Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6027062-92cc-321a-9419-c27173b42f4e.roa
File: a6027062-92cc-321a-9419-c27173b42f4e.roa (raw, json)
Hash identifier: odk9QXcl8eFZ29E50GY97khWNPHO6DulvCvqlPKEC/A=
Subject key identifier: B1:9C:35:39:A8:D2:22:F9:F5:D0:DF:D2:27:22:B2:77:F4:F9:9C:0B
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E80E71ED20386097B9200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6027062-92cc-321a-9419-c27173b42f4e.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 13371
IP address blocks: 152.16.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 07 Apr 2025 16:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:e7:1e:d2:03:86:09:7b:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=628834bb-9227-4b77-978b-305e64545a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:fd:cb:a0:38:e1:08:15:aa:6a:aa:31:07:
14:7a:27:10:4b:82:a8:6c:b7:0b:e2:7e:14:9c:c8:
f4:33:91:c0:f4:af:ff:bd:3d:62:20:39:6c:1a:59:
af:3c:ed:1d:5d:7d:e6:28:c1:dc:a4:11:4d:9d:b4:
cc:fb:b7:60:2f:e9:2f:12:bb:26:93:0e:5d:79:ae:
8f:a3:23:65:61:35:24:24:29:96:d2:8b:71:a7:f4:
c1:3d:5e:4a:80:2a:4c:82:72:33:6c:26:06:9a:1e:
e1:27:63:66:f2:98:14:fe:df:84:d8:05:c9:78:4a:
27:f8:d4:c8:e0:39:d2:b2:e8:d0:88:fd:32:39:29:
04:5c:9f:09:96:61:bf:5b:09:64:e8:eb:94:a6:a1:
27:ab:5f:78:c5:39:e6:86:ef:74:dc:fc:88:cb:6d:
94:ac:e4:5a:54:74:66:1b:9e:00:42:56:42:fb:47:
d2:c8:56:4f:b6:d3:c9:c9:8b:66:ab:00:93:e5:70:
e6:85:d0:d3:cd:47:e7:ae:8f:14:79:2b:13:9b:9b:
2f:c6:44:02:47:e7:73:4e:ad:c1:4b:1e:c8:87:ad:
9a:cc:44:bb:ac:5d:59:ee:4b:d6:4c:7d:11:6e:a2:
76:90:7a:cb:c4:9f:32:4c:d5:c0:2e:db:2c:c2:45:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9C:35:39:A8:D2:22:F9:F5:D0:DF:D2:27:22:B2:77:F4:F9:9C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6027062-92cc-321a-9419-c27173b42f4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:b2:5f:0e:9e:96:b3:72:c8:c5:74:b7:ba:89:0f:65:01:15:
c6:86:6e:fd:92:f7:f3:74:4f:8b:8d:b7:19:79:0f:85:c5:ff:
21:cd:02:61:4a:73:1e:d0:cf:45:f0:42:74:92:75:69:4d:ae:
e9:2f:21:f9:42:f6:66:af:07:e4:e0:86:1e:e1:e4:a5:c0:78:
a4:87:b8:96:4b:6b:f5:f7:79:fd:86:4e:b2:52:81:c6:77:0d:
d9:b8:79:b9:d1:8c:b6:6f:da:5b:63:ed:a5:2e:a6:1e:28:93:
bf:a1:c1:9b:c5:8d:7b:01:a5:0c:dd:4e:9b:69:b3:57:56:72:
ea:0a:56:93:7f:16:fe:d9:ec:4f:41:13:19:ea:f2:44:cc:28:
d8:7f:63:8c:ca:a5:bb:d6:89:54:2e:df:14:f8:1e:4a:a7:cf:
58:3d:a8:37:a4:b8:f4:79:a1:92:c5:e9:30:ef:df:d8:2d:dc:
4a:16:7a:e1:65:da:5e:99:49:2a:54:6b:d3:91:71:a2:ff:3a:
33:57:b4:67:19:66:17:9d:ef:de:07:1a:a0:ee:90:7e:cd:0a:
26:3e:74:96:26:6f:9c:36:3a:52:13:b2:3c:c1:88:54:2c:5c:
56:38:55:7e:ef:9e:32:32:fe:bf:f5:2a:b7:f0:95:96:eb:b0:
54:3a:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:27:48 2025 by rpki-client