Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/348f9fd4-2b36-362e-8bef-86c9a3d7e48e.roa
File: 348f9fd4-2b36-362e-8bef-86c9a3d7e48e.roa (raw, json)
Hash identifier: OKwD1/bFlK1HMDc2CSRxam09MrC8FcMOXJjXNADuvQ0=
Subject key identifier: 6D:84:69:ED:8F:B1:59:6A:15:B8:A0:60:54:EE:36:34:59:A6:FA:0B
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285848CB16482A985DFBB8F53E9140
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/348f9fd4-2b36-362e-8bef-86c9a3d7e48e.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 16276
IP address blocks: 199.249.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 05:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:48:2a:98:5d:fb:b8:f5:3e:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=9d200ec8-af9e-4fe3-bbe9-a4fff6fd7cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:e9:bd:b3:38:80:6c:0c:dd:94:b7:53:05:
a1:f1:2a:f8:86:59:31:cc:9a:95:24:a4:34:59:42:
e5:de:1b:22:0e:44:5e:0d:f4:02:d5:85:13:41:dd:
a1:7b:90:b9:2e:de:11:70:ed:0e:4a:4c:6d:db:c2:
a4:bc:16:74:bf:e2:f7:92:87:0f:62:33:74:c6:7d:
16:aa:82:f6:66:14:a7:c8:b5:56:67:29:7b:13:f7:
3d:bb:91:7d:4f:ab:93:19:51:a7:4d:2f:f8:e9:e0:
a7:04:12:9a:bc:9f:b3:02:9b:f6:73:1e:b0:11:68:
41:59:59:6b:d9:98:78:59:f7:61:40:1f:d4:66:08:
bb:9f:24:1e:df:eb:a2:06:65:dc:ad:43:8d:58:94:
10:ea:73:12:a9:a3:5f:c6:e4:3e:0c:f4:57:61:6c:
b7:e5:ab:cd:39:24:ae:7a:ed:e2:30:ea:c0:7a:88:
60:71:f3:ef:21:e5:42:55:c3:23:51:cc:c3:fc:df:
c3:7b:8c:70:49:fe:4c:e2:63:5c:52:b4:3f:d6:0d:
f2:39:bf:a8:2c:6a:8f:31:bf:e0:c0:3e:f6:bf:be:
e8:fa:bc:39:1c:a1:dc:f3:44:a3:77:e1:1e:c8:2b:
2a:3f:3d:ba:7d:18:05:ac:88:83:2a:3c:63:7c:82:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:69:ED:8F:B1:59:6A:15:B8:A0:60:54:EE:36:34:59:A6:FA:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/348f9fd4-2b36-362e-8bef-86c9a3d7e48e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b7:2d:4d:e1:98:e1:5f:8c:90:46:67:90:f7:e9:e0:8d:65:
e0:9d:f5:f2:a1:e3:a7:7c:bb:9d:c1:3f:75:0e:2f:79:d0:5f:
40:c0:68:1c:6d:ec:06:65:6f:7d:a8:fd:7a:d9:57:1b:4b:f2:
fe:bd:aa:19:7c:6f:ce:86:35:8e:e1:d7:94:3b:bc:b3:95:10:
52:ba:25:07:11:9c:c8:70:14:5a:9d:ed:03:25:62:6e:44:ba:
b9:10:a7:ff:11:c6:d1:34:86:c1:0e:35:c2:a1:38:8c:20:87:
e6:8c:b2:0f:e1:42:7a:e4:f4:e9:24:d5:73:d9:1e:fc:f0:c1:
54:4d:b5:76:32:45:e8:36:ba:7a:50:4b:af:57:85:80:d2:a0:
74:83:92:45:d2:bc:9b:84:27:06:2d:9e:ec:66:66:e5:e1:5f:
16:2a:3b:0b:af:55:e3:35:6a:40:0f:9c:96:72:19:5d:c1:69:
75:64:06:98:ed:f2:ff:80:4c:5b:0b:aa:35:8b:1d:9c:a5:82:
e4:82:99:9e:a9:00:07:66:dd:a7:3b:60:1e:66:a8:92:95:b0:
1c:0e:17:ad:0c:7d:8f:86:cb:bc:4f:83:0c:a9:98:0e:01:2b:
85:02:dd:22:56:c6:bf:ed:61:c8:69:fe:4f:29:57:46:18:01:
98:84:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:42:52 2025 by rpki-client