Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/44f1f233-d368-37dd-9cdf-20bb9b99f1c5.roa
File: 44f1f233-d368-37dd-9cdf-20bb9b99f1c5.roa (raw, json)
Hash identifier: Wl9mCEYl27gyJcJwxchMQUXRN4EmEXCSwp01GNztZdM=
Subject key identifier: B1:EC:4E:69:FA:9A:C5:BE:90:0A:E4:AB:97:22:C7:D1:B5:D9:FF:88
Certificate issuer: /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial: 010D0C9F43285849446940CFCE98EFB3BE6B3900
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/44f1f233-d368-37dd-9cdf-20bb9b99f1c5.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 21928
IP address blocks: 207.228.200.0/24 maxlen: 24
207.228.201.0/24 maxlen: 24
207.228.202.0/24 maxlen: 24
207.228.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 23:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:40:cf:ce:98:ef:b3:be:6b:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=f48ec7ea-7ca9-4824-a5f9-dcb11ccffda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b4:93:b4:78:b7:5b:9b:7c:f5:46:8b:f5:d1:
2e:75:a9:65:13:32:a4:82:69:ac:39:3e:85:49:ce:
b8:d3:4e:44:63:74:20:d0:05:6f:18:b2:d7:3e:4c:
b6:77:ff:28:be:1a:f3:71:51:61:dc:0c:8f:65:87:
92:06:4c:dd:e9:2a:a2:d6:ba:9e:8c:a3:76:04:ee:
c9:c9:61:1f:a8:ba:9e:d6:f5:2a:67:35:7d:e2:2d:
11:0f:95:c9:eb:e5:f3:de:5e:2d:e8:f5:11:8a:f6:
3b:44:f7:6c:52:b2:ad:f0:63:5a:a1:14:64:4a:10:
6d:a9:ef:c5:f5:84:e0:cf:bf:ba:07:d1:fd:c9:8c:
e5:0e:ff:4b:67:41:31:74:74:67:79:ae:5c:ee:fb:
3f:95:ef:e3:62:1d:13:09:05:2d:56:85:14:43:e7:
33:56:58:f2:10:21:b0:4a:c9:65:11:46:a6:5c:61:
f9:5d:2a:14:2d:54:1b:b1:29:62:55:6c:11:f7:1f:
e2:c4:5e:05:26:6c:58:fd:0c:56:8b:1d:e5:34:bf:
90:16:31:b0:6f:79:14:ff:11:f9:cd:6e:a8:9a:a4:
a3:03:52:59:e9:ac:d3:dc:62:e3:69:29:16:4c:37:
44:46:9b:9d:45:4c:2e:ca:85:68:e0:db:a7:20:37:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EC:4E:69:FA:9A:C5:BE:90:0A:E4:AB:97:22:C7:D1:B5:D9:FF:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/44f1f233-d368-37dd-9cdf-20bb9b99f1c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl
X509v3 Authority Key Identifier:
keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:09:75:45:63:04:12:36:ac:80:62:44:f0:42:89:be:1e:96:
d6:67:f3:0f:4c:41:24:c3:f0:de:c3:b7:2c:13:ea:65:0e:ae:
bf:d6:92:87:98:af:c7:f5:6a:b9:2c:87:fd:f5:2c:f3:74:c9:
7f:b7:ca:ee:9f:a7:07:ab:f0:3b:f4:38:5c:ba:3a:96:b5:f8:
15:d9:07:c5:c5:b5:b9:a9:b9:17:ab:da:d7:ba:ab:d4:42:ef:
29:07:f6:27:3d:7f:5c:37:1f:f8:4d:80:2b:6f:4a:7d:3d:54:
a0:96:17:7c:a8:de:33:c8:a9:d8:f4:dc:35:7d:15:1c:07:9c:
dd:5a:8d:3e:1c:f5:6a:e8:1a:46:e9:58:8a:43:c7:36:36:a5:
1e:4a:33:f6:79:c5:6f:dc:1c:2a:e7:ea:58:2b:45:1b:d9:15:
ee:b7:70:cd:c1:38:a3:0b:bd:6e:7b:6e:48:8d:2e:25:18:3c:
90:b8:d3:b0:0f:a1:d7:c4:3c:75:ef:4c:94:20:cd:c0:ae:b0:
49:2c:cb:2d:41:c7:0b:e7:39:9f:4a:5b:27:3f:1d:3a:18:a5:
78:57:fe:54:11:d2:8b:bd:e2:02:8d:0b:b9:53:2b:96:5f:15:
74:06:d4:5b:cd:5b:61:0e:ee:ec:95:88:84:81:44:f0:e2:5d:
5f:3e:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:47:22 2025 by rpki-client