Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/398c70d8-c021-3852-9f7f-7b944f67e737.roa
File: 398c70d8-c021-3852-9f7f-7b944f67e737.roa (raw, json)
Hash identifier: phoLhcyezJi2bj5zdvTNixnnJJNYx7B7LDg/4NBzqsw=
Subject key identifier: 85:AD:4D:5B:62:D4:B9:75:05:47:B3:DC:7A:7E:23:D7:FB:67:7E:38
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69F602DD571EC9CE7E300
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/398c70d8-c021-3852-9f7f-7b944f67e737.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54548
IP address blocks: 74.208.163.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Mar 2025 11:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9f:60:2d:d5:71:ec:9c:e7:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b12a2f31-1a41-4dfa-b6ac-d6de85f0735b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:84:1a:77:70:a9:e9:82:6b:2a:12:0a:62:30:
dc:5d:83:e6:17:c3:48:6b:b0:82:a0:22:57:27:51:
92:e6:11:5a:39:20:f2:e1:28:93:cb:ea:ce:b8:93:
68:a0:30:15:d9:2e:ef:25:38:bd:da:4e:9f:b3:9e:
ed:c5:1b:ba:fd:c1:c6:33:4d:43:58:a8:47:c8:31:
3b:78:5b:42:47:f0:b0:a9:07:9b:3d:1f:70:fb:77:
9b:c4:7e:bc:92:4f:b9:b9:ba:d6:eb:c8:bf:f8:38:
fb:ee:79:76:f5:02:93:6e:97:8b:44:4a:bd:e6:35:
7e:0d:43:ff:d2:07:52:68:4e:b4:c2:d7:20:67:01:
4f:69:b3:6f:0d:ca:c1:75:18:85:ce:61:98:f8:fa:
50:3a:3b:f6:eb:af:ab:75:85:4a:f8:b2:f6:85:96:
b8:5b:bc:a6:fb:cc:ff:6f:24:1e:b0:b3:92:5d:6f:
d6:e0:4a:33:a6:cc:32:bd:45:fa:bd:2d:2f:d8:b6:
1c:8c:b2:86:60:3b:c3:1b:43:f6:bd:bd:9a:03:c1:
9b:15:40:c9:fd:71:7f:c0:06:45:2b:8a:54:47:fc:
be:ac:ba:6b:2a:63:dd:f6:28:32:03:ae:d9:7f:43:
fd:85:96:cc:d4:e0:1d:93:70:c3:d6:c2:dd:ed:4f:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:4D:5B:62:D4:B9:75:05:47:B3:DC:7A:7E:23:D7:FB:67:7E:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/398c70d8-c021-3852-9f7f-7b944f67e737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:33:16:c0:33:be:71:fb:9e:48:26:cb:98:6e:58:79:0e:e3:
a8:2a:72:0e:5b:ee:eb:cd:b4:36:fe:e2:ba:89:78:a5:f2:2f:
da:94:06:84:7a:95:0c:41:27:ce:11:b0:99:70:32:dd:bf:92:
94:9d:73:2b:77:4c:f4:9d:45:db:52:40:43:fe:7e:24:32:2e:
55:1b:1a:be:f1:39:68:7b:9f:a1:b3:dc:86:d1:86:e8:52:54:
44:da:4d:15:45:aa:b1:13:a4:23:14:cc:8a:7f:55:38:b9:48:
31:f0:91:af:c0:ba:80:e5:fc:0f:61:7e:8a:08:fc:09:58:c0:
b7:51:00:c5:ab:bb:7f:cf:45:78:85:8e:41:e6:c8:20:51:31:
88:89:ec:6b:12:48:6b:2c:c5:21:b3:1b:aa:31:e4:7e:11:22:
dc:eb:8f:32:ae:c2:6b:ed:0b:5c:fa:1b:ba:7d:8c:56:28:9f:
24:ec:6d:c8:34:d3:ba:69:6a:75:14:18:e6:d6:cd:09:23:6f:
70:10:ef:71:8a:12:c9:9a:b4:71:22:fb:2e:98:5c:e9:37:e0:
ff:d9:68:b8:b4:b4:06:d7:55:fb:f7:7b:c2:95:07:27:a5:85:
28:5e:60:28:b8:be:c7:5f:7a:79:ef:a7:16:f2:16:ba:a3:33:
57:6b:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:13 2025 by rpki-client