Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/aa592a41-edda-3b74-bc57-1dcd57ebd32c.roa
File: aa592a41-edda-3b74-bc57-1dcd57ebd32c.roa (raw, json)
Hash identifier: EvdQTBmCf+YKWjENDo+0Fo/LlZ9KHQBKI9ZG2K+z4zA=
Subject key identifier: F0:CF:E5:80:00:C4:66:D9:E8:40:C0:EB:64:D9:93:79:19:D7:71:0E
Certificate issuer: /CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
Certificate serial: 010D0C9F43285848FDCF42787E67060BD4744D80
Authority key identifier: 74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/aa592a41-edda-3b74-bc57-1dcd57ebd32c.roa
Signing time: Mon 24 Feb 2025 18:04:00 +0000
ROA not before: Mon 24 Feb 2025 18:04:00 +0000
ROA not after: Sun 25 May 2025 17:04:00 +0000
asID: 62681
IP address blocks: 192.206.32.0/23 maxlen: 23
192.206.32.0/24 maxlen: 24
192.206.33.0/24 maxlen: 24
2620:3b:4000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:cf:42:78:7e:67:06:0b:d4:74:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
Validity
Not Before: Feb 24 18:04:00 2025 GMT
Not After : May 25 17:04:00 2025 GMT
Subject: CN=879483aa-84d1-4be3-ad7c-219d5fa57407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:58:a1:1a:90:27:b0:0c:af:4d:80:70:17:
39:56:c1:a1:07:cf:82:c1:7e:fb:ac:54:9c:d1:f6:
a5:6a:c7:c0:4d:ec:20:5c:66:b4:5c:b2:ec:05:88:
31:3a:51:75:06:e7:d6:13:65:bb:54:a9:be:ba:a0:
a2:92:6a:a4:85:ed:71:0a:19:11:a8:f4:56:47:a7:
d1:87:48:18:4b:0b:49:3d:83:6e:16:60:5b:0a:84:
0e:97:d2:df:b4:5c:90:39:83:ae:34:96:27:b8:86:
c5:35:31:bb:ee:eb:8f:17:07:55:ef:03:85:b4:a7:
f8:60:47:dc:1e:db:8d:8d:d4:5b:92:7a:72:9d:7f:
6e:94:55:67:f2:63:e5:1e:2f:8e:9e:66:5d:82:7a:
63:0b:d6:00:2b:9a:bb:be:0a:7a:3e:fa:fb:02:4a:
13:30:86:80:ab:ca:96:f1:fc:f2:82:ea:59:cf:27:
97:c3:8e:f7:ba:4a:7a:96:5f:51:83:b4:6b:08:f5:
96:94:00:b2:a5:68:5b:ec:57:f1:bb:3e:2f:1f:38:
8b:fc:02:35:b0:ec:78:d8:48:f4:1d:5d:95:91:86:
bb:e3:8d:4e:ed:a4:b1:ae:c7:0d:55:68:5b:e5:7d:
6e:15:eb:f0:bb:99:00:de:49:43:b0:05:92:cf:d6:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CF:E5:80:00:C4:66:D9:E8:40:C0:EB:64:D9:93:79:19:D7:71:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/aa592a41-edda-3b74-bc57-1dcd57ebd32c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl
X509v3 Authority Key Identifier:
keyid:74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
sbgp-ipAddrBlock: critical
IPv4:
192.206.32.0/23
IPv6:
2620:3b:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:34:4a:ec:19:b8:40:39:88:cd:49:47:97:ae:45:ac:ce:f7:
e0:6c:69:2c:d0:11:09:b5:3d:94:ab:ee:1c:01:0e:4f:1c:29:
d1:99:24:ab:04:57:d8:4a:06:9f:74:41:23:28:9f:89:bd:5e:
00:5d:53:49:9e:c8:bb:8d:1a:87:36:47:ad:09:cc:ff:d9:d5:
6c:5d:d7:fd:0a:89:fb:f8:f0:78:0b:01:bd:61:71:50:83:21:
17:33:34:a4:28:42:fc:2f:b4:c3:ce:65:3d:f7:9c:f3:f4:11:
0c:98:e3:90:81:06:de:cf:85:56:08:81:2c:a4:ab:e9:de:93:
26:19:31:28:0a:7c:a2:3b:d5:6f:01:35:56:f5:4e:cd:97:01:
d3:3d:69:50:a5:62:9f:12:4b:03:76:af:a2:2c:9a:9c:1a:d9:
28:52:4d:0c:fc:a4:a8:2f:86:46:a5:3e:e4:2e:64:82:8a:77:
7f:5e:e3:70:0d:bb:20:bb:32:0b:3c:de:bf:db:78:11:31:0c:
a5:c7:fb:3c:5a:fc:d5:e8:da:b9:27:fc:cc:7f:87:f9:51:55:
6f:db:09:13:50:2f:2f:ba:25:de:65:f5:fb:7d:ea:50:5e:91:
0d:9d:76:ea:e6:cf:b2:f5:df:56:1c:2d:a6:66:5b:bb:35:9e:
cc:a6:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:35:33 2025 by rpki-client