Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/b38f5416-8789-30c3-a626-d7f38b435def.roa
File: b38f5416-8789-30c3-a626-d7f38b435def.roa (raw, json)
Hash identifier: db4sfy+11xh+/G0X2P0xnoOaoDiiZdxKR6UviNAqROY=
Subject key identifier: FC:53:2C:98:A1:37:E8:18:E8:C1:28:55:75:8F:9B:0E:D3:50:DA:3A
Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial: 010D0C9F43285849C430DB071BFEDBBD7A37AB40
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/b38f5416-8789-30c3-a626-d7f38b435def.roa
Signing time: Tue 06 May 2025 19:30:42 +0000
ROA not before: Tue 06 May 2025 19:30:42 +0000
ROA not after: Mon 04 Aug 2025 19:30:42 +0000
asID: 399970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 18:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c4:30:db:07:1b:fe:db:bd:7a:37:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
Validity
Not Before: May 6 19:30:42 2025 GMT
Not After : Aug 4 19:30:42 2025 GMT
Subject: CN=3965dc49-dc10-47e4-ac53-251125aa582a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:fb:9a:92:99:1f:df:b0:e6:e5:a8:8e:47:
b8:88:a7:82:05:f1:e3:dd:f1:bc:72:68:75:8f:ac:
47:0a:12:0b:ba:de:78:20:2f:c1:4f:18:4b:43:03:
34:0a:60:35:68:56:93:2e:a2:92:8a:e4:70:6d:c7:
f5:e2:dd:14:61:dc:9c:e6:9b:a7:19:42:5f:2a:78:
43:fa:ff:2c:31:9a:41:7e:70:99:03:4b:47:37:c3:
b2:20:45:e3:3e:36:3f:85:81:2b:7a:37:ba:45:75:
ab:37:cc:d8:66:86:c3:a2:c3:02:6f:07:e6:97:69:
cb:97:4b:f3:08:eb:c3:96:1f:ad:1d:0f:83:88:73:
33:38:c4:3a:d2:15:63:c5:5c:39:de:51:41:fa:c5:
75:88:0c:70:27:bc:f3:35:51:77:8a:09:f1:ad:dc:
d7:f4:66:c2:ae:06:41:f6:e9:9e:7a:36:71:e5:0d:
76:e3:05:08:59:75:3d:f6:7d:88:2e:a7:55:c9:16:
d1:7f:7f:d5:a3:2d:5c:bc:79:88:f1:89:bc:23:ec:
7c:3b:61:6a:fe:5c:a0:7e:f6:54:a9:45:e7:29:2b:
df:2c:c5:9a:6e:1b:ed:a3:03:db:a9:ed:a1:8a:dd:
35:b0:a3:5e:44:5e:45:d6:5c:02:54:22:60:e2:d1:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:2C:98:A1:37:E8:18:E8:C1:28:55:75:8F:9B:0E:D3:50:DA:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/b38f5416-8789-30c3-a626-d7f38b435def.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
X509v3 Authority Key Identifier:
keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:38:1d:2f:93:f7:71:98:20:74:09:58:32:f0:94:bc:4c:9e:
4a:74:89:29:4f:df:16:9b:8c:f1:6e:e1:c7:4a:4d:36:82:67:
21:21:6a:ad:00:2c:77:6b:ab:3d:4f:70:f9:01:46:81:3f:68:
cb:07:da:b0:63:3b:c5:84:b8:6f:b4:a6:7c:5e:13:3f:49:71:
e3:fc:56:ed:67:1c:0e:81:2d:dc:c1:eb:3c:8b:3a:68:1b:ea:
c3:da:f5:84:07:d1:78:cd:01:bd:e8:5e:8b:e1:28:5a:76:4c:
03:41:f0:8d:06:ba:48:0f:4b:5c:03:fb:fe:68:e0:ac:b5:b5:
54:39:07:20:5e:7e:a4:a7:79:22:b0:9d:ea:e4:78:70:a4:e8:
06:99:ce:1f:b0:2e:c2:3b:f6:3c:6d:87:38:33:e6:97:f7:de:
21:b8:02:e6:78:23:37:dc:7e:49:c2:3f:34:49:32:80:9e:de:
b9:b3:3f:75:30:42:f8:46:9c:4a:60:b2:6b:ed:64:45:a1:6a:
b0:17:6f:25:e5:7f:57:95:f9:9a:a2:5b:2e:da:4b:62:c6:3d:
1b:7c:82:66:e9:69:99:42:4e:cb:0e:00:6b:9c:3b:eb:53:15:
1d:47:6b:81:49:b4:02:19:bc:72:22:41:35:2b:de:0f:e7:c4:
9e:bf:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:07:38 2025 by rpki-client