Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/bec24cac-a21a-33b4-817f-14518244f9f3.roa
File: bec24cac-a21a-33b4-817f-14518244f9f3.roa (raw, json)
Hash identifier: VZhU1EQRYPFWj5qqBJZiiRhSEtfqp9tUbej+LtOl5TQ=
Subject key identifier: 79:87:2D:98:95:70:56:02:E4:41:30:1A:D7:70:1A:CD:59:0B:4C:1B
Certificate issuer: /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial: 010D0C9F432858497AF0AA2534319BFBFCF6FD20
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/bec24cac-a21a-33b4-817f-14518244f9f3.roa
Signing time: Thu 10 Apr 2025 13:47:21 +0000
ROA not before: Thu 10 Apr 2025 13:47:21 +0000
ROA not after: Wed 09 Jul 2025 13:47:21 +0000
asID: 12070
IP address blocks: 107.163.0.0/18 maxlen: 24
192.155.160.0/20 maxlen: 24
192.186.0.0/24 maxlen: 24
192.186.41.0/24 maxlen: 24
192.186.57.0/24 maxlen: 24
192.186.58.0/24 maxlen: 24
192.186.59.0/24 maxlen: 24
192.186.60.0/24 maxlen: 24
192.186.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 12:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:f0:aa:25:34:31:9b:fb:fc:f6:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
Validity
Not Before: Apr 10 13:47:21 2025 GMT
Not After : Jul 9 13:47:21 2025 GMT
Subject: CN=d2f6ac1e-9206-49fa-a4dc-6a8b2b79cdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:21:75:ce:94:56:31:0e:4a:a3:93:7a:58:69:
d4:78:e5:49:bb:d6:47:c8:33:54:22:a4:0c:5d:1c:
c8:bf:47:cb:87:46:b9:d1:c8:dd:3d:44:7c:0b:5b:
86:86:32:e5:e0:75:ed:50:7e:d7:b3:69:4a:28:06:
a4:7e:11:c9:0b:ec:e2:4e:7d:d8:34:96:e6:60:b9:
51:af:39:e7:6f:b4:1a:a3:fd:04:09:bd:80:6e:68:
cb:02:ab:73:64:01:87:9c:96:17:20:c2:ed:a9:04:
69:52:3f:36:fb:5b:ff:35:ab:51:ff:58:bd:81:e5:
e1:35:f1:ae:e0:b2:c8:37:03:77:6d:4a:fb:14:c5:
cd:b3:48:fb:d6:84:ef:b5:35:45:be:00:29:a3:72:
ae:1b:92:15:a4:53:4a:94:e9:b6:96:3d:cf:92:bb:
91:aa:21:93:f6:9c:77:67:85:82:e1:2b:8c:bc:04:
cb:72:ea:85:f6:59:41:50:98:4a:85:aa:17:7b:c5:
a0:7a:18:d5:a0:d1:aa:c8:cc:ce:0c:5f:21:8a:c0:
72:8c:00:ea:e7:3c:45:6d:4d:56:53:c5:7d:b7:bf:
e2:e0:e2:e0:a7:89:8c:46:22:89:fb:b7:7b:db:ed:
14:3b:e9:c3:03:08:1c:ea:c0:ad:6a:cd:85:e0:b7:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:87:2D:98:95:70:56:02:E4:41:30:1A:D7:70:1A:CD:59:0B:4C:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/bec24cac-a21a-33b4-817f-14518244f9f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
X509v3 Authority Key Identifier:
keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
sbgp-ipAddrBlock: critical
IPv4:
107.163.0.0/18
192.155.160.0/20
192.186.0.0/24
192.186.41.0/24
192.186.57.0-192.186.60.255
192.186.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:81:80:27:bc:50:58:63:13:4b:e8:9d:31:ed:cf:3f:47:b7:
43:c1:46:1b:50:48:c1:ab:f4:0d:f2:23:d2:e4:48:60:4d:7d:
f5:45:0d:77:9f:2e:06:69:73:2c:5e:dc:f0:e6:0d:60:3f:75:
3b:d5:8e:f6:c7:cf:7c:f7:59:13:b8:5b:13:c2:f5:36:70:4c:
0c:09:d6:38:c0:c2:25:99:23:9b:30:83:94:99:87:e9:16:a9:
4e:92:19:f7:5d:34:53:fa:cc:57:99:12:c7:09:91:ed:09:b8:
05:36:29:de:bd:23:c5:01:8f:9b:76:b4:5e:4d:c1:8a:25:8f:
06:f6:4e:c9:aa:77:b9:9f:b1:a7:74:70:83:41:7e:3c:cb:60:
7d:37:0a:39:08:54:c7:a3:22:49:3b:e2:b7:9e:42:ce:63:7a:
85:d4:ba:9d:a8:63:4f:bc:41:0d:23:74:a1:68:a3:84:2f:90:
88:9a:eb:ad:15:af:ba:03:98:af:3f:b8:05:84:8d:19:ad:21:
5a:6e:18:81:a6:f4:eb:06:b4:a0:4a:db:01:50:cc:e1:92:34:
8d:42:aa:2e:b7:5a:5f:54:56:d5:dd:c1:06:e7:73:d3:a4:de:
9d:02:fc:79:59:c1:e7:b8:a2:43:ed:65:a2:38:bb:da:ee:6c:
ac:93:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:57:21 2025 by rpki-client