Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3af015fe-3333-367a-b893-be74527fb896.roa
File: 3af015fe-3333-367a-b893-be74527fb896.roa (raw, json)
Hash identifier: O7aZOOOS2BLmVgqcF2HIXnjF7cJJyfryo5jcs1iP+iI=
Subject key identifier: FC:7F:6A:00:0E:B0:EA:A4:61:A4:C7:24:BD:61:A9:F9:9C:D1:17:32
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849D80538B03C86667DEB2C9180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3af015fe-3333-367a-b893-be74527fb896.roa
Signing time: Tue 13 May 2025 21:58:57 +0000
ROA not before: Tue 13 May 2025 21:58:57 +0000
ROA not after: Mon 11 Aug 2025 21:58:57 +0000
asID: 7385
IP address blocks: 50.114.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 19:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:05:38:b0:3c:86:66:7d:eb:2c:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 13 21:58:57 2025 GMT
Not After : Aug 11 21:58:57 2025 GMT
Subject: CN=90932aaa-4239-4859-9ef1-836f7a41bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:e9:da:8f:d3:b4:63:43:9e:51:b9:85:92:
fe:52:45:4e:b2:5b:32:77:cc:96:10:64:40:3e:ce:
31:7b:51:d1:f3:14:92:35:07:e3:e1:f1:01:0f:97:
df:88:57:be:37:55:40:2a:fa:ee:f7:bc:59:50:d5:
9b:17:fd:d0:b9:2a:db:96:fd:82:f4:1f:f5:14:62:
99:9a:0f:50:f1:00:38:94:47:05:d7:21:33:b3:b0:
d7:4f:14:35:28:d9:d5:8f:31:59:6f:71:63:b4:21:
1b:af:a5:72:d3:ef:4b:63:d6:6a:6a:12:16:cc:5f:
d4:33:0b:24:07:08:b2:92:77:0f:fb:ae:85:ae:07:
ec:a1:5a:1c:c8:07:6c:fc:37:6e:32:76:36:77:a5:
58:b1:45:2b:38:14:52:ca:cb:63:be:a8:3d:4a:3e:
3d:89:11:50:21:2a:70:de:12:b6:6c:e4:8c:c6:73:
72:b8:16:e3:e0:98:6c:a3:e5:06:e0:93:0d:ea:6b:
44:d7:0b:d8:40:b7:89:cc:f7:91:ed:1c:96:a6:e0:
44:cb:33:de:be:0b:f6:5d:05:9f:11:a8:e8:96:2b:
7a:a2:a8:41:bb:a4:07:34:2a:fc:9a:81:b0:9a:06:
9c:88:e4:5c:c3:e0:39:2b:6b:8f:ec:01:45:9f:fc:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:6A:00:0E:B0:EA:A4:61:A4:C7:24:BD:61:A9:F9:9C:D1:17:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3af015fe-3333-367a-b893-be74527fb896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:e7:7e:ed:fd:e9:30:ef:da:ee:66:e0:4e:bf:c4:5a:6c:f0:
2a:7c:4c:7a:fd:05:72:13:ed:ee:2e:5f:89:9e:20:82:01:18:
41:c2:64:c9:44:e2:e9:ac:1f:59:32:65:e6:8c:d8:67:88:da:
43:18:dc:22:27:ab:f6:f7:9e:b6:23:cf:4a:06:d6:29:2d:41:
5c:55:ed:48:fd:6a:44:74:aa:16:37:57:15:dc:43:b1:6c:ac:
4e:3e:e3:7a:35:a5:ee:f2:a8:b0:f8:9d:6d:b1:bf:80:52:83:
10:e5:c6:5d:79:eb:f9:e3:28:3d:1f:bb:4c:bf:65:34:21:c3:
b2:36:31:dc:27:ba:fd:13:5f:fc:f3:ca:35:be:84:98:ad:f0:
62:17:88:0a:81:a1:7f:1c:64:2a:d8:8e:69:e9:ce:0d:02:29:
1e:a5:89:85:d3:69:1b:a3:26:26:83:d5:f8:77:ca:33:ec:84:
0b:2d:ee:7c:46:ba:a6:ec:b0:2b:44:bb:a0:cd:5b:54:c8:4c:
77:bb:15:d7:ba:92:d2:0e:e2:9f:3b:8f:fe:06:f2:c4:ed:8d:
35:77:4f:b8:b2:b6:c3:ef:e9:6a:1d:76:dd:20:aa:7b:2c:9a:
27:1d:29:8a:a6:3f:c3:0b:d8:a4:9e:70:16:d9:ad:5e:58:05:
26:70:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:57:52 2025 by rpki-client