Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3ea0aa7-c857-3f3e-9a82-624bacecaee2.roa
File: c3ea0aa7-c857-3f3e-9a82-624bacecaee2.roa (raw, json)
Hash identifier: ARzfJa+fEM9AW9GsXR44itcrTikWjGjs5wPrtGhr4Rw=
Subject key identifier: F9:8E:5A:9F:BC:4E:A4:52:C9:FF:49:77:51:DD:A7:F1:2F:C2:22:98
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584196E33B89EC10CB0CAB71CA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3ea0aa7-c857-3f3e-9a82-624bacecaee2.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Sun 20 Jul 2025 04:00:00 +0000
asID: 207279
IP address blocks: 50.114.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 14:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:96:e3:3b:89:ec:10:cb:0c:ab:71:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Jul 20 04:00:00 2025 GMT
Subject: CN=fbb23251-352f-4c04-a5e8-2e07546bcad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:42:14:3a:da:aa:55:dd:d6:01:bd:43:15:
79:83:d8:94:33:ab:81:f6:26:1b:0e:ba:10:eb:c8:
be:84:98:62:c2:f9:fe:cc:72:0c:4a:62:5b:e8:16:
c1:e2:f1:cc:c9:58:70:1b:9c:04:ed:5e:2b:bc:b7:
d7:b1:92:0d:29:ed:12:3b:b1:3c:43:43:ec:37:02:
b9:30:f8:fc:45:a6:dc:94:bc:2f:03:47:7b:c8:dc:
95:5f:48:c2:1a:14:78:25:c8:12:37:98:26:61:75:
1f:48:0c:b3:6f:6e:68:eb:cf:24:7b:a3:d3:cc:af:
e4:a9:e2:4d:10:c9:d8:16:60:e7:66:57:8d:17:1b:
91:e3:d6:f7:2a:82:4c:e2:86:ee:65:f9:ae:5e:f4:
c3:3d:6a:00:b7:2c:98:7e:33:74:d0:cd:75:74:87:
96:e4:c9:6d:a1:ad:8a:a8:00:19:6a:28:b7:d9:7d:
42:bd:fc:aa:44:8d:64:3c:74:06:fa:f4:6f:58:14:
b7:15:52:ec:21:f2:35:a2:09:f6:16:38:d9:32:1d:
0b:a2:ca:78:85:c1:c0:f9:5d:b0:57:84:2f:16:be:
95:15:7f:fa:1a:b0:74:f8:38:59:12:45:66:ec:0a:
9e:90:47:3c:3b:bc:1a:b6:39:ae:96:13:df:2a:38:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:5A:9F:BC:4E:A4:52:C9:FF:49:77:51:DD:A7:F1:2F:C2:22:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c3ea0aa7-c857-3f3e-9a82-624bacecaee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:af:00:39:b9:6f:c0:7f:19:bd:c2:fd:46:c3:1a:74:49:63:
fd:0d:8a:cb:10:39:6d:0b:21:43:f5:b9:d6:74:d4:66:ed:46:
20:1b:d1:ad:eb:e8:8e:06:e2:94:13:a9:2a:65:ed:c4:43:c1:
b9:95:1e:76:34:3f:94:54:65:95:76:bc:b2:6c:5f:01:39:2d:
3d:f3:48:86:20:0b:1d:5f:0c:fd:b8:06:a6:37:0d:75:c4:46:
2a:eb:3b:62:2e:2f:56:b5:2c:55:72:d4:79:16:51:79:19:4f:
cd:d2:7e:ef:dc:d2:87:fa:6e:70:89:cc:75:83:a8:bc:d2:f6:
bb:2a:bd:f9:03:96:30:b0:a0:6e:d2:c7:e8:e6:c0:71:43:7c:
40:11:bd:be:f7:6c:d6:cd:a8:7d:ac:60:48:05:60:20:09:5e:
71:b7:20:c5:4d:b8:83:f5:d9:1a:5d:39:1c:e1:8c:ff:84:65:
74:20:09:e0:1f:9b:29:89:68:7c:c4:05:72:a4:87:ab:e9:57:
8c:b2:92:c2:59:5e:1f:9b:a0:cf:78:79:51:5f:89:0d:0f:f9:
2c:86:17:94:8e:94:ea:ad:0b:25:08:df:0a:b1:ae:59:65:1b:
86:37:bb:29:f4:75:f8:37:99:7b:4b:1e:17:7c:9b:6e:2d:30:
98:44:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:10 2025 by rpki-client