Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/2b59af50-6cce-3c16-9d46-1824c9230d0a.roa
File: 2b59af50-6cce-3c16-9d46-1824c9230d0a.roa (raw, json)
Hash identifier: a4QpSuoIjLlrohHFgfUrXRs6uUAmH5SLWQKbpzU2Z7k=
Subject key identifier: B0:65:80:D8:1F:6D:E7:5D:92:3B:ED:31:2F:02:CB:3D:F5:85:3F:B0
Certificate issuer: /CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Certificate serial: 010D0C9F432858492A7216FD7740E39959151A40
Authority key identifier: 09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/2b59af50-6cce-3c16-9d46-1824c9230d0a.roa
Signing time: Wed 12 Mar 2025 17:47:39 +0000
ROA not before: Wed 12 Mar 2025 17:47:39 +0000
ROA not after: Tue 10 Jun 2025 17:47:39 +0000
asID: 13911
IP address blocks: 66.51.96.0/21 maxlen: 22
66.51.108.0/22 maxlen: 22
198.161.206.0/24 maxlen: 24
216.194.64.0/20 maxlen: 20
216.234.160.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 13 Mar 2025 15:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2a:72:16:fd:77:40:e3:99:59:15:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Validity
Not Before: Mar 12 17:47:39 2025 GMT
Not After : Jun 10 17:47:39 2025 GMT
Subject: CN=17024ecd-23bb-4eb0-b47d-e2c76a4f9f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:02:74:9f:6a:82:e0:4a:39:8e:5a:8d:1d:
f8:c5:7c:63:95:3f:4a:74:46:ee:ad:50:41:61:ae:
19:6e:57:db:c2:36:56:a5:58:d4:1f:45:87:c0:18:
ea:19:b3:fb:f2:1c:b7:2c:16:fd:be:b9:ff:f6:f6:
44:8b:83:2f:23:4a:79:02:b9:a1:b5:9a:da:91:46:
15:af:3f:fe:b4:c1:b3:79:0a:80:1d:72:79:71:1d:
9d:dc:6a:2e:35:0f:52:99:6f:82:87:60:37:46:36:
a4:e0:e3:c6:12:3a:71:08:28:32:76:40:bb:9b:92:
70:b3:68:2c:b3:59:16:84:a8:9e:a3:77:81:a1:8f:
0e:6d:eb:27:e8:6f:5e:0f:85:73:9b:a8:87:8f:d8:
76:d8:28:aa:d9:ad:32:e8:e2:fc:75:67:2c:97:ed:
0a:fb:95:58:e0:12:fa:0c:c8:ee:f2:c2:a4:76:6d:
9a:9c:b0:34:37:8f:2a:ba:e3:11:fc:ad:79:24:38:
ce:91:82:45:6e:3b:0b:5d:c6:e7:b4:ff:a6:8a:21:
4a:d8:da:41:85:44:c8:e8:ba:ba:b2:6c:02:cb:1b:
1a:90:cd:d8:d1:8d:0e:5f:9b:96:3e:87:11:21:fd:
e5:de:81:03:8d:f4:b3:d6:fb:2d:a1:37:22:a9:a1:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:80:D8:1F:6D:E7:5D:92:3B:ED:31:2F:02:CB:3D:F5:85:3F:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/2b59af50-6cce-3c16-9d46-1824c9230d0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl
X509v3 Authority Key Identifier:
keyid:09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.96.0/21
66.51.108.0/22
198.161.206.0/24
216.194.64.0/20
216.234.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:8f:ae:a6:f9:9d:44:7b:dc:b2:6a:e3:9c:8a:8c:67:d2:06:
07:d6:54:86:90:07:4d:56:46:4b:b6:38:b3:a5:77:5a:ea:e7:
01:f7:66:55:0d:51:d3:b2:0f:f3:63:86:7b:1b:86:bd:ce:e4:
2c:6f:3e:2b:3b:70:80:62:fa:31:1e:e7:44:58:f6:f3:5e:94:
32:9f:df:72:08:39:6c:3d:d8:fd:bc:5e:7a:11:de:62:48:fe:
2d:05:1b:20:ef:46:4b:2d:80:27:88:0a:9a:b3:ea:5e:4a:48:
d9:eb:81:a3:96:02:47:bd:0f:8e:17:98:90:dc:b6:a8:2d:d1:
76:8a:10:a3:dd:52:b3:45:29:00:fc:5d:44:1c:a9:7a:12:ce:
ff:89:e4:31:b0:b8:27:56:72:b6:42:ce:67:7c:cc:70:15:11:
27:87:21:f0:6b:8c:78:e4:46:60:8b:b0:4c:26:39:a5:bc:ed:
22:f2:a9:98:1a:42:43:4b:64:28:86:78:ad:4a:c8:92:22:53:
bf:22:98:79:9b:5c:94:58:f0:1f:f2:af:d8:85:5b:f9:04:05:
0c:6c:b9:04:7c:38:3e:87:4c:32:f3:ed:b6:58:a2:b8:5e:fe:
ad:9b:ed:ed:0f:a8:f8:1c:65:cd:01:6e:a9:bc:91:0d:52:4a:
b9:22:7d:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:54 2025 by rpki-client