Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a89449e5-4d06-3d24-baa8-893174d26437.roa
File: a89449e5-4d06-3d24-baa8-893174d26437.roa (raw, json)
Hash identifier: 5WvlbV9hu9jmOsJLMzKXcX19d5bI/pgz0MhFIUgyi1I=
Subject key identifier: 93:B1:E1:42:6C:73:EA:BA:B6:3B:9D:0F:9E:2C:BE:79:4E:FF:4B:FF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849D2CA1E3E12155F125C71D080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a89449e5-4d06-3d24-baa8-893174d26437.roa
Signing time: Mon 12 May 2025 01:00:47 +0000
ROA not before: Mon 12 May 2025 01:00:47 +0000
ROA not after: Sun 10 Aug 2025 01:00:47 +0000
asID: 401152
IP address blocks: 50.114.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 22:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d2:ca:1e:3e:12:15:5f:12:5c:71:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 12 01:00:47 2025 GMT
Not After : Aug 10 01:00:47 2025 GMT
Subject: CN=bf5456cd-3e2c-4f14-b0e6-4368f08ad3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:6d:c1:90:4d:e0:76:e4:44:61:89:f1:ef:
b2:93:1d:8e:2d:67:fa:ae:85:0f:59:0b:7c:e7:4d:
67:fc:c7:36:be:ee:6a:0c:e9:2a:a8:a0:db:f7:21:
eb:9b:28:94:53:64:db:35:43:4d:2e:1b:5b:95:3f:
35:fc:a6:a4:ac:35:a3:28:3e:d8:e1:4f:3e:cf:21:
44:62:9f:af:51:62:f8:87:53:f9:74:99:cd:3a:5c:
e1:55:61:a9:a5:bb:75:8f:75:b6:bc:1f:07:f6:8e:
2b:7a:47:de:8d:69:6c:54:f1:92:c3:04:0b:3a:60:
b4:24:37:ab:a1:34:9c:78:7b:79:88:ba:88:27:19:
e7:fb:cb:08:3d:81:7e:e1:3c:f4:a9:aa:21:71:78:
5d:6b:c3:99:df:0a:cc:30:18:91:af:33:04:c8:d2:
dd:b4:dd:3d:97:ca:4e:fb:b8:4e:71:82:3a:cd:29:
5e:c5:60:ef:d9:21:3e:04:b1:43:12:2f:dc:5f:65:
81:46:f4:92:48:9b:a3:a2:52:b0:56:53:d0:23:0d:
d7:f6:17:67:8d:5a:b4:d9:24:32:ea:fc:86:68:7d:
d6:e4:3e:41:a6:2f:9d:0e:2c:eb:23:48:29:8f:8e:
80:7f:7e:4a:67:71:26:8c:85:d4:09:e2:17:5f:8e:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B1:E1:42:6C:73:EA:BA:B6:3B:9D:0F:9E:2C:BE:79:4E:FF:4B:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a89449e5-4d06-3d24-baa8-893174d26437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ae:31:82:d6:4e:43:b6:dc:bc:c5:8f:ed:6e:dd:ca:a7:70:
a8:c9:65:60:44:09:27:28:7c:db:02:bf:92:94:15:2e:9d:19:
2f:12:83:48:6f:a9:e0:a9:03:c5:39:1f:48:4b:b0:7f:f2:79:
4e:67:63:67:6d:05:c2:55:f0:fb:34:64:25:b8:af:70:b3:c1:
dc:cc:1e:85:40:7a:43:71:62:ac:dd:aa:14:28:1c:73:62:85:
9f:6c:9c:44:1a:39:e0:0a:c3:83:ef:7a:5b:cd:47:8a:54:51:
9f:3f:a7:f1:4f:fd:ec:53:42:03:9d:e0:d6:b3:b2:79:aa:17:
f1:95:d5:d2:10:3b:a3:8d:b1:21:ab:c7:14:dc:1a:ef:94:4d:
e5:aa:e9:af:c5:ca:c7:18:a4:fd:f4:ef:8c:32:44:ff:d8:8e:
aa:17:1c:72:5a:9b:11:ea:2a:80:1b:79:db:9c:45:ee:79:03:
03:52:9d:d6:50:48:d2:03:ce:b7:73:1c:70:dc:57:d6:57:8c:
8d:99:fe:dd:53:e5:6c:ab:ca:25:d5:5c:7c:a6:83:3f:32:a0:
3c:4b:ef:8c:cb:4d:fb:ee:57:38:f7:70:f5:0e:b6:85:6c:e8:
e2:69:f3:54:40:1c:22:48:ab:05:0f:b8:3b:15:37:15:5f:58:
09:cc:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:59:49 2025 by rpki-client