Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/4b4b587b-8d00-329e-a7d8-12c9214db5e3.roa
File: 4b4b587b-8d00-329e-a7d8-12c9214db5e3.roa (raw, json)
Hash identifier: EiKL/IP3a5QziGD+xakXWI5Vrdjy/L0XrT2gmtWzAyg=
Subject key identifier: 86:EA:AB:19:AC:CC:9D:18:D8:1C:5A:4D:3E:94:12:A1:32:D2:46:BC
Certificate issuer: /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial: 010D0C9F43285848E8D6A9BB40F3696F3CE61F80
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/4b4b587b-8d00-329e-a7d8-12c9214db5e3.roa
Signing time: Mon 17 Feb 2025 05:46:57 +0000
ROA not before: Mon 17 Feb 2025 05:46:57 +0000
ROA not after: Sun 18 May 2025 04:46:57 +0000
asID: 206081
IP address blocks: 23.153.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 17:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:d6:a9:bb:40:f3:69:6f:3c:e6:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Validity
Not Before: Feb 17 05:46:57 2025 GMT
Not After : May 18 04:46:57 2025 GMT
Subject: CN=002b9f13-f7c0-4bcb-86ce-3a0de16afd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:9d:0e:1c:f1:0c:5b:2b:37:6e:87:d8:7c:
68:f7:0a:41:3c:ed:75:a9:8d:c5:19:d3:97:f9:bc:
9a:54:ac:76:e9:44:38:83:40:fa:b4:ed:d1:aa:71:
a2:8a:98:5f:80:a2:5d:96:8e:5d:11:47:45:b8:89:
2c:67:24:8e:6c:46:69:86:9f:28:4c:3d:c7:aa:92:
9b:35:95:86:d2:d6:9f:dd:ba:57:87:97:cf:19:ae:
9a:11:59:4c:29:c2:2d:19:5c:74:94:1d:99:6b:b1:
63:22:98:83:9a:29:f3:0e:bc:08:c3:8b:20:c4:25:
a1:a9:f7:dd:35:04:15:c9:cb:15:67:9e:d7:fa:f3:
aa:6f:2d:af:bf:fb:9a:b8:f2:58:8b:c2:54:a7:60:
63:55:b2:2d:7e:21:8f:b9:bd:6f:cf:9c:52:9a:be:
6e:ff:64:f0:05:47:90:bf:d6:10:0d:52:0c:80:0b:
34:24:98:72:0b:72:27:42:6a:6d:30:82:b9:c7:db:
49:35:84:ca:24:44:72:52:34:47:17:f7:fa:3a:4b:
61:30:c6:81:2f:aa:b9:7f:b4:6c:f4:90:db:e6:8a:
6f:e6:9c:12:c0:02:48:95:84:8b:e3:0c:2c:87:fb:
e9:96:08:32:27:0c:95:f4:aa:d8:33:c1:bf:04:42:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:AB:19:AC:CC:9D:18:D8:1C:5A:4D:3E:94:12:A1:32:D2:46:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/4b4b587b-8d00-329e-a7d8-12c9214db5e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
X509v3 Authority Key Identifier:
keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:37:a8:c0:42:9d:54:31:bf:7a:17:39:4c:a8:52:ba:d5:2f:
7b:2d:8d:21:dc:b9:76:ad:b7:42:a2:3d:e8:db:fc:4d:31:bf:
73:26:e8:d0:d8:32:4b:27:a7:84:37:3e:a1:c5:54:31:b5:82:
25:5a:52:81:e4:77:2a:85:7d:7f:2b:25:99:0f:e1:bf:ce:34:
df:2b:c5:42:4b:47:86:0b:5a:5c:05:1d:8c:52:19:6a:d3:cb:
b7:a2:6d:c4:55:90:7e:24:08:5e:44:58:54:9e:80:6c:fc:f8:
ac:ec:b1:44:4f:ae:d8:0f:dd:46:fa:76:4a:14:1a:84:be:53:
de:6e:0d:36:d3:96:3e:b3:74:e4:8b:41:22:24:49:7e:5e:42:
b7:3e:e6:7a:44:77:46:bf:83:cc:7c:51:17:61:1e:6f:3b:af:
6e:5d:27:fd:f6:51:14:24:0b:8e:04:18:69:2d:f4:b8:e7:f8:
ed:c9:3c:dd:bd:c0:88:c0:7d:63:28:ad:6a:70:12:04:7a:ea:
08:f4:27:71:30:89:cd:fe:de:d1:0d:13:6a:a5:7d:d9:e0:ef:
1e:06:31:6b:d1:c8:66:a9:e2:af:c2:ed:cc:af:9e:a1:c4:ac:
ef:00:4e:c0:53:cf:77:28:26:88:35:7a:6c:4d:69:9c:bf:0e:
45:52:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:53:00 2025 by rpki-client