Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/553d1253-dac2-328e-98bf-2b578f48d23f.roa
File: 553d1253-dac2-328e-98bf-2b578f48d23f.roa (raw, json)
Hash identifier: fNUmtGkoEZQFtsIGKFaONdl0YDthQrZ+Z/cgkZgSPA0=
Subject key identifier: BF:7F:75:10:53:77:17:89:FC:28:DB:BC:D8:8A:D8:A5:D6:2D:0A:F7
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F4328583FEAEDD28FBF12434610CEC8D0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/553d1253-dac2-328e-98bf-2b578f48d23f.roa
Signing time: Sun 13 Nov 2022 12:00:00 +0000
ROA not before: Sun 13 Nov 2022 12:00:00 +0000
ROA not after: Wed 14 Nov 2029 05:00:00 +0000
asID: 40676
IP address blocks: 140.228.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Dec 2022 05:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ea:ed:d2:8f:bf:12:43:46:10:ce:c8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Nov 13 12:00:00 2022 GMT
Not After : Nov 14 05:00:00 2029 GMT
Subject: CN=3dfd1075-51b5-4480-a3fb-542340bf0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:b2:89:55:cf:4d:41:f6:19:9c:4e:df:88:
b1:e3:71:fe:8c:84:b9:22:aa:17:75:3e:8b:2a:9e:
4b:e6:dd:f7:b2:08:99:91:0e:6c:c6:80:17:18:0f:
7a:61:b4:f7:57:12:96:cb:fa:77:d9:64:8b:03:93:
0f:2e:15:3e:3b:30:e4:79:fa:0b:e2:5a:98:3e:c3:
f6:7e:79:c0:b5:9b:53:f9:9a:f5:ef:47:e3:5c:fe:
ef:e5:92:93:a6:01:64:f6:5f:a3:f3:c8:ee:c8:54:
2a:73:45:75:a3:73:27:5e:d9:f2:96:a8:d8:c4:7a:
29:ee:65:de:0c:94:d6:50:04:a0:bb:a9:ae:fe:6f:
02:db:40:3a:ae:5d:87:71:68:19:4f:f3:c6:7a:dd:
80:6c:3e:23:4b:b3:dc:39:9e:cc:06:83:c0:20:fe:
7d:4f:54:b3:53:a5:92:a2:6a:2b:c8:4b:28:9b:2f:
4c:6b:75:fa:81:75:c2:be:a5:cb:aa:01:79:5d:d7:
19:52:60:f4:96:2c:71:42:73:a5:14:14:67:f1:f7:
af:2c:f7:dd:79:14:bf:a2:a2:3e:d9:08:75:32:66:
0b:01:88:d5:ea:bb:7d:78:ff:d8:ec:aa:2e:87:ff:
16:fc:a5:2c:03:a5:b7:57:cf:3b:32:68:ee:8a:04:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7F:75:10:53:77:17:89:FC:28:DB:BC:D8:8A:D8:A5:D6:2D:0A:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/553d1253-dac2-328e-98bf-2b578f48d23f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.228.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:b8:be:60:f5:17:77:9d:56:bd:11:6c:52:55:1e:05:f8:03:
95:04:3d:73:e3:0e:c5:e6:75:8c:b9:e4:75:dd:a7:40:71:66:
00:bd:d8:cc:4c:e1:4e:08:a9:e8:20:d6:37:69:07:e8:be:9b:
ad:9c:06:c7:f5:af:cd:52:ef:a2:66:df:2b:43:1a:b7:75:a8:
37:32:c8:3e:bd:e6:71:89:90:eb:ba:15:e2:da:50:33:13:59:
77:ba:ba:35:d7:da:f9:0a:f5:49:ac:51:2d:da:b8:95:e3:d0:
75:92:5a:4c:f8:e1:c0:0a:7c:92:5d:30:3f:bd:16:fc:b2:96:
b4:1f:fd:f9:47:0b:42:74:21:7e:1a:29:b2:f5:8f:9d:ef:e0:
bd:03:fe:0c:66:fc:8f:4f:13:30:27:93:cd:2c:60:f4:f0:5d:
f0:5b:0b:f6:23:4f:17:fd:d5:17:14:59:44:0d:0c:a0:a4:f4:
b5:af:ee:e2:87:03:6b:3e:d9:83:c7:fb:17:4d:72:ad:af:0c:
18:77:d8:05:c0:2c:62:ea:26:2b:3d:7a:a6:2e:d2:4f:19:55:
1c:d5:40:36:63:22:56:9d:4c:19:f9:95:2d:7f:83:1e:38:c0:
df:d8:95:6e:0c:1e:06:2a:33:22:49:d1:bd:4e:b7:8c:78:e2:
17:9b:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:18:09 2025 by rpki-client