Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f635d444-adae-3d62-bdd7-0acea70bcfc0.roa
File: f635d444-adae-3d62-bdd7-0acea70bcfc0.roa (raw, json)
Hash identifier: TbmbJQxq/MpXAdPRlthrBTHuzhZGgbRvF50VdYnGa/w=
Subject key identifier: F5:27:6C:B2:62:8E:79:31:93:3D:43:75:BA:2F:C0:CF:34:91:F0:CE
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584971D77F21B9059785FB42B640
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f635d444-adae-3d62-bdd7-0acea70bcfc0.roa
Signing time: Mon 07 Apr 2025 07:34:22 +0000
ROA not before: Mon 07 Apr 2025 07:34:22 +0000
ROA not after: Sun 06 Jul 2025 07:34:22 +0000
asID: 208485
IP address blocks: 206.123.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 11:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:d7:7f:21:b9:05:97:85:fb:42:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 7 07:34:22 2025 GMT
Not After : Jul 6 07:34:22 2025 GMT
Subject: CN=c0a441a1-e992-4985-a7d7-5621377347a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:02:f2:ee:8c:37:a9:4e:71:bd:f0:24:24:dd:
b4:8d:d1:95:be:34:42:61:18:78:b6:85:35:4c:3e:
6a:b2:01:c5:cb:80:63:ef:a9:17:4d:1a:72:e1:fd:
f1:ce:6b:ef:c0:be:24:d7:e0:6e:06:97:1a:61:3b:
4a:1d:4b:e9:7e:1c:a9:c9:02:5c:1d:8d:cf:74:85:
63:03:56:4b:3a:36:78:19:b8:e2:49:f4:ac:fb:b7:
c9:02:5b:12:7a:c3:9f:9f:74:87:74:c5:2e:a2:b0:
35:db:8d:69:4d:2f:63:f3:db:c1:33:e9:5f:70:be:
d2:44:77:8b:ef:bb:44:f0:de:a3:8e:d7:79:b8:66:
83:37:0c:d1:2a:58:cf:35:e0:34:37:8a:cd:2b:70:
d5:b5:41:47:93:09:93:09:a0:9c:9d:6f:09:e1:0b:
a3:15:48:85:8f:68:0b:3b:cf:c9:e8:65:db:66:50:
45:61:31:cf:89:0b:6d:bd:89:9a:08:41:f7:0a:af:
fc:cf:fc:59:6b:2e:46:9a:6a:0c:6c:f2:d4:92:8a:
d4:33:18:2e:a6:11:5a:06:c4:fb:2d:7b:df:4e:f2:
77:eb:c7:f4:cb:37:15:c5:e8:4c:ca:74:62:ac:a5:
61:8d:7b:d0:47:86:ac:f0:86:d1:fe:77:7a:86:fe:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:27:6C:B2:62:8E:79:31:93:3D:43:75:BA:2F:C0:CF:34:91:F0:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f635d444-adae-3d62-bdd7-0acea70bcfc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:31:9c:a0:ae:8d:65:dc:ca:f0:f4:a5:d4:82:be:e6:20:4f:
37:40:88:61:f4:64:1d:fe:15:5b:52:80:1b:ce:e1:4e:d5:f1:
59:46:63:ba:06:3c:e7:af:04:32:90:b9:bd:1e:5f:da:ba:07:
fa:68:cb:0e:12:93:e0:0b:1b:e2:93:c3:94:e7:25:9b:a8:d7:
1f:4d:82:3d:fc:75:48:ca:58:d8:89:ee:24:38:27:44:ff:73:
09:07:b5:51:76:ca:a7:d0:3f:c2:45:40:0e:ea:e1:72:a0:60:
31:b4:6f:7c:be:60:42:3f:0e:e1:3e:bb:2b:f6:24:fb:4e:7f:
75:8a:25:1d:1f:79:cd:06:bb:03:2e:84:de:bd:31:8f:da:c1:
c8:e6:10:14:b6:6b:15:b3:8a:55:93:37:37:2e:44:d8:6b:3e:
01:ac:6b:f6:99:bc:c9:1f:4e:81:6f:6b:f8:78:b6:80:c3:5a:
a5:85:bc:ad:e0:03:83:da:2b:9c:ba:4d:a4:a8:d1:68:73:fd:
db:e9:a3:2e:dc:ac:35:78:29:9e:40:7d:8f:00:93:fe:45:dd:
64:bd:60:4e:53:e4:cd:ad:eb:15:24:cd:72:19:1d:c8:d8:5e:
81:6d:76:c9:fd:a0:98:37:49:97:3f:85:07:ba:5a:1a:81:63:
fd:99:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:59:03 2025 by rpki-client