Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a1061ec-fb4c-3565-b10c-8144885a9329.roa
File: 1a1061ec-fb4c-3565-b10c-8144885a9329.roa (raw, json)
Hash identifier: BNTTYNuw5zKIt0BBSL7sOMoDb6pJgMgar52iMOq2g/g=
Subject key identifier: 2E:AE:EF:85:5A:28:E2:14:82:CA:3C:4A:29:28:6A:A0:50:66:6F:01
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584971D715C57C34C840D46BF240
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a1061ec-fb4c-3565-b10c-8144885a9329.roa
Signing time: Mon 07 Apr 2025 07:33:32 +0000
ROA not before: Mon 07 Apr 2025 07:33:32 +0000
ROA not after: Sun 06 Jul 2025 07:33:32 +0000
asID: 208485
IP address blocks: 206.123.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 05:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:d7:15:c5:7c:34:c8:40:d4:6b:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 7 07:33:32 2025 GMT
Not After : Jul 6 07:33:32 2025 GMT
Subject: CN=cb50dc99-292c-4d5f-882a-bc6bab0f1a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:cf:94:f5:aa:26:cf:ab:d0:77:b1:b9:4f:
ea:f2:1f:c7:26:2f:90:d2:f4:a4:01:38:29:83:3b:
86:a6:16:46:21:fa:d4:8f:68:2a:bd:af:9f:4f:4f:
2e:63:b9:21:ea:73:4b:b8:b2:50:1f:e5:67:f7:3c:
2d:b5:8c:4a:d3:ac:fd:b0:e1:b5:ea:c2:bf:d1:ea:
3d:38:aa:22:bd:2b:ae:79:42:85:3e:3b:ba:a6:ea:
f6:28:e4:51:10:13:df:6a:3a:4b:f2:4c:1a:06:89:
9b:be:07:90:81:50:a5:72:e2:78:4b:1f:c9:ca:23:
98:6f:fe:24:8e:eb:7d:44:d9:86:1c:f4:24:79:6b:
55:a0:49:7c:a3:87:e2:d0:5f:4a:b4:56:44:41:bc:
f4:49:96:73:7c:41:29:dd:d8:b4:ff:32:8a:85:02:
93:6a:d7:87:b9:fd:03:e9:42:4e:e6:64:73:67:bc:
e9:87:3b:56:e9:5f:f6:51:49:8e:53:87:51:3c:f2:
be:57:62:2c:3b:76:1d:b3:41:7a:31:34:5b:59:bc:
16:14:e6:d8:d7:29:77:6f:8c:2c:07:3a:3d:27:56:
b9:ee:22:4b:ef:1a:8c:34:b1:bb:4b:70:ad:c4:a2:
36:86:01:99:65:ca:4f:84:f0:3b:5b:95:f4:72:5d:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AE:EF:85:5A:28:E2:14:82:CA:3C:4A:29:28:6A:A0:50:66:6F:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a1061ec-fb4c-3565-b10c-8144885a9329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:77:a3:b2:fa:e8:6a:7f:3c:1d:2d:f3:1d:20:54:e4:10:4e:
cf:41:28:04:4c:92:cc:e4:b6:d1:5c:91:2d:c1:4b:ce:61:af:
59:a2:82:60:a6:a1:21:f2:6e:92:da:22:41:6b:79:83:7a:6b:
3c:b8:d9:3f:b0:fe:de:21:58:28:11:b1:14:44:15:46:84:bc:
69:b4:ca:72:2a:58:ee:58:5b:46:2d:40:a0:d1:60:04:1b:dd:
1d:50:87:c9:81:17:de:b2:6b:1b:35:17:f2:3c:2b:4e:42:d1:
b3:ae:ee:18:ae:e7:56:99:a7:05:e9:63:76:9b:67:d7:f5:01:
91:11:86:1e:d5:81:59:c9:b9:e2:88:09:c5:62:c5:26:0f:cc:
b4:2f:fa:31:9a:10:33:05:f6:ad:aa:f7:40:c8:21:b1:f8:a7:
82:b9:f9:c4:80:d3:42:c0:b5:9d:cd:21:14:ae:dc:eb:a6:89:
e7:31:8e:cb:23:f9:df:18:f2:7f:a5:a1:bf:25:70:5f:64:64:
86:2d:f6:cb:2a:b6:72:58:cc:ab:6f:14:39:99:7c:5c:4f:56:
6c:1c:e7:88:2d:37:05:a5:43:fa:eb:3d:fa:60:48:c8:82:06:
d6:09:8e:dd:c1:79:97:94:3f:c6:e1:46:66:e8:5c:6f:57:5f:
0c:58:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:16:04 2025 by rpki-client