Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/893411f4-66c7-3f73-95d8-069c1d591b27.roa
File: 893411f4-66c7-3f73-95d8-069c1d591b27.roa (raw, json)
Hash identifier: QQXTZgySoMJiD2yPfv2BX1S8+AdWLiw4S617qegDnDw=
Subject key identifier: 7B:92:2C:3D:A4:CC:5C:FC:26:F0:C0:28:5F:15:1C:FF:0F:2C:DF:B3
Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3
Certificate serial: 010D0C9F432858494E3C9B90DA16F1318035A180
Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/893411f4-66c7-3f73-95d8-069c1d591b27.roa
Signing time: Tue 25 Mar 2025 13:29:00 +0000
ROA not before: Tue 25 Mar 2025 13:29:00 +0000
ROA not after: Mon 23 Jun 2025 13:29:00 +0000
asID: 13538
IP address blocks: 198.32.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 15:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:3c:9b:90:da:16:f1:31:80:35:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3
Validity
Not Before: Mar 25 13:29:00 2025 GMT
Not After : Jun 23 13:29:00 2025 GMT
Subject: CN=abf48069-8749-41cc-82d0-508eae36d160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:82:ef:e2:f4:24:a1:9f:55:e9:8d:6b:da:
87:ef:d5:89:fa:f3:50:0c:f1:dd:d5:1d:03:c7:7f:
40:3f:55:d0:24:06:47:57:8a:b9:a1:37:14:10:b2:
81:7a:9e:71:e4:27:72:dd:63:97:51:c5:f0:53:5e:
b0:ac:d8:91:b5:89:f0:30:aa:74:db:68:58:1f:26:
b1:9b:1e:e8:bc:95:b1:88:a2:af:6a:0d:ff:5e:3c:
a0:19:7b:e9:dc:df:57:f1:a5:69:d7:e0:a1:90:02:
53:9e:90:a2:2d:55:de:33:64:64:cc:80:6e:05:05:
27:26:1f:14:e7:5f:23:53:2d:1b:17:44:8d:3a:1e:
7f:db:4b:71:08:a8:94:c4:72:d4:50:30:81:82:89:
7f:6a:4d:31:e4:c0:4a:6d:92:f9:f5:73:79:04:1c:
10:02:9b:58:47:a2:b9:c4:c0:5c:d7:5c:d6:57:6a:
e9:fd:d1:95:3b:b7:5e:61:5f:ee:b1:60:e9:d8:9c:
de:04:cf:03:2b:aa:d7:18:9a:0b:43:37:e8:4c:c3:
40:26:cb:50:02:2c:42:5a:cf:2a:5d:0c:90:bb:4f:
a9:f5:50:32:63:e8:dc:e2:7d:6e:19:9b:52:8d:65:
41:3c:e6:e8:7b:97:81:03:da:63:98:dd:8f:eb:0f:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:92:2C:3D:A4:CC:5C:FC:26:F0:C0:28:5F:15:1C:FF:0F:2C:DF:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/893411f4-66c7-3f73-95d8-069c1d591b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl
X509v3 Authority Key Identifier:
keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.32.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:20:1f:75:dd:9a:7e:4a:61:be:6e:bf:fb:d3:1c:29:2d:11:
2f:89:23:b0:f0:96:e9:d2:63:65:46:de:92:95:00:fc:1e:5f:
72:05:38:0e:81:d1:e9:03:e5:7e:3a:fa:92:a8:fb:98:9a:5a:
16:40:97:02:c9:26:57:e6:c9:00:f4:d9:fd:4b:24:83:ab:0f:
76:ee:1e:9d:aa:55:12:41:30:fa:14:99:2d:95:ad:41:bc:d0:
b6:23:75:a8:df:60:33:b9:fb:56:e2:cf:1f:c2:c7:4f:55:c8:
4a:a9:97:23:30:1c:f8:08:03:f5:30:e2:86:46:f2:ed:f9:49:
5b:6d:bd:c5:19:6a:b0:6b:88:74:4f:cd:03:f5:4e:a2:98:4a:
ab:b2:a6:92:1e:90:ad:87:86:15:00:3a:25:12:bd:46:14:6d:
1e:d1:bc:2f:6c:27:2c:b6:fc:ac:d0:1a:26:4b:63:3c:e3:92:
50:4d:39:b3:49:9a:ab:19:74:1b:e1:40:60:1a:01:21:7c:4e:
91:0a:98:61:84:58:d8:e4:8c:2f:ef:e9:1d:19:51:39:ec:5f:
f0:79:9d:ab:b8:41:a1:25:4c:ca:49:08:42:f6:4c:42:46:12:
aa:25:09:e4:ae:4d:db:81:f0:69:3b:b3:ea:c6:30:dd:12:cb:
d3:12:69:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:49:54 2025 by rpki-client