Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/c37c95f9-5d0e-308d-97cd-fb096c55e1b4.roa
File: c37c95f9-5d0e-308d-97cd-fb096c55e1b4.roa (raw, json)
Hash identifier: cbjXSirv64/8gtz9hQON6hC9bZTwL4lMUrr9z4UAKgE=
Subject key identifier: E8:FD:D7:6E:66:EB:58:87:11:DC:80:E8:19:9A:75:5B:C2:1A:AC:21
Certificate issuer: /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Certificate serial: 010D0C9F43285848F22C6E2408642F7345134320
Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/c37c95f9-5d0e-308d-97cd-fb096c55e1b4.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 3801
IP address blocks: 23.226.160.0/20 maxlen: 24
64.190.44.0/22 maxlen: 24
168.100.48.0/20 maxlen: 24
216.246.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 16:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:6e:24:08:64:2f:73:45:13:43:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=cc4cf59e-d198-428b-a978-ea0cc4e291d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:7a:2e:73:1e:e9:d8:f7:d4:92:c0:50:21:
c2:fe:d9:8e:0f:8d:83:84:2d:35:70:3a:d2:cb:96:
82:4d:7a:82:4b:6e:b8:5d:a0:e7:62:ac:73:17:25:
33:64:37:61:2d:0f:67:6e:36:6d:37:7b:fe:5d:44:
c1:78:21:f2:57:48:e3:ad:1b:c5:d0:5c:c8:17:f2:
77:5c:72:01:9e:f8:32:8d:c5:a0:9b:aa:b9:0f:ea:
eb:e4:d0:79:7d:d6:c8:a7:5f:f3:08:e7:29:73:7c:
88:f8:c9:a4:79:3f:fd:d1:ea:50:5a:39:ca:7b:4f:
28:ed:af:b0:ac:28:0a:b3:25:fd:be:7e:d8:ed:2c:
1d:64:08:4f:ff:ad:e7:f6:2a:71:f0:f1:ac:00:9d:
7b:d5:93:05:e9:a9:f1:29:0c:92:34:ef:f5:c3:9c:
b0:7d:93:62:80:f8:19:27:68:84:75:4e:86:f3:ef:
e5:2c:10:94:3e:54:b6:f7:2d:13:53:4b:b1:9e:7b:
0a:97:ba:16:ce:a9:cb:6a:22:7d:c8:54:76:35:8e:
b2:6a:c4:71:3e:c7:c8:f6:94:47:76:49:9a:96:32:
71:a8:d1:f1:b8:99:6a:85:48:3f:71:cc:c8:a8:a9:
4b:7a:8c:08:72:85:c6:d6:79:3a:a1:6d:fe:20:60:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:D7:6E:66:EB:58:87:11:DC:80:E8:19:9A:75:5B:C2:1A:AC:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/c37c95f9-5d0e-308d-97cd-fb096c55e1b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl
X509v3 Authority Key Identifier:
keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
sbgp-ipAddrBlock: critical
IPv4:
23.226.160.0/20
64.190.44.0/22
168.100.48.0/20
216.246.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:2e:12:9a:61:a5:a1:e5:51:9f:db:95:26:ec:fc:da:d7:b1:
7d:21:b0:a6:ba:ae:83:0e:01:7f:c7:19:e2:31:28:92:f5:6a:
3d:77:b0:39:3a:27:0d:82:7c:9a:94:c4:7d:51:ab:4a:d3:24:
98:8a:84:c6:1e:9c:bf:70:71:4c:23:25:f3:a1:3d:d5:dc:84:
29:1d:d5:57:aa:66:bd:b7:cc:2f:d7:ce:60:7b:47:cf:2b:ec:
20:9f:be:90:da:b3:5f:c2:82:2b:7f:bd:fe:c7:db:c0:60:f8:
74:42:1e:a9:9c:b3:c4:6b:0a:67:b4:f1:63:cd:64:d2:b6:40:
0c:20:16:97:df:3e:a0:92:45:63:64:32:bb:ce:96:52:0f:bb:
fa:63:62:b0:a0:54:99:0a:dc:77:37:e9:de:09:85:c9:c2:c9:
2b:85:9f:15:eb:09:1b:a0:be:b9:b4:55:c1:f1:84:f2:89:ae:
0a:0c:90:65:41:4b:ad:02:16:f1:31:91:66:50:25:d2:01:b1:
2d:d6:66:d7:3e:54:28:82:0d:f4:94:fd:85:b9:95:f2:d9:2d:
23:3f:01:e9:d9:a1:c3:22:e0:a9:80:e9:c9:bd:36:23:93:9c:
f5:48:8d:b7:68:f1:0a:78:00:d3:08:d4:7e:03:fc:ab:ee:b0:
99:25:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:34 2025 by rpki-client