Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1cd32468-8ef0-3908-b261-d50d3664b911.roa
File: 1cd32468-8ef0-3908-b261-d50d3664b911.roa (raw, json)
Hash identifier: tQggX4Li7UJy25R0lvtAPRUzkTwEqOogEsQNgR+9FkY=
Subject key identifier: 3E:59:15:62:0E:2C:C2:03:01:BF:3D:03:F9:C1:15:8D:0D:F6:CD:EC
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69FC58ACEE32D90EC1E00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1cd32468-8ef0-3908-b261-d50d3664b911.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54548
IP address blocks: 74.208.226.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Mar 2025 11:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9f:c5:8a:ce:e3:2d:90:ec:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=cd7971ff-28be-4e55-99b1-2d395159ec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:16:94:31:55:f4:43:2b:fa:be:9f:5f:3d:
1d:5a:f4:ca:41:45:c0:d0:df:34:8b:f6:18:e5:8d:
b9:c3:f8:46:5a:d2:6b:c9:4d:80:8e:b3:14:b8:89:
1d:ec:bc:7a:50:8d:cf:d5:73:80:e5:f2:56:dc:43:
51:56:7d:fe:46:32:7f:fe:a0:09:62:2c:4f:d1:37:
c3:6f:aa:88:f8:f0:59:22:44:b7:e0:15:cd:62:68:
3b:4a:fe:d0:17:eb:d1:c1:6c:ba:34:31:76:6b:9f:
74:81:99:81:52:ac:13:64:22:da:80:88:dd:32:ec:
dc:52:e4:3f:1b:71:f6:cc:23:c1:26:03:e2:f0:1a:
88:87:7f:46:6a:a6:68:f7:db:31:ed:7c:c9:d4:0b:
66:7a:cf:a6:ad:07:54:1d:97:62:43:2e:6e:a2:79:
e7:58:3b:0a:bf:8b:b0:c8:f3:b0:65:4a:20:2c:f0:
b1:f3:cb:8b:48:54:01:de:b5:a0:52:6e:93:e7:2e:
b1:94:05:7f:cf:cd:8e:bc:21:17:3c:4a:73:05:f2:
35:24:bb:27:4e:bb:17:1d:70:69:eb:c3:45:3b:d3:
e1:49:44:0a:6e:3f:ca:5b:20:b4:ea:27:b3:a3:d1:
07:1a:4b:ae:37:6d:6b:9e:5c:8e:0b:56:2f:d4:1c:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:59:15:62:0E:2C:C2:03:01:BF:3D:03:F9:C1:15:8D:0D:F6:CD:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1cd32468-8ef0-3908-b261-d50d3664b911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
df:f9:d7:f9:f8:03:5a:32:4e:c1:34:b2:0c:0c:7c:26:d2:f0:
9d:2b:c5:2b:27:35:c4:7b:ea:8e:36:ed:a4:a1:25:05:c8:36:
93:83:c8:aa:69:ec:74:30:e0:27:2b:b8:98:2b:15:e8:0f:dd:
59:44:ec:34:1d:af:73:9a:d9:05:79:a9:33:2d:a6:c4:92:37:
be:05:92:3c:02:2f:91:ba:57:5e:43:57:20:33:5a:9d:9d:3c:
b6:01:0d:37:3a:c4:4f:77:51:f5:e5:9e:80:17:c4:96:4b:0a:
5e:54:23:e8:5c:43:f0:ec:5e:57:97:3e:35:a5:2a:c2:e6:76:
f4:fc:4d:33:cd:9b:51:2a:36:52:1c:3a:e4:e0:7d:f1:47:e7:
17:97:ef:91:cf:91:5e:57:c2:d5:68:50:fc:dd:e8:67:e5:ca:
a0:70:2e:54:d6:0e:68:27:03:dd:1c:95:dd:6c:6e:5f:7c:8b:
f8:b3:c4:e6:1e:4b:6e:19:89:bd:45:69:7d:d0:e6:1c:d5:5e:
61:07:4f:45:87:c9:d9:1e:a4:4f:b5:be:1e:7e:ae:56:5c:68:
63:3f:35:79:2a:f4:e3:e4:98:d3:11:22:8c:6e:cc:21:da:3f:
4f:9e:9c:63:d9:ff:c3:21:be:75:e9:a8:cb:02:6d:42:49:e5:
1c:4a:d6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:30 2025 by rpki-client