Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42c88ea4-fb3a-3b72-8172-dad556f04fdc.roa
File: 42c88ea4-fb3a-3b72-8172-dad556f04fdc.roa (raw, json)
Hash identifier: hMGCmUUjuugeRaTKX0fBGuE6MJzpHoBY1dMpFgoGNdg=
Subject key identifier: 48:B8:5F:85:D3:FD:19:09:DB:9C:F7:8C:BF:30:EF:AE:ED:35:3F:5C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849C1343405895484A0BE2C018E
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42c88ea4-fb3a-3b72-8172-dad556f04fdc.roa
Signing time: Mon 05 May 2025 17:50:01 +0000
ROA not before: Mon 05 May 2025 17:50:01 +0000
ROA not after: Sun 03 Aug 2025 17:50:01 +0000
asID: 834
IP address blocks: 50.114.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 18:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c1:34:34:05:89:54:84:a0:be:2c:01:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:50:01 2025 GMT
Not After : Aug 3 17:50:01 2025 GMT
Subject: CN=8c6b7f07-b179-4769-9814-5de49f945fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:db:45:28:ca:3d:60:33:3f:ce:37:29:16:
41:db:92:62:29:53:1d:98:10:ed:3f:e5:ce:b2:38:
4d:79:3e:b8:6d:5d:48:a4:a0:f9:e5:2f:1d:d9:0f:
b2:9c:aa:b8:b8:a0:1e:51:cc:5e:d4:3f:a0:ea:49:
d2:81:41:21:c1:78:c1:16:cc:f0:85:be:72:2b:90:
fb:46:3e:d0:90:62:bc:1a:d9:d7:96:cc:8b:a9:6e:
15:35:7c:59:ad:1b:a9:4c:c7:66:ac:7c:f9:27:80:
61:0d:70:be:89:73:35:35:20:25:7e:e1:aa:36:74:
09:e7:64:6a:4e:ef:1f:e5:ff:88:8f:05:cf:cd:46:
dc:65:b6:dc:67:e6:5e:dd:e7:5e:4a:01:eb:46:23:
ad:be:c4:1b:5a:bb:ca:7d:f0:08:06:e7:4d:15:be:
34:9b:4d:a4:63:14:97:f4:21:7b:85:d5:b2:8f:92:
99:c4:60:a5:81:55:86:d3:c3:66:1a:be:87:bb:ab:
cf:36:1a:7a:b2:48:32:c7:08:5b:d3:ba:57:26:a3:
e9:ba:9a:b9:7b:73:e9:10:18:93:50:26:b9:e5:1e:
fc:0b:64:9b:18:bf:ea:a6:56:d6:72:03:b5:18:ac:
96:a3:0c:70:37:35:bf:3b:71:86:9e:8b:e9:61:63:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:5F:85:D3:FD:19:09:DB:9C:F7:8C:BF:30:EF:AE:ED:35:3F:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42c88ea4-fb3a-3b72-8172-dad556f04fdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:82:9f:96:62:02:1b:8f:9b:3f:ef:b9:65:0b:6b:c0:6c:cb:
23:28:b3:63:13:23:45:30:98:50:be:b6:71:cb:55:af:8f:85:
81:4d:35:da:19:b8:03:e7:d9:49:6d:2e:b6:51:aa:fc:3f:5b:
23:ae:d3:cf:41:b2:73:96:1d:6a:be:26:20:43:bd:db:f5:50:
2f:68:d2:53:fe:84:6b:d1:ff:90:22:03:d0:01:8d:11:55:b0:
64:33:81:d1:e9:13:af:43:be:c2:2a:af:11:36:f3:89:2f:e9:
8f:11:5d:27:a3:ec:ad:c3:4d:05:ff:9f:db:07:85:77:7e:b5:
47:73:aa:30:5f:f0:7e:7d:18:2f:57:4a:86:cc:01:e7:34:2f:
d8:13:6a:31:2d:81:df:28:64:fa:f3:d2:43:0f:73:bc:1a:59:
9e:1b:5e:60:86:85:a9:41:d3:36:ef:89:06:0c:96:84:f7:73:
a4:00:f1:06:8b:a6:6f:06:f9:e1:e2:c7:47:fd:d7:62:8e:dd:
ea:79:32:13:47:e8:06:d7:37:96:0a:a9:67:63:4b:dc:77:58:
d9:4e:d1:7c:fa:14:5c:74:e5:cb:3b:f4:38:ce:22:ad:f2:3b:
cf:b3:6a:c1:b5:38:24:ba:a5:98:b2:40:a4:9b:1d:2b:98:ab:
88:bc:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:03:16 2025 by rpki-client