Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d856cb07-52c9-3064-8919-bb7f1aaec8c8.roa
File: d856cb07-52c9-3064-8919-bb7f1aaec8c8.roa (raw, json)
Hash identifier: rpqTE/AXlXBJ/nQnKUNCBCUR7ZylE7+nUsjSeZLC8DI=
Subject key identifier: 2E:EB:E4:16:A0:4B:8C:6C:34:18:73:B0:23:A1:A3:0C:1A:C1:AE:A8
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F43285849350E96F9350FEE4812D94F00
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d856cb07-52c9-3064-8919-bb7f1aaec8c8.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 13213
IP address blocks: 206.217.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 14:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:96:f9:35:0f:ee:48:12:d9:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=1ea042e7-c069-4253-9cab-5fe5dc953ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:83:ef:9e:df:1a:b5:43:c8:90:54:02:b8:
b3:6c:4b:5c:20:76:fe:c2:83:fe:33:6c:d2:d7:d3:
01:15:1a:73:cd:b1:89:0d:e0:2d:0b:cb:cb:bd:29:
82:38:d5:05:30:7e:f9:bb:b7:21:4e:ae:47:79:d3:
c2:8e:d0:ef:0a:a2:cc:1d:92:d9:b4:16:05:fb:4a:
fe:a0:91:2f:ac:f3:b1:f5:83:b8:86:1e:03:c6:6d:
59:62:34:c1:1a:fe:7d:34:3c:05:19:b5:c5:1f:5d:
7f:6c:25:f7:f7:7c:78:22:13:9b:b0:64:02:eb:a6:
81:6f:5f:0c:16:24:1b:39:56:ad:66:10:4a:02:f3:
b7:55:d2:84:42:8f:6b:b6:1e:e3:10:b9:48:b8:5c:
87:a6:17:4c:27:54:ec:e1:88:92:ab:44:c0:e6:4d:
8c:06:26:9a:31:f0:2d:30:44:51:bb:95:55:15:b8:
85:9e:32:31:e2:8b:8a:49:41:9a:5c:24:04:40:8b:
10:a4:a0:c3:9c:86:21:15:11:d3:84:d4:05:ee:e8:
eb:28:0a:1c:87:40:9f:ca:91:57:cd:9f:02:33:73:
88:0b:10:df:ff:44:7c:9e:c7:51:30:5a:a4:8c:0a:
45:32:82:cb:85:3d:41:e3:8f:26:1a:3a:c1:8f:80:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EB:E4:16:A0:4B:8C:6C:34:18:73:B0:23:A1:A3:0C:1A:C1:AE:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d856cb07-52c9-3064-8919-bb7f1aaec8c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.217.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:99:94:d8:9a:68:f3:56:77:ed:25:dd:dc:2c:9c:d4:9f:74:
1f:d1:e2:00:13:ba:bb:05:16:80:17:34:ee:7d:86:f2:8d:7d:
fe:5c:bb:14:d3:94:cc:68:d1:e0:b6:4d:29:73:5a:dd:24:3a:
1b:b0:c5:52:5f:d4:1e:e7:e8:ae:72:a7:a1:0c:3a:b7:39:cf:
5a:b4:5b:f6:93:87:a1:e4:e8:b1:7f:6c:6b:6d:21:60:cf:3c:
68:fe:8b:32:17:fe:fe:06:77:ff:53:1b:f9:bd:d1:ce:72:fe:
ea:58:28:d5:27:1c:33:61:66:0b:09:f6:ac:cc:92:37:dc:ca:
fb:b0:c8:74:27:3a:8d:9b:c5:0a:e0:f4:61:58:82:89:63:45:
97:73:9f:95:91:e9:00:11:f1:a3:fb:22:f0:51:ec:8b:bd:2d:
7c:cd:f6:1d:55:c4:0b:ef:aa:70:9b:25:49:5f:e7:71:e5:bf:
21:a9:69:db:63:e3:6a:af:16:80:7f:57:73:9e:fc:cd:ee:9a:
b2:33:e6:fe:31:b4:98:eb:09:eb:8b:5d:49:d6:46:d3:f0:a6:
65:aa:68:8c:ff:32:f3:88:88:14:ff:05:23:1f:43:08:2a:32:
82:09:6d:ee:2f:43:6d:c3:c5:c4:4f:83:84:93:72:ac:8a:62:
62:61:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:11 2025 by rpki-client