Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80f39bcb-051f-3c78-978c-bd1904fc70af.roa
File: 80f39bcb-051f-3c78-978c-bd1904fc70af.roa (raw, json)
Hash identifier: v7PixQJ4CYt5o0y/gTMYf83kUxUKy9J9rlR4HQ31LN0=
Subject key identifier: 1C:04:6E:DD:F8:FC:0E:2C:BB:D1:A9:B1:C6:9F:A0:7A:EB:9C:12:F5
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858498769BC89D169F067F6671C80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80f39bcb-051f-3c78-978c-bd1904fc70af.roa
Signing time: Tue 15 Apr 2025 01:00:47 +0000
ROA not before: Tue 15 Apr 2025 01:00:47 +0000
ROA not after: Mon 14 Jul 2025 01:00:47 +0000
asID: 137547
IP address blocks: 69.165.64.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 01:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:87:69:bc:89:d1:69:f0:67:f6:67:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Apr 15 01:00:47 2025 GMT
Not After : Jul 14 01:00:47 2025 GMT
Subject: CN=5faaa703-c661-4d13-b01e-72a1bceb5ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:0f:fa:92:18:85:e6:fd:d2:ad:4f:d2:fa:
de:c8:01:5d:d7:b0:70:7d:b2:5c:28:d3:9e:18:ee:
98:4a:28:9c:cc:b0:e0:d1:5e:7c:fd:52:ea:18:2c:
f6:ef:0c:a2:42:7b:1e:61:25:f2:96:a1:26:46:b7:
66:e1:45:b5:78:ff:7a:b0:64:08:23:8d:a9:ee:5d:
32:2b:fa:6c:20:a7:10:51:59:b5:d0:a3:1f:95:a2:
1b:52:47:99:41:0e:b2:11:c8:6d:c3:9e:2d:dc:40:
39:11:e0:5b:83:dc:70:54:57:ef:a4:8c:75:54:31:
4c:fe:91:98:a2:bd:90:71:72:79:42:18:86:37:64:
fc:4d:49:a3:1d:f3:04:56:59:84:92:c3:c4:67:6f:
fb:cb:68:bb:9f:12:aa:b4:e3:15:d6:7e:3d:bc:6a:
fc:89:86:ba:b5:b5:4a:bd:26:0b:f7:94:9a:96:c2:
ab:57:70:dc:e5:95:b4:05:c4:d5:b4:dd:f9:ef:86:
ad:2a:65:ff:bf:8e:44:cb:93:a0:71:20:f1:88:ba:
e9:5f:9e:8b:d3:cd:d1:e5:9d:8d:59:84:ca:25:af:
13:9b:1e:f0:94:df:b3:33:c7:31:e9:fc:4d:e7:1f:
a8:34:10:df:3c:45:6a:e0:e4:b8:fb:fc:38:90:97:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:6E:DD:F8:FC:0E:2C:BB:D1:A9:B1:C6:9F:A0:7A:EB:9C:12:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80f39bcb-051f-3c78-978c-bd1904fc70af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
69.165.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f1:6b:1b:43:92:64:33:73:e1:cf:b0:c9:1d:ab:17:02:25:
e3:e5:57:e3:ff:15:3b:5f:5c:1e:69:60:58:73:a2:ff:80:61:
6c:de:e2:4e:69:cd:ec:48:4d:71:b0:d4:1f:d6:0d:7e:13:03:
08:62:f9:25:8c:4c:53:f3:b5:2b:58:f0:16:33:41:85:8f:47:
da:48:76:e6:86:6f:f3:37:9d:89:a2:82:66:b4:24:0a:45:5b:
43:bf:0a:6f:4a:e9:af:b6:d1:45:5d:35:68:a4:f6:09:7d:fb:
58:d3:ee:f3:6d:e2:67:e3:f9:2c:fd:23:fa:35:2a:73:0a:4b:
6c:1b:74:7f:6c:e1:9b:3b:e4:47:78:d7:4d:20:80:10:61:0a:
30:5f:77:0d:72:ff:f8:7b:d0:0b:05:b7:5d:2f:c1:d6:79:45:
21:ed:52:61:ff:c6:8b:09:90:9f:2e:db:32:f3:14:6d:10:3b:
9d:ea:55:74:23:d0:02:90:6c:d6:e1:5f:06:65:1b:49:c4:09:
b4:17:32:37:2a:a0:b5:b7:c6:f7:6a:25:3c:6f:3a:61:8d:b6:
ec:83:99:57:ed:b1:98:aa:00:a9:31:42:6e:06:a4:bf:19:46:
8e:fe:1c:e4:b4:a3:87:c9:6f:86:7e:9c:fa:cd:97:e2:76:1e:
9f:d5:8f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:50:15 2025 by rpki-client