Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/8997e866-13e6-3523-9d8c-04a2ea859df3.roa
File: 8997e866-13e6-3523-9d8c-04a2ea859df3.roa (raw, json)
Hash identifier: NOAMisgLJw32WkY9DsnPsdPELo3LHkLO7uLkQ2fM5XI=
Subject key identifier: 64:F3:C1:1E:10:7F:0B:4D:58:97:BD:D9:87:54:FF:14:B8:00:72:9D
Certificate issuer: /CN=a25dba35-fbce-4e02-ac3e-dba534f71021
Certificate serial: 010D0C9F43285849576E07F1673BE2C615797700
Authority key identifier: EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/8997e866-13e6-3523-9d8c-04a2ea859df3.roa
Signing time: Fri 28 Mar 2025 20:30:51 +0000
ROA not before: Fri 28 Mar 2025 20:30:51 +0000
ROA not after: Thu 26 Jun 2025 20:30:51 +0000
asID: 7018
IP address blocks: 209.94.64.0/24 maxlen: 24
209.94.76.0/24 maxlen: 24
209.94.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 00:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:6e:07:f1:67:3b:e2:c6:15:79:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a25dba35-fbce-4e02-ac3e-dba534f71021
Validity
Not Before: Mar 28 20:30:51 2025 GMT
Not After : Jun 26 20:30:51 2025 GMT
Subject: CN=ea8e2913-820c-4837-b539-465a351aa745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:92:84:84:9d:76:ce:cc:e1:c2:cd:bd:3d:
5c:58:b4:32:2b:68:ff:80:cf:c8:93:56:07:7a:3e:
bd:8f:66:b3:31:a0:bc:72:c5:10:77:38:13:53:b2:
75:3b:7f:ab:62:ef:3b:a3:b7:65:b7:97:37:53:9a:
30:b5:e5:8b:4f:d3:42:d4:3e:e8:83:c2:35:dd:43:
0a:b3:35:51:fd:b0:c2:37:2f:19:98:9b:ee:66:78:
3d:f8:be:78:b6:33:9d:14:94:db:19:f4:ca:c2:46:
16:7d:39:8c:4d:f1:21:d5:93:3c:3e:01:fc:e5:85:
d6:e2:b8:a7:41:f2:ae:d2:b1:ed:d2:cb:35:87:cf:
49:0e:6e:51:f6:87:7f:ae:0e:ef:bb:b2:94:42:2c:
be:51:f8:dc:06:02:dc:9a:37:72:95:07:c4:87:75:
2a:6d:04:8a:89:ba:e7:3f:51:20:bc:cb:ac:41:0d:
68:9e:9d:a9:83:06:a0:28:1f:22:fb:13:33:94:63:
b0:3c:42:86:9e:45:24:14:1e:be:37:d0:5c:b7:35:
eb:ad:8d:a1:54:77:a4:52:97:4e:26:c8:a1:29:bd:
97:20:86:c4:6b:cc:30:68:07:e5:ed:8f:39:8d:b1:
5e:3f:63:0b:e8:f0:cd:25:e2:2a:16:2e:ae:20:b3:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:C1:1E:10:7F:0B:4D:58:97:BD:D9:87:54:FF:14:B8:00:72:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/8997e866-13e6-3523-9d8c-04a2ea859df3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.crl
X509v3 Authority Key Identifier:
keyid:EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer
sbgp-ipAddrBlock: critical
IPv4:
209.94.64.0/24
209.94.76.0/24
209.94.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:a0:f7:23:09:bb:c4:85:b5:9c:ad:a2:95:52:1e:1f:22:14:
49:b2:ec:a6:8b:59:fe:00:1a:89:a4:e5:3f:ec:8c:3b:d7:6d:
74:95:bc:83:04:28:f7:65:fc:08:a0:7b:e8:a9:15:0b:a6:d0:
26:fc:3e:b4:fe:90:af:42:fe:3c:c0:b0:9e:fd:93:d5:b5:9b:
8d:6a:83:23:b5:5a:47:d3:59:7b:42:d1:b8:ef:66:8b:d5:aa:
6b:03:53:76:c6:d2:23:ae:9b:bc:9d:85:0e:f6:29:77:7c:7f:
11:0a:67:1f:53:48:6a:e6:5f:bd:b5:46:8b:18:fa:1b:4b:49:
05:a3:1a:ad:4d:d1:77:8a:aa:6f:8e:ab:70:71:92:80:79:83:
82:89:ff:09:63:eb:7b:f3:d2:c9:ae:59:2d:d2:9a:3b:49:89:
4a:0e:d4:56:c2:2e:4d:ff:97:ff:dd:c2:f4:7a:7a:93:b0:3c:
b8:bf:32:ac:f7:7b:df:f8:9d:81:0c:01:48:e1:d6:c7:1b:1d:
03:a1:46:ad:3a:e4:bf:fb:0c:21:71:5c:68:bc:35:ae:12:63:
d7:c5:53:e8:a1:e7:db:a9:83:51:7d:6f:7e:8c:06:cd:0e:9e:
d7:be:e8:4f:26:b5:e0:77:b7:65:4d:a0:f0:41:b2:a1:cd:22:
6a:e5:a0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:10 2025 by rpki-client