Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa
File: 844b830e-af15-3bd9-a761-f5bf11f43e9d.roa (raw, json)
Hash identifier: EqsZh9qYmvBIR/+nP6TANbaJw6+BYWVOq/c1cw/zv2g=
Subject key identifier: 93:9D:5D:25:29:B5:10:9A:D9:3F:F4:07:FF:A9:63:3C:C9:CD:6B:E9
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F4F69AC3718AF833AF6CD520
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 18781
IP address blocks: 209.8.27.0/24 maxlen: 24
209.8.75.0/24 maxlen: 24
209.8.76.0/24 maxlen: 24
209.8.187.0/24 maxlen: 24
209.8.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 10:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9a:c3:71:8a:f8:33:af:6c:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=59ac2503-bad2-478d-860e-4724d77c112d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:3f:25:37:7a:51:fc:db:eb:1e:f9:4b:bf:
19:c0:44:44:d2:7b:4e:04:88:a4:70:81:ac:4a:8c:
23:33:f4:c5:bb:06:61:6c:52:99:e1:af:b9:36:ea:
b3:99:52:fb:58:e7:36:be:1b:10:81:7e:7e:0b:93:
0d:03:d3:12:e7:f2:3f:57:0a:b5:40:29:12:9e:51:
f2:5c:35:07:47:6f:45:5f:dd:a1:77:83:3e:cb:82:
3d:1c:04:11:1c:3f:a2:a5:1c:37:a9:73:bf:4c:c1:
7a:37:c9:b0:e9:51:44:07:3d:2b:72:de:86:71:e1:
d4:09:e5:fa:9a:ec:44:cd:ea:34:15:6e:3d:f7:c7:
b8:b3:5d:39:f2:8c:b9:57:14:40:67:50:a3:19:02:
8f:80:e4:ec:9e:95:c9:43:89:90:3d:7f:3e:1b:73:
26:91:a8:87:85:60:80:af:09:54:ad:e1:01:30:67:
4b:55:7c:2a:dd:b2:e6:fd:6d:06:eb:e3:14:5a:7e:
c2:44:b1:57:54:74:ae:1e:09:e4:a8:7b:e5:be:d4:
65:7a:b9:e9:ba:61:dc:2d:dd:32:ea:33:03:8a:47:
62:a3:20:a5:25:35:92:4d:17:02:7d:cc:a3:2f:71:
80:6f:ae:97:cb:e9:bd:39:0f:29:1c:bc:d0:ed:47:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:5D:25:29:B5:10:9A:D9:3F:F4:07:FF:A9:63:3C:C9:CD:6B:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.27.0/24
209.8.75.0-209.8.76.255
209.8.187.0/24
209.8.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:7d:c7:07:51:de:7e:1c:a0:bd:6f:81:ed:8b:8c:69:b2:a2:
03:44:15:df:2f:11:60:6b:ac:9c:bb:49:cf:4f:87:2d:03:01:
7a:e2:0b:27:6a:70:5e:c2:f1:99:67:e7:3f:0d:b2:7a:19:65:
af:10:3a:7f:78:64:85:21:5f:2c:f7:dc:27:fc:eb:39:c1:8f:
5b:ba:17:dc:d1:89:66:b5:29:a9:d7:c0:49:6f:3e:c3:4c:a0:
f0:bb:fa:5f:94:99:31:41:d5:f9:d2:61:8e:51:b5:9a:d4:57:
80:cc:39:9d:e4:da:93:88:7d:39:0e:71:90:77:04:56:40:b8:
eb:d1:40:82:f9:8f:26:93:9c:d6:41:f1:71:1a:d9:fc:8c:0e:
69:cb:21:47:9f:c2:17:f4:68:ee:b6:35:ed:fa:9d:33:e6:23:
96:cb:aa:c7:9b:bd:ee:b9:cf:1d:f3:a3:b0:68:dc:9b:d5:96:
d6:23:14:20:9e:8c:c8:fc:96:94:f9:67:3c:52:9c:c1:31:64:
91:36:3b:19:71:64:61:75:15:d3:88:fa:b6:5f:84:9a:3d:d6:
1c:6b:8f:7b:78:47:bf:b5:ea:c5:08:d5:80:b0:75:b1:dc:20:
cb:0d:cd:4d:79:1b:bc:cb:a3:6e:fa:0c:9d:b6:0d:43:5f:6e:
9f:d7:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:33 2025 by rpki-client