Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/f58da411-daf1-300d-a29a-0347c5d330f2.roa
File: f58da411-daf1-300d-a29a-0347c5d330f2.roa (raw, json)
Hash identifier: 3wQ/SbW1Zh7nMnWER07qBg7M5vDcFiOLTsqGeQBDlo4=
Subject key identifier: 3B:B8:EE:9D:47:D2:36:4B:20:24:FE:11:CA:EE:32:54:70:6F:D3:55
Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial: 010D0C9F43285848C8BB47195BC131DD3E8CB900
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/f58da411-daf1-300d-a29a-0347c5d330f2.roa
Signing time: Wed 05 Feb 2025 17:45:54 +0000
ROA not before: Wed 05 Feb 2025 17:45:54 +0000
ROA not after: Tue 06 May 2025 16:45:54 +0000
asID: 134176
IP address blocks: 204.235.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Feb 2025 18:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:bb:47:19:5b:c1:31:dd:3e:8c:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Validity
Not Before: Feb 5 17:45:54 2025 GMT
Not After : May 6 16:45:54 2025 GMT
Subject: CN=338db4e5-2adc-4051-b693-dfd00378252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:a4:25:fc:87:8c:ae:0d:98:54:3b:0a:98:
d1:a3:ab:51:b8:eb:19:47:7b:c5:8f:6f:3b:bc:b8:
a7:d7:4b:3a:11:3d:92:01:c3:e3:ad:8d:ea:98:d3:
9e:27:86:0b:6e:91:69:91:11:fa:d4:42:33:46:93:
73:f9:65:2b:98:e2:11:29:5d:7f:33:25:82:c8:1f:
ea:b5:18:7e:ee:18:11:82:fb:19:af:ac:90:a2:99:
41:0c:1a:fd:f4:0f:19:67:dc:d0:18:d6:35:ce:97:
8e:84:b8:39:6f:51:54:23:fd:4e:87:24:ef:1a:32:
3f:dd:13:7b:f4:83:bb:34:0c:12:03:47:51:46:2d:
91:92:23:85:fa:7f:d5:fb:11:53:fb:59:84:52:e8:
79:5b:57:36:95:d7:cc:f5:60:65:0c:44:48:53:c7:
5f:fb:0f:8d:ac:cb:de:e7:a1:6c:6b:82:90:9b:4f:
66:32:a3:63:db:63:9f:22:e0:19:2e:32:45:9a:ae:
5c:19:06:5c:03:b8:f5:2c:5f:9b:10:80:70:bc:46:
63:24:75:d7:2b:e5:30:84:f4:1f:ab:41:3a:d0:62:
a3:1b:da:58:14:c2:9a:02:ea:da:2e:78:68:17:9e:
33:b0:94:13:3b:45:ad:fd:10:b7:f9:bd:9d:25:db:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:EE:9D:47:D2:36:4B:20:24:FE:11:CA:EE:32:54:70:6F:D3:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/f58da411-daf1-300d-a29a-0347c5d330f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
X509v3 Authority Key Identifier:
keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:ea:ba:31:4e:58:55:0b:34:6b:8f:90:8b:80:6e:88:1a:b3:
a2:91:e5:f3:27:32:4f:8c:db:9d:98:c2:97:df:46:2b:e8:b6:
22:1c:22:20:55:eb:14:58:f7:d1:84:86:2f:da:f5:2e:36:14:
b3:0d:1d:0d:ab:f8:ab:17:88:13:21:72:47:75:e5:9a:57:1e:
ac:6f:76:e2:14:84:05:03:89:81:e3:44:1a:95:b5:f8:38:20:
a7:a2:60:37:6d:17:85:fb:fc:e5:25:dc:44:b7:b4:54:23:44:
ae:4e:8e:48:ee:aa:c4:b6:05:9c:e0:54:9a:e2:cf:c8:74:03:
4c:ad:78:8e:2c:af:44:99:e7:db:17:06:49:71:1a:dd:3f:1b:
50:e4:b9:7d:ba:e9:22:5b:25:06:09:db:89:4c:44:45:5a:cc:
a3:50:e8:d2:d1:7e:ec:26:fe:64:34:4c:5c:66:d8:31:87:48:
61:75:a6:d0:63:ad:a4:3d:51:e4:29:fb:b5:93:ab:6f:55:f9:
21:52:e4:99:ea:8e:17:85:ee:ce:34:90:a2:e2:51:7d:ab:c0:
72:aa:67:b2:57:0f:15:6c:d5:88:0f:eb:91:1e:2e:cb:5e:af:
f1:c7:6b:07:68:35:39:00:02:58:1e:04:3b:0c:68:5d:ff:48:
a4:6b:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:57:45 2025 by rpki-client