Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/5db14e16-a85d-38c4-8a67-fe89349f1d02.roa
File: 5db14e16-a85d-38c4-8a67-fe89349f1d02.roa (raw, json)
Hash identifier: 5+WnwZK5/mPg0UnuyYPZG3OH5Qkio6xSdm4i++nufmo=
Subject key identifier: 7C:F6:BD:BA:AA:2D:93:14:4D:C9:32:A2:2A:BC:4B:B0:4E:26:74:0C
Certificate issuer: /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Certificate serial: 010D0C9F43285849B414966CAC92D2F0B93D2A80
Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/5db14e16-a85d-38c4-8a67-fe89349f1d02.roa
Signing time: Thu 01 May 2025 01:00:46 +0000
ROA not before: Thu 01 May 2025 01:00:46 +0000
ROA not after: Wed 30 Jul 2025 01:00:46 +0000
asID: 8075
IP address blocks: 192.30.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 12:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b4:14:96:6c:ac:92:d2:f0:b9:3d:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Validity
Not Before: May 1 01:00:46 2025 GMT
Not After : Jul 30 01:00:46 2025 GMT
Subject: CN=2cbec978-2aad-403d-830c-cd0fadd0293b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:33:af:ce:7d:2b:97:e3:22:4e:94:1a:66:
0a:ee:e5:55:74:6e:8f:96:a4:be:2b:db:91:d2:84:
60:50:cb:f9:a4:f6:a9:37:f7:ff:45:0f:ad:f0:fb:
26:0b:a5:ab:60:f6:38:b1:e9:fd:41:2d:3d:95:64:
96:38:71:c2:75:5d:52:db:ea:4b:46:8b:1f:eb:67:
89:54:ca:a8:c4:e1:73:ff:db:63:3d:32:26:b4:84:
c8:83:14:08:f2:09:eb:06:bb:5e:65:3d:98:df:c6:
81:ac:51:66:e6:59:06:2b:5f:56:84:e0:1d:67:1a:
46:6a:f8:4d:29:a0:81:02:d6:74:1f:34:f3:9a:b9:
61:13:fa:ae:4c:a7:2c:e9:a1:a5:e0:5d:73:91:da:
33:b0:2f:83:3f:7b:27:e2:89:d8:04:b6:41:cf:2a:
b9:8c:5b:23:1c:be:6d:58:8f:66:97:e6:9a:d8:54:
16:60:7e:e0:ae:7c:4c:a5:b5:2f:fb:1d:77:c5:8d:
28:ca:c6:e0:4c:24:2b:9f:fd:45:ae:b1:d1:60:22:
54:f7:d9:02:f8:c9:a2:7d:a1:9b:36:0b:4d:ec:7f:
5a:8d:2d:9c:7d:94:89:e6:34:56:1b:67:7d:87:24:
48:39:4b:d9:93:6d:51:85:41:33:a7:24:f8:67:db:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F6:BD:BA:AA:2D:93:14:4D:C9:32:A2:2A:BC:4B:B0:4E:26:74:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/5db14e16-a85d-38c4-8a67-fe89349f1d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl
X509v3 Authority Key Identifier:
keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:e5:40:5d:e4:49:5e:f9:58:c6:9b:c1:af:0b:ce:9d:a2:a0:
8d:e8:16:31:e9:57:b8:6b:11:b2:66:9c:0b:67:aa:01:d8:e3:
85:fd:f7:5f:c3:53:42:5f:ae:a7:3b:56:7c:f2:0f:83:ec:37:
a2:f6:59:94:3f:46:4d:97:68:fd:15:ce:9a:f7:4d:fd:6f:dd:
d5:ed:65:90:b1:bb:bc:a8:e4:99:9b:a8:4f:ab:1f:9a:bc:ca:
00:77:96:d4:b9:62:63:f2:aa:e0:60:e4:f4:5f:9c:47:71:78:
29:64:9a:4e:34:24:1a:f1:42:e5:ad:51:41:a2:a7:dd:12:f2:
4d:5a:e5:ad:87:40:95:25:3f:b9:7f:22:df:bf:09:64:b3:79:
42:15:95:13:c8:21:3d:70:62:ad:68:15:3c:18:75:d8:88:e4:
d9:ef:4a:e2:a4:0b:f6:04:68:53:d5:d0:3d:b7:f2:0c:61:1d:
5f:49:7d:b9:12:ee:c7:51:80:8b:61:cc:f2:26:32:97:c6:c9:
67:a5:79:40:03:94:d1:6a:2a:c2:69:0e:66:9d:87:0a:0f:83:
fc:18:0c:0d:19:84:f9:cf:02:81:be:f3:cd:a3:cb:b3:8b:f7:
dd:57:76:a5:59:9d:70:a8:05:7d:cc:08:78:d8:3b:65:27:3f:
be:9b:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:42 2025 by rpki-client