Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/af3d5ead-fb62-32e0-b394-24df2bcd17b5.roa
File: af3d5ead-fb62-32e0-b394-24df2bcd17b5.roa (raw, json)
Hash identifier: /siX+eeL0Lhl1S2ZO3/8PhvQiZZJ8cpBqq19t/5kqnY=
Subject key identifier: 39:B2:85:A5:CD:4E:A8:85:5E:28:AB:53:C7:44:A5:C2:94:83:62:7F
Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Certificate serial: 010D0C9F43285849300E272B4E92D2B645BF1480
Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/af3d5ead-fb62-32e0-b394-24df2bcd17b5.roa
Signing time: Fri 14 Mar 2025 18:01:09 +0000
ROA not before: Fri 14 Mar 2025 18:01:09 +0000
ROA not after: Thu 12 Jun 2025 18:01:09 +0000
asID: 15267
IP address blocks: 138.129.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 14 Mar 2025 19:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:0e:27:2b:4e:92:d2:b6:45:bf:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Validity
Not Before: Mar 14 18:01:09 2025 GMT
Not After : Jun 12 18:01:09 2025 GMT
Subject: CN=0b34d109-dd3a-45c3-898a-afb78ea92a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:79:6d:cc:eb:cc:ec:b1:ba:f0:18:40:da:
da:ba:36:cb:d8:39:f6:65:ac:c1:f7:45:2e:56:76:
f4:e9:1d:3d:02:20:1e:46:05:6b:64:36:56:6c:ac:
98:5e:5b:0b:be:67:81:72:a2:21:43:fc:2b:70:9a:
44:ff:47:0b:f6:78:75:54:bb:6d:4b:38:c2:38:bf:
f0:ab:46:28:ae:7b:08:74:b3:56:b5:07:8c:1d:2f:
b2:25:44:eb:d4:63:9e:7f:d0:c1:9f:23:50:d9:03:
63:39:13:c6:f1:09:2e:ca:e1:5d:c0:79:f0:a2:4c:
cb:07:51:ec:3c:e4:e2:96:c1:cb:c7:f2:1a:0e:8a:
9d:83:aa:5d:6b:dc:83:30:43:c7:5f:39:48:88:7c:
e7:6b:4f:7d:84:bd:a2:fd:d5:45:b2:b4:de:80:e4:
61:a0:15:7a:d1:8e:6d:8f:63:8d:b8:80:10:f6:79:
11:35:e1:af:23:74:8b:10:4f:7b:d4:85:d0:7f:78:
ff:0e:65:3d:44:d8:fa:4c:43:f6:da:17:f8:29:3f:
7d:4f:3c:04:51:d8:02:bc:4c:40:a7:78:f9:9e:e0:
fd:ab:6b:5a:13:e0:1c:d6:a1:e1:d7:32:80:a3:49:
b7:54:ab:fe:46:1b:90:50:5d:74:9a:f8:85:06:ce:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B2:85:A5:CD:4E:A8:85:5E:28:AB:53:C7:44:A5:C2:94:83:62:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/af3d5ead-fb62-32e0-b394-24df2bcd17b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl
X509v3 Authority Key Identifier:
keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
sbgp-ipAddrBlock: critical
IPv4:
138.129.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d8:89:b9:8e:7a:ce:4d:38:11:53:ff:11:3f:7e:e6:77:8f:
36:51:1f:2b:e7:26:63:83:d4:a3:68:53:f8:d7:22:aa:5d:14:
9e:83:61:67:dd:35:ef:dd:80:f1:52:4b:cd:69:0a:ba:43:49:
fb:7b:49:09:64:5e:d6:d5:2c:57:d1:1b:9e:5b:02:c5:68:cf:
87:9d:b9:65:33:85:9c:bb:c1:91:83:03:19:3c:df:ca:65:6e:
70:0d:30:da:8c:66:4c:c0:54:de:c4:b8:88:78:b6:ea:d2:bd:
d9:11:e0:5c:f0:bc:45:78:72:ee:be:15:58:5f:7a:6b:78:68:
43:3e:a3:b1:e1:05:c1:93:94:11:bc:69:d3:4c:39:01:30:42:
f0:8c:fd:d3:92:3a:36:bb:c3:21:30:4a:af:8c:21:6d:23:b7:
4f:c1:f2:76:08:74:b0:fa:e8:87:d6:b8:ae:2f:bc:93:8b:5c:
8b:5c:2b:49:9c:d2:5d:e7:6f:0f:9d:d5:ec:be:aa:5a:54:17:
9b:49:ce:bc:86:41:04:a9:a0:7b:b8:88:11:53:be:0f:d7:88:
9a:30:09:91:22:2b:1b:75:7f:70:2a:bc:7c:60:74:f1:9a:49:
0f:19:f6:fb:c4:a3:2c:3f:d1:62:f1:7f:86:e7:15:47:d2:ae:
f6:2b:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:13:38 2025 by rpki-client