Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/63fc8da5-8589-3b53-b520-ecfa01ccea4c.roa
File: 63fc8da5-8589-3b53-b520-ecfa01ccea4c.roa (raw, json)
Hash identifier: 3+gmgDLhZ0mmgcTPX5IT09BJuP40/mvKoypyU14C1kA=
Subject key identifier: C1:64:B7:0E:7C:60:B5:0D:C7:27:19:58:4B:72:72:39:1D:F6:4C:0E
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F4328584909E6954ED52B1CB9A8F8FE40
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/63fc8da5-8589-3b53-b520-ecfa01ccea4c.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 834
IP address blocks: 209.145.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 23:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:95:4e:d5:2b:1c:b9:a8:f8:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=b5d9d80e-184d-4521-805d-bfaf192aa66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:0c:a2:8b:e6:3a:5b:bd:13:8e:7f:32:90:
82:31:8b:ea:e6:d3:41:88:0f:d7:e4:f3:90:29:22:
6e:96:0a:42:44:1b:30:49:56:be:0a:58:ed:24:47:
71:2e:a3:f7:d3:0c:f3:9b:32:0a:a4:04:17:df:b6:
13:7c:bc:49:f5:71:fa:22:d0:1e:71:1c:55:c4:e3:
59:5c:ef:4e:68:e8:6e:be:f6:f6:9e:25:4d:e1:dc:
62:51:b1:13:be:84:04:fa:93:4f:fa:3d:2e:0d:76:
ff:6b:87:41:37:ff:23:89:18:28:e3:03:35:a5:1e:
e9:15:c2:58:39:29:22:f0:27:1a:c7:e4:ac:a4:64:
6a:56:84:a9:ee:7d:15:fa:12:96:54:83:13:14:ad:
c7:e7:aa:f8:73:6a:59:92:c2:a5:bd:de:ea:e5:c9:
4e:01:b7:4c:7c:5f:1e:6c:84:ae:a8:fa:8b:74:dc:
8f:9b:64:6c:49:60:d0:7e:52:cc:5d:33:10:4a:3e:
5e:0a:5f:60:8b:67:7c:7f:ec:36:22:80:d9:fd:e5:
94:52:9d:0f:fc:22:a5:8a:1a:59:6b:35:74:bc:83:
28:30:d6:1c:6a:37:40:62:32:9e:ee:b4:d8:23:57:
60:b2:f7:26:5c:34:d8:ae:cb:b9:cf:ae:15:c2:de:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:64:B7:0E:7C:60:B5:0D:C7:27:19:58:4B:72:72:39:1D:F6:4C:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/63fc8da5-8589-3b53-b520-ecfa01ccea4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.145.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:0e:de:7d:b4:7a:0a:87:86:ad:29:3f:ae:91:d4:64:c1:29:
62:ee:f9:ac:be:f9:6d:96:d1:f4:41:6e:64:bb:8a:31:66:5b:
37:fd:ac:62:22:09:29:2e:cd:2c:b0:ed:b5:8b:9b:0c:99:43:
c1:5c:b7:27:e9:83:7c:f6:85:25:e9:da:11:3b:24:86:7a:55:
cd:3f:49:07:85:b6:c3:b7:b7:f6:c4:09:7e:59:60:74:1f:e6:
66:d6:ec:ff:cb:49:9d:f8:ed:1b:2e:11:c7:49:f1:4a:3b:6f:
40:c1:d5:ef:12:ab:c0:35:db:bd:60:38:21:a5:25:bf:18:33:
43:1f:36:53:02:b3:83:b2:af:dd:96:a6:e7:e9:19:df:e0:20:
27:eb:14:7b:91:c0:95:e6:b9:39:9e:5a:2a:13:87:ff:de:fb:
1b:d1:8a:f2:e6:90:0f:ad:41:3e:b1:d0:f6:8b:34:87:4b:7d:
f3:d6:8f:10:cd:8f:6b:02:76:84:02:98:fc:84:e3:95:87:42:
fd:e0:5e:c4:14:7e:65:5a:99:84:c2:db:4c:f4:42:96:8a:12:
d1:ce:06:6b:5b:69:b2:62:7c:28:f6:f4:f7:93:6a:9c:00:63:
03:e9:0e:86:bd:6c:35:dd:da:77:de:b5:ad:e4:3f:f4:97:82:
e0:97:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:32:57 2025 by rpki-client