Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9a0b1e7f-4497-33a0-9ea9-070bb5d758e5.roa
File: 9a0b1e7f-4497-33a0-9ea9-070bb5d758e5.roa (raw, json)
Hash identifier: CVVbRkHPP3JuwEhsUv3g5Ha4orjuykZBPDfgsQCubd8=
Subject key identifier: A7:F5:44:81:05:47:1E:0D:30:0F:A5:79:D6:8C:D4:40:4F:96:AC:28
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F43285848A1D137F02EF9B1759B6E6E80
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9a0b1e7f-4497-33a0-9ea9-070bb5d758e5.roa
Signing time: Wed 22 Jan 2025 19:13:35 +0000
ROA not before: Wed 22 Jan 2025 19:13:35 +0000
ROA not after: Tue 22 Apr 2025 18:13:35 +0000
asID: 329007
IP address blocks: 67.214.179.0/24 maxlen: 24
206.212.243.0/24 maxlen: 24
206.212.245.0/24 maxlen: 24
206.212.247.0/24 maxlen: 24
206.212.250.0/24 maxlen: 24
206.212.252.0/24 maxlen: 24
206.212.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 18:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:d1:37:f0:2e:f9:b1:75:9b:6e:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Jan 22 19:13:35 2025 GMT
Not After : Apr 22 18:13:35 2025 GMT
Subject: CN=e11b9fe2-5a68-4cc2-8ab2-336cb4dcbe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:7c:41:9a:eb:27:67:67:cc:c6:6b:ff:82:
ca:d0:1e:5a:e7:d9:87:fc:ae:98:01:ce:93:8c:88:
86:7e:0d:20:41:3a:54:28:2e:a5:78:48:8a:00:71:
31:38:46:27:4c:5e:1b:3c:85:46:0e:e1:bd:6b:6d:
dd:81:f6:2d:07:d6:ea:6b:67:37:a1:7c:3a:6b:83:
9c:77:a1:f1:6f:56:75:d5:75:84:5f:49:51:8e:c7:
84:d8:62:f6:a6:f6:34:05:1b:19:ea:f0:03:ed:f5:
9f:86:cc:1f:24:76:71:ff:4f:dc:0c:61:6b:99:c1:
f0:80:85:25:f7:15:ff:d7:f6:ea:86:3b:d0:1d:a0:
cd:69:9a:f0:f0:2e:2f:88:23:0c:e3:9c:0d:4c:9d:
8c:8b:1c:4e:1f:bb:9e:a9:5a:35:6e:7f:f0:35:56:
c3:e8:46:90:14:b1:8b:de:ea:64:f7:55:85:21:8a:
51:ca:56:79:8e:f5:45:e9:c9:1b:72:00:0e:db:03:
ee:ac:06:1f:f4:62:99:60:cb:cd:ec:53:42:21:4d:
2e:c9:bf:a4:e1:b8:34:fe:8c:f6:56:c8:4a:ce:64:
65:15:39:95:72:50:41:cd:db:18:26:1c:61:17:a0:
82:e1:97:ca:cd:99:5d:e0:33:9a:07:30:e0:d5:1a:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:44:81:05:47:1E:0D:30:0F:A5:79:D6:8C:D4:40:4F:96:AC:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/9a0b1e7f-4497-33a0-9ea9-070bb5d758e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.179.0/24
206.212.243.0/24
206.212.245.0/24
206.212.247.0/24
206.212.250.0/24
206.212.252.0/24
206.212.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:65:bd:a2:f5:f4:79:b2:90:a9:c5:df:e2:c2:29:9a:1a:bf:
4e:22:5f:1c:61:1f:03:dc:0f:56:90:5a:3d:fc:8c:cd:ce:bb:
4e:18:10:09:ad:fa:eb:28:74:18:23:08:3e:f4:bf:1d:3c:d0:
b8:1b:90:17:51:92:94:2f:c3:e8:a4:3c:d6:eb:08:95:67:80:
cf:71:9c:6c:05:75:87:8b:58:b8:e4:f0:72:92:90:54:f6:7f:
23:fa:b3:db:66:de:7e:cb:33:7c:32:f7:31:1c:17:b9:d5:fb:
c9:0c:47:bc:a5:66:f0:3c:0a:54:18:c4:91:07:7a:25:48:8b:
0c:bf:39:97:b0:cf:1c:ea:6c:93:9f:af:a0:ff:20:3d:ff:cf:
3b:c1:51:58:fc:95:f2:64:cb:aa:ec:eb:ad:4e:f2:ee:c3:a8:
ff:a0:03:fa:1e:fb:9f:4e:71:17:dd:fc:3f:b1:0c:54:fa:e2:
55:60:e3:5a:52:f9:1d:0e:b2:9a:45:ae:da:37:2f:c3:82:26:
d6:41:75:8a:7a:82:4b:7e:d1:b8:ee:3c:de:94:51:3f:39:ee:
2e:c4:02:c3:85:14:ff:be:27:be:39:b2:93:63:f3:88:87:12:
dc:d0:72:c6:4b:36:e8:5e:e2:ee:77:c4:98:e5:67:a8:c1:a7:
ed:7e:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:49:21 2025 by rpki-client