Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3724ff0d-2e2c-335c-b6fb-ef9522f735af.roa
File: 3724ff0d-2e2c-335c-b6fb-ef9522f735af.roa (raw, json)
Hash identifier: tgKjKKUGGQO8FI920upxN8cM8BNr+AKCm1DT8Am0k8o=
Subject key identifier: 99:D1:5B:A9:E1:F7:97:2A:40:81:3F:07:0A:1D:46:FD:49:CD:18:76
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285849C3F42B9822AFC499FC9F5375
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3724ff0d-2e2c-335c-b6fb-ef9522f735af.roa
Signing time: Tue 06 May 2025 17:28:26 +0000
ROA not before: Tue 06 May 2025 17:28:26 +0000
ROA not after: Mon 04 Aug 2025 17:28:26 +0000
asID: 15169
IP address blocks: 8.34.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 12 May 2025 20:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c3:f4:2b:98:22:af:c4:99:fc:9f:53:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: May 6 17:28:26 2025 GMT
Not After : Aug 4 17:28:26 2025 GMT
Subject: CN=ffce6982-3a16-48a5-96de-ce37e79f936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:17:2a:4d:50:b9:30:5b:41:8e:e4:62:90:
f3:da:df:d2:87:bf:0c:ab:c1:a7:fd:0e:36:1e:d5:
9d:74:d1:d4:dd:bc:c6:4c:d4:a2:b0:51:91:53:cb:
bc:1c:72:c2:51:14:ce:68:c2:83:fe:7f:2b:7d:19:
1f:2d:4c:09:a7:d2:d5:b4:4b:8a:fe:c3:04:75:1f:
9a:77:6d:00:ce:d7:b3:19:c1:65:a3:22:ab:25:1e:
e0:97:dc:e4:ed:be:e2:dd:6d:f7:78:84:50:2e:89:
82:f0:c9:28:4a:2f:76:7a:21:fe:41:e8:d0:0f:87:
5f:91:19:75:01:36:b9:f9:fd:c0:92:ae:0e:22:e7:
8e:6f:a9:a4:05:c8:35:7f:de:05:57:2b:ed:8a:5d:
c5:73:95:19:09:98:e2:79:ff:85:40:97:1a:0b:a7:
d2:de:1c:45:f6:df:da:fb:3e:3f:30:c9:f0:e7:77:
7a:48:ec:a2:42:44:d1:2e:ad:c3:96:2f:6f:96:69:
65:e6:ce:3e:36:5e:93:87:64:06:b1:e3:8a:87:4a:
02:bc:de:2c:55:56:fe:62:5e:1d:24:c1:06:c2:a3:
a5:5f:37:72:3a:56:cd:b8:2e:55:f7:a3:a0:93:27:
e9:41:9d:04:07:41:8b:f8:4c:fa:25:a6:2e:05:bb:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D1:5B:A9:E1:F7:97:2A:40:81:3F:07:0A:1D:46:FD:49:CD:18:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3724ff0d-2e2c-335c-b6fb-ef9522f735af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.34.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:16:97:78:de:ee:94:c8:3e:ae:d1:86:a2:cc:63:9e:2d:26:
2f:a3:44:4d:a0:d7:62:d5:d8:3e:ef:b1:06:9c:46:30:0c:b4:
6c:c8:29:13:85:42:9a:be:d4:a0:d9:0b:16:ba:50:a3:94:f5:
df:b4:4b:8f:e2:f5:23:cd:7a:6c:84:60:34:12:8d:ba:4b:55:
c6:e3:32:53:39:8a:3c:ce:eb:a2:1a:92:ba:68:7a:48:fc:36:
68:13:a4:cc:63:75:e4:ac:9a:ce:12:7f:d5:67:6c:60:d1:01:
87:cc:bd:10:20:f7:3e:b9:4c:55:5c:e0:18:57:01:8a:22:62:
8d:ae:df:9b:9f:a5:5e:c1:47:bc:73:1f:1b:fa:5a:d2:4a:18:
f3:bc:1b:2a:81:a3:d6:a1:9a:49:43:d9:c5:84:8f:e3:60:fd:
8f:fe:b3:c0:1d:d2:49:8f:42:50:57:4f:6c:50:2e:2b:39:ad:
e4:e2:ba:df:5f:d3:b3:a1:39:5f:23:5f:47:20:0a:00:01:c6:
f1:78:a6:da:d8:85:81:5e:ae:95:7e:92:a5:67:43:00:ad:ab:
df:b5:a2:86:ca:92:8a:51:7b:87:7e:2b:80:92:83:aa:ab:b2:
8c:31:6d:2d:3b:97:4b:65:dd:e5:10:c3:47:80:32:cc:b9:a1:
6d:a7:a8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:30:38 2025 by rpki-client