Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/9fa5ae7a-d8f5-3f10-a879-60af246891b5.roa
File: 9fa5ae7a-d8f5-3f10-a879-60af246891b5.roa (raw, json)
Hash identifier: vwaugxuIrkFmHyXd+czsM8JzJP4rSPkkqSISbUQrrNo=
Subject key identifier: BE:64:86:7C:E9:2E:E5:C4:CE:EF:04:9E:1C:C6:58:FB:6C:C6:CC:CC
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F432858490A4D691F66C8112ADE434680
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/9fa5ae7a-d8f5-3f10-a879-60af246891b5.roa
Signing time: Sat 01 Mar 2025 05:27:53 +0000
ROA not before: Sat 01 Mar 2025 05:27:53 +0000
ROA not after: Fri 30 May 2025 04:27:53 +0000
asID: 149197
IP address blocks: 103.49.153.0/24 maxlen: 24
103.251.25.0/24 maxlen: 24
139.5.20.0/24 maxlen: 24
139.5.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 10:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0a:4d:69:1f:66:c8:11:2a:de:43:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Mar 1 05:27:53 2025 GMT
Not After : May 30 04:27:53 2025 GMT
Subject: CN=5a7c38d5-8bf7-4917-825c-8ad2088a33ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:29:17:e2:a9:44:f6:a4:c4:9f:eb:ab:a7:
59:45:42:66:b6:00:82:21:8a:13:d7:91:2c:56:d3:
9a:c2:c8:72:21:63:6b:89:86:10:bf:ad:15:ec:fe:
c4:4e:b1:a1:fa:3c:72:28:5e:55:27:ca:b3:0f:38:
b1:1d:14:5e:99:5a:d3:97:06:bd:a7:79:9f:93:f2:
4f:4a:5b:75:64:6a:fb:0e:3f:fa:e3:ef:2f:56:be:
a7:81:88:5f:40:23:fb:b3:91:bd:22:25:41:8e:71:
d0:f9:10:bd:ad:b4:73:02:c3:b2:d3:8f:ca:f6:0a:
1d:fc:6d:1c:d7:1f:a5:36:c8:bc:e8:63:bf:8c:7c:
cc:c4:7a:13:c3:22:e6:b5:4d:6f:18:ea:5a:09:d1:
61:f7:31:5c:eb:d5:18:97:1c:17:f6:e6:7e:84:a7:
b1:38:1a:92:0f:8a:28:49:c8:e2:51:27:40:ab:5c:
34:94:07:82:33:42:2d:f6:dd:75:b7:38:7d:ae:c4:
70:53:06:69:33:52:7c:8f:37:85:12:36:e9:2e:ce:
47:0a:32:c2:36:b2:c8:b1:01:b1:87:f8:d4:0c:ac:
8f:3c:7a:86:10:7c:40:ec:f9:e7:91:c7:7b:5d:1b:
6d:d5:5c:5d:9a:b4:15:89:0e:22:5f:76:c7:26:e8:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:86:7C:E9:2E:E5:C4:CE:EF:04:9E:1C:C6:58:FB:6C:C6:CC:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/9fa5ae7a-d8f5-3f10-a879-60af246891b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.49.153.0/24
103.251.25.0/24
139.5.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c8:c0:57:d4:38:7c:d5:13:f1:86:75:78:4f:d2:cd:0a:58:
4b:07:7c:55:1b:5d:ee:c6:9d:7c:0e:41:6b:8f:b6:db:76:2a:
f4:e2:c5:d2:eb:18:d4:93:e1:69:df:62:77:2d:eb:3b:bc:32:
05:6e:a6:60:de:e9:3b:26:2e:d7:74:bf:ba:82:eb:33:48:fc:
a5:c1:5c:51:1d:bc:6c:73:d4:96:13:62:52:1a:26:6a:69:72:
b3:99:92:34:a9:58:b3:49:14:21:87:cc:ad:29:a9:0c:58:44:
f9:52:1a:6b:b2:87:e2:a6:ed:32:d4:11:77:c7:32:e5:f3:fb:
82:26:02:59:c4:bc:ff:fd:6a:78:df:79:c8:6d:4f:c3:3d:dd:
c7:58:65:b8:21:05:3f:c3:7c:b9:22:c9:35:7a:10:1e:fe:31:
a0:be:f9:45:91:87:f4:4a:6f:2c:ab:7f:30:1e:84:fb:58:a3:
fe:75:eb:13:a1:85:da:0b:80:65:c9:5e:3f:11:cd:af:0d:23:
83:24:bb:c9:cc:db:3d:ba:33:71:89:f9:f0:86:ad:05:25:d9:
4b:0b:f3:94:17:df:b8:c2:7f:c4:e9:07:cc:4d:7f:1e:c3:16:
46:e4:b8:b2:56:bd:3b:14:57:46:c1:6a:4d:27:78:66:6a:ce:
0f:51:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:49:52 2025 by rpki-client