Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/c5d3e825-80ad-3096-a9db-d022e01dd3b1.roa
File: c5d3e825-80ad-3096-a9db-d022e01dd3b1.roa (raw, json)
Hash identifier: DbWfKcNeeb42AhFKJvlwGJPb62FQtLU1/nneXeRsAnE=
Subject key identifier: 09:69:5D:D5:40:83:FC:96:37:34:3D:F9:DB:2B:62:F0:46:C1:AC:8B
Certificate issuer: /CN=a66c9316-dcc4-4df1-a7eb-e47a07e90a6a
Certificate serial: 010D0C9F4328584941497512A48FC1D293A2FB00
Authority key identifier: 3A:27:B9:0D:E5:50:B2:FA:F6:5C:E5:F6:38:AB:79:26:D3:5C:01:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/c5d3e825-80ad-3096-a9db-d022e01dd3b1.roa
Signing time: Thu 20 Mar 2025 22:09:22 +0000
ROA not before: Thu 20 Mar 2025 22:09:22 +0000
ROA not after: Wed 18 Jun 2025 22:09:22 +0000
asID: 20454
IP address blocks: 204.154.151.0/24 maxlen: 24
2602:fc47::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 23 Mar 2025 04:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:49:75:12:a4:8f:c1:d2:93:a2:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66c9316-dcc4-4df1-a7eb-e47a07e90a6a
Validity
Not Before: Mar 20 22:09:22 2025 GMT
Not After : Jun 18 22:09:22 2025 GMT
Subject: CN=3a78a0eb-d471-4504-bf82-208fad9d2497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:4f:6b:c9:ac:72:7d:72:85:84:dd:65:62:
66:7d:43:b9:f2:e2:bd:4f:db:9d:8f:cd:84:39:9b:
36:52:36:88:c1:ab:53:62:f1:81:af:4f:1c:ad:78:
a7:70:8c:b6:f5:be:d4:07:78:79:e1:57:d1:da:26:
40:83:66:42:f6:57:ff:92:2f:54:6c:44:d8:5b:b4:
ed:fd:14:46:be:bb:53:5f:89:70:18:70:11:22:4b:
af:1d:4e:48:65:2e:ff:ba:39:d7:92:d4:5c:25:76:
8c:8c:3d:15:4a:03:04:b6:90:5a:aa:b5:40:c2:fb:
68:43:f3:e6:04:2e:6e:cb:95:ae:2f:da:28:45:4f:
2f:b0:0b:f7:3a:5d:bc:a9:4e:67:d4:0b:c5:23:33:
1e:32:3d:18:ff:e4:f9:da:4b:de:9a:25:52:11:ad:
98:fd:6a:32:ad:f9:6f:88:53:b1:a7:c2:43:cc:40:
70:58:01:eb:33:99:4a:d2:8a:83:72:12:50:41:0e:
12:66:eb:a2:77:85:4c:45:e6:b3:38:3d:67:af:c6:
e0:9e:e8:4b:19:31:a3:10:13:ec:76:ea:47:92:bf:
34:bb:5b:a1:68:56:69:b4:9e:fe:1a:24:ed:5a:8d:
08:f3:cd:59:98:a7:53:fb:6d:a8:a8:57:0b:a1:20:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:69:5D:D5:40:83:FC:96:37:34:3D:F9:DB:2B:62:F0:46:C1:AC:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/c5d3e825-80ad-3096-a9db-d022e01dd3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.crl
X509v3 Authority Key Identifier:
keyid:3A:27:B9:0D:E5:50:B2:FA:F6:5C:E5:F6:38:AB:79:26:D3:5C:01:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.154.151.0/24
IPv6:
2602:fc47::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:6b:b3:84:71:6a:84:6a:be:3e:4e:49:fe:42:3c:27:3a:4b:
4d:e3:ec:b4:05:4e:d4:13:0b:4b:10:17:cd:b8:73:72:e8:bf:
7d:40:b4:67:14:f5:0f:05:40:be:fd:59:09:82:ea:ca:2a:9d:
f0:b0:26:10:cc:7e:0b:f7:c6:7e:d2:e4:30:bc:fb:0f:b7:7b:
00:65:4f:52:11:9a:02:aa:e3:ae:80:2a:48:15:2b:06:91:23:
3b:b7:d8:27:55:e5:69:57:f7:b1:7d:89:d2:86:b9:79:0e:8a:
94:63:20:96:a9:80:fe:a1:64:3f:59:f1:6b:91:dc:f6:3b:67:
3e:03:31:64:c0:85:d5:1e:ac:46:7e:e1:37:a1:8a:1d:0c:c1:
01:82:01:d7:05:48:1c:49:b0:33:aa:1e:4e:26:e8:ae:97:f7:
04:61:5b:35:ae:25:2a:35:a8:9a:79:68:aa:62:7a:0e:12:62:
84:1d:22:39:3b:21:2d:7e:bc:3e:f3:b7:a5:ed:6f:fe:fc:8b:
b0:72:e5:97:09:08:20:21:7f:7d:cf:a4:9e:83:9a:fb:b3:c3:
0a:2b:fa:96:c6:b6:73:fa:67:0f:1c:37:f4:7f:4a:23:3c:5b:
83:69:12:c6:8f:30:b6:2a:cb:22:66:f8:66:61:01:23:5b:f1:
45:1b:93:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:38 2025 by rpki-client