Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/d43ad295-d75e-3f69-b025-76b3a8084087.roa
File: d43ad295-d75e-3f69-b025-76b3a8084087.roa (raw, json)
Hash identifier: KBeCRhiqPEKe5ntVT3OCyXurMP9GTNr9oEyNon9zMhY=
Subject key identifier: 79:66:59:65:54:C3:BB:16:84:D5:3B:E6:C1:8F:C1:58:24:96:5F:D5
Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial: 010D0C9F432858489E6B6993B66295CBA2B20F80
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/d43ad295-d75e-3f69-b025-76b3a8084087.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 14618
IP address blocks: 198.145.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 23 Jan 2025 14:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:69:93:b6:62:95:cb:a2:b2:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=4cbaa578-53bb-402b-9a37-07992596f980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:29:95:f8:4d:c1:d9:0e:3e:f9:1e:d0:10:
9d:90:df:59:07:91:c4:59:67:35:df:b9:33:a7:cd:
17:e4:f2:87:2b:fe:5e:f5:02:b1:86:2a:f4:62:ee:
46:d2:b2:ca:f6:e3:1f:bb:ad:ce:76:38:e9:12:48:
be:af:43:ca:62:74:c1:7e:c0:a0:42:c4:3f:e6:af:
2a:71:73:58:e6:fb:7e:ba:06:a5:1f:d5:a3:e2:34:
da:97:22:43:9a:03:c1:3d:b5:75:e1:5c:9c:d4:3e:
d5:bb:a7:28:32:79:89:ae:7d:b9:4b:52:5a:44:45:
59:07:e0:75:1e:86:27:c1:b1:57:47:68:4e:76:3d:
2c:2d:6f:5c:0e:b8:2c:c9:89:14:a6:c6:0f:7a:d2:
77:3c:d0:e9:2d:5f:dd:ea:ae:d6:fa:8e:8d:ea:5c:
e7:43:46:89:01:8b:95:b3:00:7e:00:dc:ff:64:42:
5e:2b:ce:a2:52:5d:6c:5c:0c:36:14:0d:1f:52:f3:
ba:5f:5b:a5:a4:a8:1d:23:aa:db:9e:29:98:97:ee:
16:ac:09:38:1c:2a:a3:61:cb:1a:05:d2:57:9a:04:
cf:54:97:02:35:b5:5e:66:c7:0d:c2:50:fa:75:4c:
b4:79:bb:53:20:31:5b:b2:42:f2:7c:f5:24:e1:9a:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:59:65:54:C3:BB:16:84:D5:3B:E6:C1:8F:C1:58:24:96:5F:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/d43ad295-d75e-3f69-b025-76b3a8084087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
X509v3 Authority Key Identifier:
keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:e0:30:04:52:16:01:25:ff:02:d0:83:5f:12:bb:10:dd:a0:
10:90:24:c7:03:b3:fc:46:3b:34:32:dc:b2:4f:73:43:3c:df:
b8:bc:2e:2f:eb:8b:e1:ae:62:63:45:4e:3e:58:1c:ce:5d:6e:
97:ca:e3:3a:66:f4:cc:e3:81:c6:5e:a0:b4:42:d3:6a:6c:ab:
b6:56:f9:02:87:c0:6a:e8:3a:b7:bb:75:57:d0:e0:3f:29:e6:
47:c9:ac:c1:3a:d2:f0:08:6b:4c:bf:50:a4:ea:94:d7:3d:05:
ee:64:ec:c5:d4:d7:1d:db:84:2d:65:14:1a:6c:f8:1f:af:2b:
b4:33:3d:4f:30:39:40:3b:80:95:05:35:39:13:99:98:af:0d:
51:13:97:45:17:8c:92:d6:6d:dd:b3:b8:d7:6b:41:22:7f:22:
e6:af:be:7d:8d:19:04:99:a9:fc:e2:c6:ff:38:e0:ff:3d:69:
e7:70:3a:cb:53:05:e7:58:a8:64:11:f9:8e:ca:f3:5d:13:e2:
8a:94:07:54:9f:aa:73:59:34:da:f2:fd:80:16:6b:06:5a:9f:
20:f5:99:6b:48:46:d5:fe:c0:07:3a:3f:6c:ab:55:b2:94:c0:
46:f6:54:a8:9d:e9:ea:0d:42:12:d2:65:dd:f7:dc:4d:75:c7:
ed:86:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:20 2025 by rpki-client