Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/a4cfd967-886c-33f8-9372-19cdd7198138.roa
File: a4cfd967-886c-33f8-9372-19cdd7198138.roa (raw, json)
Hash identifier: brz3AQLM31//BeyD5cqJZeX8fOClng16WmDsTyvrQ20=
Subject key identifier: 6E:2F:F7:A6:E6:EE:C3:61:F3:DA:5B:5F:BC:64:CC:B2:B6:A9:94:50
Certificate issuer: /CN=45b0b374-863f-468e-a08d-342445e7a940
Certificate serial: 010D0C9F43285848B2DDF51E8E3F55CC7DF792C0
Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/a4cfd967-886c-33f8-9372-19cdd7198138.roa
Signing time: Tue 28 Jan 2025 21:47:59 +0000
ROA not before: Tue 28 Jan 2025 21:47:59 +0000
ROA not after: Mon 28 Apr 2025 20:47:59 +0000
asID: 63270
IP address blocks: 209.212.48.0/20 maxlen: 20
2604:9fc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Jan 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:dd:f5:1e:8e:3f:55:cc:7d:f7:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940
Validity
Not Before: Jan 28 21:47:59 2025 GMT
Not After : Apr 28 20:47:59 2025 GMT
Subject: CN=4ee6d97b-730d-4a91-99df-811708b87ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:d9:9f:0c:8e:19:e7:1e:4b:a8:26:91:41:
78:a5:85:07:8e:ac:ca:e2:36:19:d8:fc:53:b7:fd:
3d:a4:ea:f4:9b:79:d4:13:04:c7:e0:ee:23:79:11:
dd:56:07:9f:45:c3:e6:c2:15:ea:6a:93:84:91:0a:
d2:80:2c:31:78:99:73:49:f8:ae:4d:89:da:46:41:
11:6c:bf:23:ec:3f:a8:aa:1a:b9:7e:a9:e1:bb:a6:
32:47:4f:fa:d8:8a:9e:31:10:c3:d9:01:6b:02:b5:
a2:f7:70:b4:c4:89:80:37:64:1b:ee:e7:9e:48:e5:
26:93:19:3d:b2:c2:9c:3f:48:a2:09:f3:3e:c1:f5:
46:bf:2c:fa:4d:3c:aa:7f:5c:06:4b:5a:c0:bf:9e:
25:8f:9d:52:0c:61:84:7a:8f:fe:e9:a7:be:e0:85:
93:0c:0c:76:a4:2b:f4:4e:d5:16:3a:15:b1:71:83:
69:79:43:bc:b1:a6:97:72:fc:6a:50:8d:a0:6a:6a:
a2:8f:91:5b:13:7f:82:7f:f9:a0:0d:63:67:f6:47:
42:c4:50:0e:53:58:48:0d:fa:ec:07:48:87:78:e0:
12:27:a3:aa:f2:03:f8:32:e2:3b:c8:a3:39:b2:0a:
b2:94:fb:bf:8b:c6:1f:15:b7:fe:77:99:3e:92:09:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2F:F7:A6:E6:EE:C3:61:F3:DA:5B:5F:BC:64:CC:B2:B6:A9:94:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/a4cfd967-886c-33f8-9372-19cdd7198138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl
X509v3 Authority Key Identifier:
keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
sbgp-ipAddrBlock: critical
IPv4:
209.212.48.0/20
IPv6:
2604:9fc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:9f:9c:65:15:78:58:62:7b:2a:f3:45:e9:91:e5:47:19:f1:
a5:55:1c:33:db:b3:b7:3c:5b:57:ab:4a:22:28:3e:f4:4c:4e:
09:47:6b:a6:d8:9e:1d:d1:8e:da:5c:09:7d:ab:5f:a1:3e:90:
ad:bb:83:47:95:ac:3a:23:98:fc:fe:25:b0:c7:51:72:a0:6d:
0c:4e:50:23:04:24:03:36:6c:59:62:13:ec:08:03:1f:8e:a4:
e5:b8:fe:36:50:46:c5:4c:6e:b6:b7:fb:9b:a2:4f:58:12:d0:
bc:18:8c:b1:b1:79:3c:32:4a:e0:80:e5:52:e2:61:65:cb:0b:
0f:6f:26:29:c5:d0:e2:57:e1:e1:a4:8a:a0:e4:3b:e2:bf:ae:
20:61:8b:92:c8:f7:4e:c0:04:4b:b1:e1:50:0a:7b:b0:23:80:
f9:2f:1f:3f:50:82:73:d5:3a:35:d1:2a:52:b0:87:64:78:3d:
d6:fe:56:1e:1f:3b:1a:87:33:4f:ce:1e:8a:d9:6f:9e:3e:6f:
00:45:48:d3:79:5a:e2:93:5e:af:9e:11:c8:cf:17:12:15:5c:
92:a2:ed:49:c8:f8:2b:e1:ce:0c:c7:22:15:89:c3:06:dd:b5:
b3:d6:a2:29:e6:8c:7a:a0:2c:f0:4b:64:8c:b8:9c:50:62:1d:
bf:a7:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:49 2025 by rpki-client