Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/964c1822-6d13-347d-881b-ec0a55be729a.roa
File: 964c1822-6d13-347d-881b-ec0a55be729a.roa (raw, json)
Hash identifier: Gsw+jjvh38mKVyR/rSnAsq3OVYTTiY7sEPydtQF+aD0=
Subject key identifier: 8D:C1:DA:4E:53:6F:3C:9E:49:D7:C1:73:63:56:B2:71:72:0B:66:05
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848EF7C56100284955BC53CDE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/964c1822-6d13-347d-881b-ec0a55be729a.roa
Signing time: Wed 19 Feb 2025 14:55:36 +0000
ROA not before: Wed 19 Feb 2025 14:55:36 +0000
ROA not after: Tue 20 May 2025 13:55:36 +0000
asID: 18779
IP address blocks: 45.39.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 09:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:7c:56:10:02:84:95:5b:c5:3c:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 19 14:55:36 2025 GMT
Not After : May 20 13:55:36 2025 GMT
Subject: CN=a9af3475-8ff3-4f17-8c38-6a70f6af3986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:14:eb:e8:54:af:2b:43:d2:b4:95:73:1b:
55:85:bb:5d:a0:0e:c7:8f:98:86:fd:71:12:0c:63:
eb:10:35:ff:f3:25:40:53:88:ee:73:1e:14:65:25:
a5:97:fd:66:86:26:c9:d6:d8:28:f9:95:ab:9a:13:
83:9c:03:fb:c9:58:38:18:0f:d6:61:c7:06:72:a1:
73:6f:91:8c:a5:96:fe:d1:bf:04:e4:d1:d0:1b:6b:
de:8d:5b:e6:9c:4d:79:3f:c0:ec:d4:65:b7:c6:45:
67:95:10:c3:2e:ea:3c:18:aa:69:ec:5e:9f:4b:83:
cd:00:5f:7c:b9:c7:8f:98:02:36:a7:f1:6d:1d:29:
9a:47:c2:a8:f9:04:45:10:5c:df:9c:6a:b7:cc:cd:
3e:66:e2:d3:37:49:73:f2:f2:ba:f7:cb:2c:b7:a9:
c7:02:4f:95:72:e3:da:54:e8:32:06:a5:ee:b1:d9:
7a:19:95:ba:1e:60:29:e4:f4:87:6e:e5:6c:7a:e7:
41:9f:15:30:4f:2f:2f:99:ba:97:fc:84:31:5c:ab:
ac:8a:94:a6:f0:ab:54:c4:8c:c7:9d:b6:50:d2:2a:
a9:7a:7d:03:29:84:27:f6:36:03:fd:ff:a9:28:fe:
78:4f:8b:ae:87:07:91:d4:10:51:bf:63:12:6e:b4:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:DA:4E:53:6F:3C:9E:49:D7:C1:73:63:56:B2:71:72:0B:66:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/964c1822-6d13-347d-881b-ec0a55be729a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.39.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:68:be:90:8a:03:99:48:02:86:18:8d:58:e1:fd:0e:d6:ad:
c2:03:31:22:35:90:17:c2:12:e2:07:d8:89:7b:7a:2f:23:4f:
1e:a8:29:d9:bd:89:ac:c3:09:87:49:12:75:06:9f:ed:36:02:
d4:6a:23:c0:a4:05:25:49:57:fa:54:a6:07:6d:ea:f5:d0:9a:
a1:5c:02:5f:70:d9:07:cd:2d:33:a6:72:1d:4d:04:82:a9:f7:
8f:94:94:74:e3:31:5c:a6:c9:3b:b3:5f:db:a6:49:4d:3e:e2:
52:97:e3:e2:94:a3:bc:61:80:e5:9e:90:41:68:24:6c:92:ce:
d3:cc:ab:9d:37:91:c9:48:e3:67:1e:f5:e9:89:69:54:9e:91:
ec:4c:cf:c8:f8:e9:2a:65:28:d0:2c:f0:c9:41:69:77:70:81:
49:9b:64:68:a4:00:0e:59:24:54:a7:0a:d3:0e:2f:a4:f1:be:
5e:f7:19:4c:c8:36:f3:26:3f:a5:87:26:83:49:c9:2a:c4:e9:
98:24:c1:f8:26:87:97:26:1d:05:aa:be:7c:bc:be:d0:65:9f:
7e:f4:4c:14:01:20:8b:28:0c:c9:dd:88:d2:b7:2c:bd:08:38:
86:cf:95:9a:98:cb:57:67:26:6e:8c:fa:b9:77:2e:5c:d0:45:
9e:12:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:45 2025 by rpki-client