Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8c5779a-63f4-3916-b893-c4f56bef3966.roa
File: d8c5779a-63f4-3916-b893-c4f56bef3966.roa (raw, json)
Hash identifier: YzS2jcvYjw8wp8vz8/sQAX3po9/gP/pmjDG7V/D4ZN4=
Subject key identifier: 0C:9A:CD:E4:5D:32:5C:DA:D9:71:F0:0F:91:F8:FE:33:56:9E:F0:7E
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F43285848ECAFEDF1D8C59859F1711100
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8c5779a-63f4-3916-b893-c4f56bef3966.roa
Signing time: Tue 18 Feb 2025 14:52:08 +0000
ROA not before: Tue 18 Feb 2025 14:52:08 +0000
ROA not after: Mon 19 May 2025 13:52:08 +0000
asID: 2914
IP address blocks: 72.9.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 20:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:af:ed:f1:d8:c5:98:59:f1:71:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Feb 18 14:52:08 2025 GMT
Not After : May 19 13:52:08 2025 GMT
Subject: CN=7a2dcb2e-d9a1-4119-9f43-27640ca44625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:53:d3:c4:3b:b9:5e:d9:bd:36:03:6d:7c:
d4:57:de:d1:20:68:c3:c0:da:f0:23:d6:54:f8:40:
22:06:e9:d7:f6:3e:88:77:2f:a2:bd:fd:95:1c:85:
da:88:45:2e:d1:a2:16:21:a3:75:fb:22:15:5d:76:
10:8c:15:8a:68:60:c7:72:a0:f6:a2:4a:6e:2b:ab:
f6:68:81:e5:64:c5:60:fc:8d:c1:45:d7:bd:a7:af:
11:8e:a4:2a:fd:c5:23:fc:23:10:38:50:80:89:23:
7f:2c:4a:6e:83:9c:42:fc:0e:e0:6a:ab:80:9a:39:
3e:21:77:0e:8f:d9:1f:65:a5:7d:44:24:e9:00:15:
07:70:68:78:ee:1b:4c:15:66:e4:88:e6:d0:59:f4:
7a:0b:96:61:09:18:9c:0c:15:8c:a2:9d:e0:33:52:
85:f3:55:57:1d:a3:a3:c9:8b:f4:74:a7:49:bc:e4:
33:e0:c8:61:74:e9:eb:d3:d6:0f:80:c7:d1:cb:75:
6e:73:e1:b9:f5:56:fc:78:b4:12:f9:38:73:ca:a1:
dc:66:7e:6b:91:a8:f5:ce:fd:e3:07:07:9b:f3:f5:
82:e7:04:24:f0:43:1c:c5:64:7f:41:9f:93:b6:a1:
0f:1b:48:29:d4:15:a5:d6:30:9c:89:7b:1a:a3:50:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:CD:E4:5D:32:5C:DA:D9:71:F0:0F:91:F8:FE:33:56:9E:F0:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8c5779a-63f4-3916-b893-c4f56bef3966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:ce:0a:53:a4:11:cc:6c:3f:19:54:78:41:84:3f:66:95:65:
20:d0:c9:05:6c:22:93:0d:0e:bc:65:c8:24:68:b8:89:8b:21:
d6:45:0f:02:3a:a0:7e:e7:f9:83:f0:28:ab:9e:f1:df:e0:9f:
df:3c:64:41:f2:b6:ac:ed:9d:20:93:6a:2f:fc:45:37:98:c3:
4f:e5:b9:c5:07:a2:a4:dd:99:42:31:d5:e5:64:7b:6b:bc:1c:
ab:b9:54:50:4e:ff:38:4a:25:84:1a:fe:0c:eb:7a:45:2d:77:
ee:a5:c2:3f:69:4b:02:09:57:3c:ef:dc:c8:3c:9a:f0:4d:38:
eb:76:3c:00:3c:7b:e9:2b:01:d3:41:9a:d8:ea:bf:e3:2a:1e:
9e:90:43:9e:cc:3c:db:0c:f4:88:ef:f1:96:a9:46:4e:13:99:
f4:50:91:6b:75:42:fc:22:9b:75:b2:1b:70:3d:84:6c:0d:98:
39:bf:9a:00:cb:a0:e6:d0:15:31:7a:79:b8:6c:a0:80:31:de:
f1:0c:6f:63:dc:a0:02:1f:34:4e:0d:01:7f:69:66:5c:96:1e:
a1:d5:1b:14:a4:7b:7b:d7:3f:b9:d3:fd:f4:dd:7f:80:dc:ab:
b6:a6:89:65:33:08:d0:42:9d:f6:75:de:53:4c:a1:49:d1:58:
2c:13:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:58 2025 by rpki-client