Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e20a92e9-8e3f-39f0-96e8-1cf1407e9d16.roa
File: e20a92e9-8e3f-39f0-96e8-1cf1407e9d16.roa (raw, json)
Hash identifier: UbX1USSqC5PLaq7xvCtLe0MyzydviMz2CdqwuTEwkxM=
Subject key identifier: 76:F5:9B:6B:64:FC:88:A8:EA:F6:2C:5D:5D:C2:54:36:C5:86:D1:FB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849D2CA1DD8B09B789FB013F500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e20a92e9-8e3f-39f0-96e8-1cf1407e9d16.roa
Signing time: Mon 12 May 2025 01:00:47 +0000
ROA not before: Mon 12 May 2025 01:00:47 +0000
ROA not after: Sun 10 Aug 2025 01:00:47 +0000
asID: 401152
IP address blocks: 50.114.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d2:ca:1d:d8:b0:9b:78:9f:b0:13:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 12 01:00:47 2025 GMT
Not After : Aug 10 01:00:47 2025 GMT
Subject: CN=46e3c4a0-f2ef-41bb-86d0-d45208e97597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:56:d6:f9:1d:7c:b9:29:49:1b:5e:51:99:
c6:ce:43:22:00:d0:1c:ea:31:ae:b1:72:72:60:e2:
1e:e7:4a:48:de:30:6e:00:6b:58:78:2b:d6:1f:d9:
59:af:46:c2:8a:8d:7b:e4:fb:89:a6:a7:ac:16:03:
b8:d8:e4:7c:13:27:d9:6a:3d:56:1f:7b:4a:7c:f6:
60:47:a0:24:69:b4:b0:a1:c8:22:3c:6d:da:04:e7:
37:f9:cc:65:a9:11:78:a7:f8:71:7b:df:28:99:0c:
e1:0c:da:5b:2b:1e:e4:03:bf:2e:b3:92:8d:39:43:
9e:c4:0d:f8:c5:39:a7:3e:c2:b9:10:4c:68:11:ec:
12:20:37:f0:8b:1c:b4:7a:65:e9:02:c8:68:10:4b:
1c:fa:ae:1b:6e:ac:2e:f2:0b:43:0c:2a:f6:94:db:
c2:1a:7e:ef:ad:fb:05:68:ec:05:5c:5b:8b:d9:18:
4e:9a:d0:f4:a5:d3:ce:52:9d:a1:cf:65:3f:3b:8e:
66:cc:34:9a:56:5e:1c:2f:a0:f8:98:43:87:74:f1:
cf:5d:da:16:80:66:f3:ca:66:12:3c:c4:69:f5:de:
4a:2e:8d:98:0e:d3:97:0d:63:26:64:93:53:42:ca:
c8:c1:2e:5d:b2:a2:7e:3c:5f:39:59:c7:9d:95:05:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:9B:6B:64:FC:88:A8:EA:F6:2C:5D:5D:C2:54:36:C5:86:D1:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e20a92e9-8e3f-39f0-96e8-1cf1407e9d16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:bc:52:0b:0a:e2:2e:fb:18:d1:12:90:2e:91:89:01:09:7c:
44:c0:3c:0d:56:56:e8:79:e4:b0:b1:c2:4c:89:e9:fd:5c:cc:
44:3c:ac:74:62:db:28:4f:d5:d2:c7:61:d3:7a:a1:89:03:39:
9a:63:ef:93:fb:8d:e3:76:15:0d:41:d6:9f:f0:32:f0:fd:ae:
2d:22:4a:12:7c:9e:7b:e3:60:65:42:7a:a9:c4:30:0c:2f:62:
9e:6c:ac:e0:7a:3b:93:9b:dd:d4:e5:82:cf:f4:6d:6e:6a:ac:
68:13:c4:a8:f2:0f:ec:27:34:6e:88:8e:4a:ff:0b:90:3a:b4:
36:7f:38:bb:97:47:30:00:70:89:72:1c:85:67:bd:dd:67:7d:
86:4a:cc:fb:2f:9c:09:37:94:87:4a:8b:36:d4:50:1f:6d:32:
3d:4d:4a:76:1a:a9:d3:92:a5:c2:49:c9:d8:09:eb:b2:5a:75:
c1:8d:66:47:0f:f4:3c:14:ed:19:da:2b:4e:93:d0:45:a7:cc:
ac:d9:e2:2a:2d:f6:a5:72:cd:06:c2:a3:8a:8d:00:80:5e:8c:
d4:0a:08:63:2d:f7:01:65:c2:41:ff:8a:e7:b3:9c:6b:18:a7:
ac:b8:ed:55:cd:06:9e:00:f0:d4:65:a5:d7:ef:09:f8:32:6a:
b7:97:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:30:41 2025 by rpki-client