Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ee40ae8e-4f14-3c38-bfd9-6625707e42af.roa
File: ee40ae8e-4f14-3c38-bfd9-6625707e42af.roa (raw, json)
Hash identifier: CTPkz1t0gk6dr3WQt2YjKiPtBJIjxRqOo3SJnoa76hQ=
Subject key identifier: DD:37:03:85:75:B4:EE:A5:A3:3D:0E:CD:EE:8D:F6:AC:AC:A3:0E:67
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F432858499C24925D0E72101644E5E340
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ee40ae8e-4f14-3c38-bfd9-6625707e42af.roa
Signing time: Tue 22 Apr 2025 11:13:37 +0000
ROA not before: Tue 22 Apr 2025 11:13:37 +0000
ROA not after: Mon 21 Jul 2025 11:13:37 +0000
asID: 0
IP address blocks: 157.133.0.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 02:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:9c:24:92:5d:0e:72:10:16:44:e5:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Apr 22 11:13:37 2025 GMT
Not After : Jul 21 11:13:37 2025 GMT
Subject: CN=5b90ade7-a85d-4af3-82d8-6bf0d012c063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:7f:75:76:88:e0:df:9b:4e:60:4b:1b:da:
12:b5:0f:49:6e:da:fc:02:4a:00:c0:ef:ab:18:3c:
07:fb:77:ca:e4:95:64:59:3b:aa:75:10:8a:4b:8a:
59:7e:c6:36:b1:7f:d6:47:7a:0c:f7:8d:e5:2b:55:
bb:f6:be:74:be:a3:ba:f0:ab:67:ea:4a:82:7e:a2:
d0:46:56:f0:c6:69:9f:a7:dd:e3:4b:83:db:14:23:
c6:ec:40:aa:82:eb:30:6b:68:50:78:32:ba:25:98:
fa:ed:77:23:89:17:c5:01:aa:4e:ed:d9:6c:e0:54:
f0:96:66:65:b5:13:38:76:97:87:73:66:3b:47:8b:
b9:8f:1c:65:e1:30:2a:83:37:d4:d9:ef:2b:85:f0:
0c:1e:e2:d6:e9:32:d8:eb:00:06:2d:92:84:74:13:
bd:08:60:2c:8a:d0:e0:92:cb:6d:15:4c:de:e4:b4:
86:12:c2:f3:da:39:9e:b9:b9:3c:24:37:a3:c2:ff:
94:77:5f:8d:7f:9a:b0:9c:be:f4:f1:f4:4d:b5:71:
f0:da:f9:ef:0a:c4:8a:e6:44:86:7d:57:66:17:e3:
3f:64:16:6f:79:c1:52:24:24:dc:25:df:e8:e6:36:
ce:38:7a:85:cf:84:b6:73:cf:a8:84:69:41:fd:47:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:03:85:75:B4:EE:A5:A3:3D:0E:CD:EE:8D:F6:AC:AC:A3:0E:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ee40ae8e-4f14-3c38-bfd9-6625707e42af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:21:75:4a:e0:5b:ab:b3:6b:21:4d:6b:7a:04:f0:67:fc:f2:
66:6f:5f:4e:64:4c:9f:be:af:c9:a8:0b:2f:74:23:2f:9b:af:
0c:13:97:f6:be:6d:04:a0:a9:22:92:bb:d3:ee:8f:a7:4e:59:
05:98:87:d2:96:fa:67:ca:3a:1a:61:2a:1e:1f:df:b3:25:74:
19:3d:ec:b8:57:ff:08:5f:78:f7:c1:55:91:9d:dc:34:85:af:
dc:69:33:10:e7:ed:34:2a:6f:12:d2:19:dd:22:1f:86:d0:ef:
64:9d:1f:38:25:38:73:a2:06:e6:a7:eb:93:44:17:96:63:78:
58:3f:61:33:51:d0:53:11:e4:a1:cc:9a:3a:6a:06:5f:d6:5f:
fd:47:45:d9:8c:01:f4:66:11:4c:64:c4:d7:12:20:ff:a4:a0:
e9:f4:e5:a5:a4:a7:cc:b0:13:9f:67:88:f0:28:a8:6b:d5:40:
15:6d:bf:e0:c7:96:4e:1d:89:f7:4e:fb:4d:84:a5:6c:52:d5:
7c:d4:d6:67:fd:34:db:f8:a6:ca:6d:94:ac:b1:cc:79:da:ba:
88:18:c8:95:e1:5d:f4:97:79:4c:28:61:e2:76:5d:52:c6:63:
a1:62:c3:61:04:84:77:e5:2a:2a:76:01:8a:f9:71:f7:e5:31:
f5:2f:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:45:25 2025 by rpki-client