Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0476228b-9b22-319a-8d6c-eca1f731b0fa.roa
File: 0476228b-9b22-319a-8d6c-eca1f731b0fa.roa (raw, json)
Hash identifier: gomBKsEFxdVZf35f6LR40y+UUIdQ15zKSNXPRfwRd5A=
Subject key identifier: 35:FC:C2:2C:2A:C7:D7:AE:83:31:27:48:48:69:03:1A:F5:5B:50:AB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400E0F19E62C6AA7CADD640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0476228b-9b22-319a-8d6c-eca1f731b0fa.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 9498
IP address blocks: 23.198.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 12:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e0:f1:9e:62:c6:aa:7c:ad:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=fd56ef52-9610-4a6b-87c9-d614eb966d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:5d:cb:37:29:ab:ae:91:05:fd:37:3c:c6:
b6:86:2f:1e:74:d7:09:7b:a8:da:47:69:e5:e6:e1:
4d:da:b0:9c:37:e7:1c:f3:7f:3d:92:e3:e0:20:0c:
3e:cf:75:62:8c:03:67:4c:e4:3f:cc:c9:87:21:8b:
f6:d1:1e:55:32:c7:37:0c:1b:51:aa:90:c8:26:1d:
11:90:de:10:78:ce:31:d0:51:58:87:fb:f9:91:e8:
34:bd:bd:18:d3:50:d1:ed:b4:3d:28:e4:cf:8e:97:
37:ab:49:3c:0d:91:39:04:40:e7:56:74:41:ef:7b:
0a:db:28:ec:15:33:99:2c:b4:da:00:cf:9a:f8:25:
1a:d9:24:0c:9b:1f:b1:75:2e:12:5a:4d:21:d7:81:
31:39:67:de:d8:bb:0e:22:b7:a2:6e:8d:5c:54:44:
30:35:67:00:7a:3a:63:4e:29:62:98:37:4a:7e:44:
86:bd:f0:05:06:95:08:16:4e:71:aa:4b:17:c8:5f:
2a:81:26:20:31:76:4f:da:bd:94:26:23:0a:84:dd:
cf:03:b7:46:4e:4c:3d:c5:f7:ca:fc:df:8c:88:9e:
f6:e3:c2:44:fe:1e:65:91:bd:4a:10:98:0c:2e:2d:
b5:9c:56:2b:08:26:58:70:44:ac:da:7c:2d:7c:3b:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:C2:2C:2A:C7:D7:AE:83:31:27:48:48:69:03:1A:F5:5B:50:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0476228b-9b22-319a-8d6c-eca1f731b0fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.198.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:65:1b:0b:d3:77:60:fd:b8:9e:5f:36:06:12:08:18:7f:67:
3a:f2:59:7f:02:f4:9e:c7:8d:8f:f2:3b:20:bb:cb:7c:82:bd:
3b:42:79:36:1e:d1:8e:79:b3:92:00:cf:93:77:4e:c7:a8:98:
53:c4:07:cf:1e:5c:3e:db:37:8a:30:3f:6f:2e:51:bc:fd:44:
ac:64:50:5c:5a:b6:44:aa:b9:8a:c3:2e:97:ee:ed:63:07:4f:
0a:81:4c:c5:87:38:38:6b:e6:7b:bf:06:3c:93:3f:55:4a:2c:
f1:5b:83:38:37:b7:77:dd:db:11:5b:af:5c:f2:7f:50:6a:f6:
b8:3d:0e:93:05:97:a3:1b:4e:72:5a:54:56:bd:d5:45:6f:00:
36:44:98:e3:8a:31:5f:49:94:a1:53:f9:57:24:22:64:4c:f2:
ef:54:67:ce:05:4c:29:2d:b9:5a:74:54:54:2c:27:e0:fa:2e:
2b:4b:c5:28:1f:ae:2e:72:0a:dd:a0:a7:fc:2d:ef:a0:93:70:
ff:ed:95:d3:9f:75:6d:73:af:fd:db:c5:e9:d7:be:61:11:7c:
31:74:ad:34:fa:c6:b2:49:d4:1e:b9:aa:23:ea:56:d0:8a:57:
76:48:3a:61:e2:7f:cd:e7:4d:67:05:b5:b3:9e:30:08:03:ce:
88:ef:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:12:42 2025 by rpki-client