Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/781ce3e2-fc0c-35c9-a26a-2a114d3df413.roa
File: 781ce3e2-fc0c-35c9-a26a-2a114d3df413.roa (raw, json)
Hash identifier: I2gxF6qZBgYSnJ1jPVu2zrWNiNScLkBoimD+1LbgK40=
Subject key identifier: 85:B3:49:18:12:D4:D8:3B:7B:4A:D6:9A:CF:FA:24:AA:5A:7F:83:FC
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E80F755E76DAF5CEA09A0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/781ce3e2-fc0c-35c9-a26a-2a114d3df413.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 17031
IP address blocks: 152.22.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 07 Apr 2025 16:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:f7:55:e7:6d:af:5c:ea:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=c26bd140-6253-4285-a692-5c74f2bda228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:88:e8:c4:e8:30:77:48:09:49:ea:66:ad:
60:e7:7e:f8:83:87:d8:93:04:33:3f:96:8a:40:bc:
94:90:d2:e4:65:38:c9:49:3b:26:bf:3d:ec:6c:f5:
cf:38:67:1a:44:f1:56:fd:c7:bc:9e:c4:b0:00:c2:
df:3c:48:97:02:b5:25:e8:5d:bd:53:be:54:bd:60:
94:8b:95:94:06:e7:89:a8:ee:37:60:ea:1d:66:2b:
a4:ff:56:b5:82:46:39:23:8a:9d:8c:2a:f1:47:7c:
45:92:1d:9b:74:41:e3:f4:33:dd:95:2b:8f:65:61:
d8:ba:64:d8:41:5e:54:85:15:39:59:90:e7:a2:b8:
e0:59:fb:10:25:9b:d1:39:bf:d1:6b:9a:f4:ad:22:
39:ab:67:d2:20:3b:21:b3:1a:c7:d4:88:7b:4e:a1:
9f:d5:23:3d:f5:c6:0a:29:f6:7a:ba:94:6a:fc:a7:
96:a6:64:bb:28:66:7f:63:5d:92:7a:f4:cf:5f:f9:
11:41:74:58:e3:7d:6d:38:f9:7c:3f:7a:29:48:36:
f3:05:2a:7f:f8:5b:75:5c:1c:07:eb:a3:a0:4a:45:
42:87:ee:c3:0f:f5:08:4c:5e:ae:f1:f9:2a:d5:03:
51:83:3e:e9:20:4a:45:35:79:5c:b9:f2:f3:b1:1d:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:49:18:12:D4:D8:3B:7B:4A:D6:9A:CF:FA:24:AA:5A:7F:83:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/781ce3e2-fc0c-35c9-a26a-2a114d3df413.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:33:7f:5b:28:9a:31:8e:25:f7:42:cd:bd:92:3d:05:68:1b:
c4:29:af:fb:0d:0b:d8:62:c9:52:33:7c:d9:56:45:71:b1:96:
7f:48:e6:e3:cf:d0:aa:97:5f:40:f1:4f:33:26:a0:50:fb:21:
69:ca:cb:a6:ce:3d:15:be:a7:bf:35:b6:19:06:0d:66:16:c1:
60:35:3a:6c:f3:63:99:27:ec:72:46:48:1d:30:43:14:aa:ba:
cc:1d:2f:be:91:58:9c:58:73:c3:ac:6c:75:f5:2d:61:30:34:
6c:94:f9:95:7f:f0:91:ab:3e:ac:34:ea:b2:77:df:eb:d6:27:
84:51:9c:ad:55:76:bb:48:72:fb:fd:c9:ea:c0:bc:56:3c:37:
8c:d9:81:2e:2e:17:05:d3:f5:33:25:86:58:59:4c:2d:f7:7b:
e5:3a:71:6b:ac:0d:8d:4e:ab:74:6f:af:d4:2c:ec:6b:f3:ee:
fd:d4:c4:65:18:94:82:c8:a9:3a:ac:80:8b:56:40:83:32:76:
d2:0d:f4:c7:ca:00:11:4a:db:d4:59:96:f4:7c:c5:f8:ff:05:
38:36:35:5c:3f:29:8d:df:e0:c4:50:0e:a0:7b:31:9c:a9:b1:
59:00:9a:89:ea:c0:8a:6b:7d:ae:d4:5f:35:78:c4:bf:95:9b:
b0:59:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:30 2025 by rpki-client