Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1e5088ff-e013-3a07-9d4a-62f7b5093abd.roa
File: 1e5088ff-e013-3a07-9d4a-62f7b5093abd.roa (raw, json)
Hash identifier: K3vlmbv0/d7rdAOlgBnSjfphrVhpuzsdfHXY0kd+ISo=
Subject key identifier: 22:5B:A8:F9:BF:05:F1:A6:32:88:BD:F4:D2:7C:7A:C9:00:D6:9D:D1
Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial: 010D0C9F43285848D3506E5CB50E4CC67F0DB500
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1e5088ff-e013-3a07-9d4a-62f7b5093abd.roa
Signing time: Sun 09 Feb 2025 12:44:30 +0000
ROA not before: Sun 09 Feb 2025 12:44:30 +0000
ROA not after: Sat 10 May 2025 11:44:30 +0000
asID: 834
IP address blocks: 206.174.134.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 17:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:50:6e:5c:b5:0e:4c:c6:7f:0d:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Validity
Not Before: Feb 9 12:44:30 2025 GMT
Not After : May 10 11:44:30 2025 GMT
Subject: CN=954765fb-e9de-42d3-998e-eff45a500fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:4d:0d:39:7b:2a:ed:55:3a:80:44:c6:4c:
55:15:c8:1e:f4:b5:78:0d:89:4b:bf:d5:14:88:46:
d7:e0:21:13:32:d9:e5:f0:90:c2:b0:16:19:29:f1:
c6:27:6a:04:eb:c7:d9:02:2d:30:a8:94:a7:c6:c1:
ba:38:91:8f:72:bb:49:02:65:e6:b0:95:5c:df:8b:
79:c0:13:1f:7e:a8:3c:b2:2a:49:0c:51:12:52:6b:
55:a9:39:ff:1c:76:8d:2e:b2:b7:38:07:aa:13:b8:
0c:a9:88:50:ea:f0:7c:9c:f5:38:fa:4c:1f:3c:cf:
57:0e:da:56:4d:e3:d2:be:20:fa:ff:b5:74:7a:cf:
3c:6b:b4:f1:73:65:60:11:0f:e9:ad:27:34:1c:0b:
08:99:ad:b0:55:e3:82:0d:31:2e:65:83:e5:04:f7:
94:14:bc:5d:f4:42:20:79:7e:20:69:a2:9d:d8:ad:
db:ef:f3:ba:c7:53:ec:eb:7a:79:a2:0b:4e:81:94:
ff:28:2f:ac:79:75:8c:a1:db:20:02:96:b2:1a:37:
54:40:2d:7f:bc:eb:5f:cd:d1:25:e5:2a:e0:77:3f:
d4:34:ea:ff:32:04:da:0c:99:06:11:ab:02:45:7b:
4f:98:dd:0f:a0:17:6c:ab:fb:64:be:51:e0:28:62:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:A8:F9:BF:05:F1:A6:32:88:BD:F4:D2:7C:7A:C9:00:D6:9D:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1e5088ff-e013-3a07-9d4a-62f7b5093abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
X509v3 Authority Key Identifier:
keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
sbgp-ipAddrBlock: critical
IPv4:
206.174.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:d6:b7:24:25:97:2e:3e:bb:f3:cf:2d:85:46:c0:31:5d:6f:
2e:cf:aa:60:77:e0:fb:6e:1c:26:ca:9e:64:e8:22:e0:01:88:
36:03:4d:8d:1f:50:11:95:97:df:81:1a:3d:52:cc:98:00:f4:
a7:e2:5b:82:ce:25:3d:e6:58:49:2b:41:a1:e9:b8:f9:60:f6:
2f:dc:f5:a7:7a:ee:c4:a5:c6:ff:6a:3c:f8:12:4d:73:04:cc:
ee:3d:55:8e:c1:47:67:dd:7a:df:b2:11:40:07:74:45:66:6d:
2b:61:8e:50:32:e3:60:da:32:e9:e1:50:10:af:0a:08:92:41:
d0:e0:61:74:31:62:fb:eb:a1:8d:b0:0a:a2:92:b0:ee:eb:4e:
7e:66:3a:e6:51:57:f4:a1:cd:4c:71:77:10:c1:a9:da:e2:b8:
d1:e5:3a:71:8d:70:87:cf:81:c8:21:04:13:6c:d0:a7:3b:b1:
cc:60:66:6d:e1:9c:44:a4:50:4e:6a:41:08:01:c1:24:13:c2:
c5:f9:94:ac:2d:2a:bb:93:0b:ad:7a:fc:74:14:9f:22:7a:7c:
15:da:f9:3a:e0:9b:da:c7:95:43:65:d0:b0:10:c4:36:8f:a0:
8f:59:4d:1e:5a:ae:d9:f4:2f:88:20:da:d4:d0:88:9c:93:e0:
31:50:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:57:21 2025 by rpki-client