a:ca:
9b:ba:53:bb:a2:d7:bb:ce:d6:5a:29:20:01:d6:74:9b:d5:82:
49:cf:3d:f4:b1:e1:fa:fd:62:d0:2f:b0:1d:a6:4a:d4:a2:6b:
9a:8d:af:55:c4:4e:a4:c5:63:cd:b5:8a:74:a8:c2:ea:b2:1e:
d1:85:39:eb:8c:b4:6e:c0:fc:a8:70:5f:ba:66:44:b8:eb:6a:
fa:d9:c1:10:68:39:a2:ae:c9:c2:d8:e8:b6:29:fc:3c:06:95:
33:37:5c:7c:eb:61:bd:8a:47:f9:44:5c:fd:c2:26:8b:fa:ee:
e8:0a:7c:4c:71:27:c6:fc:8f:53:c1:c5:5a:b5:2a:06:25:59:
10:0f:a1:69:20:c5:e5:b5:bf:69:45:66:12:62:ef:5b:e0:81:
e2:25:12:e0:7b:da:42:b9:86:70:e2:68:b7:13:26:e4:08:48:
d4:84:85:7f:c7:bf:1d:ac:7d:f5:1f:8a:22:7a:06:61:09:54:
92:ca:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:39:39 2025 by rpki-client