Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/ee8651a1-915a-31b0-836c-b42afa6d5a2a.roa
File: ee8651a1-915a-31b0-836c-b42afa6d5a2a.roa (raw, json)
Hash identifier: 7ZM/LvGdpZPzER3P4Pe+P26p1Ig54gU/9FE28CWTGAM=
Subject key identifier: FA:4A:58:CA:99:33:90:71:D6:31:27:93:9D:96:11:B7:67:CB:38:B4
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F43285849A61F48C93F0936B7389095E0
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/ee8651a1-915a-31b0-836c-b42afa6d5a2a.roa
Signing time: Sat 26 Apr 2025 01:00:47 +0000
ROA not before: Sat 26 Apr 2025 01:00:47 +0000
ROA not after: Fri 25 Jul 2025 01:00:47 +0000
asID: 834
IP address blocks: 134.202.48.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Apr 2025 13:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:a6:1f:48:c9:3f:09:36:b7:38:90:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Apr 26 01:00:47 2025 GMT
Not After : Jul 25 01:00:47 2025 GMT
Subject: CN=894e4931-8849-4205-9b56-0306298ae455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:07:f0:cd:dd:6f:47:51:2c:43:1e:39:20:
fe:e4:6f:d3:3b:06:99:e0:8d:36:14:6d:5c:9b:f6:
57:74:78:66:ae:75:c5:cc:35:3f:8e:cb:67:56:0f:
a0:e9:4f:31:fd:07:d2:2c:ac:54:18:a6:1a:5b:03:
c0:d1:6a:66:d9:c5:95:ed:fc:d9:3b:5b:21:86:85:
13:72:f9:99:7c:93:c7:f1:df:a9:0f:e0:b1:b7:02:
37:e9:35:3b:31:c3:8e:68:8e:7b:99:c7:72:50:40:
e9:76:72:9f:c7:7c:4d:50:b8:67:fc:0f:29:d8:c5:
94:57:16:78:aa:d0:e1:fd:0b:6c:29:a2:18:d1:22:
19:f6:70:8c:4b:86:4f:f9:da:4a:70:e3:74:74:11:
a5:1b:5f:d0:fc:b0:a8:e7:3c:1b:d7:72:0b:93:9f:
d1:1f:14:5a:92:16:66:9c:5b:10:44:eb:07:f5:04:
a0:3e:3b:08:24:9e:b4:4d:ee:cf:93:e6:16:56:fc:
3c:71:24:78:c8:5e:36:db:62:6f:3b:d4:8e:6e:41:
0e:ea:4f:2c:17:38:18:ef:87:d0:6a:4c:8f:6a:04:
e1:c8:41:de:17:3c:14:8e:0d:3b:16:1b:b7:e0:f6:
1b:83:76:4e:d7:76:2c:b4:dc:f7:d6:c6:0b:1a:81:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:58:CA:99:33:90:71:D6:31:27:93:9D:96:11:B7:67:CB:38:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/ee8651a1-915a-31b0-836c-b42afa6d5a2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ed:bd:fb:17:ad:ab:a2:74:7f:41:26:63:20:0b:d9:38:af:
9f:f7:1a:59:72:7f:ab:a8:11:9b:e8:37:3f:bc:b6:82:29:be:
00:00:0f:af:1a:0b:c8:38:42:6d:bc:ad:cb:7a:84:33:a7:8a:
b2:5a:0e:d3:0a:33:b6:dc:21:a2:af:a9:d5:f7:f1:a7:98:10:
96:cc:39:a2:7f:0f:87:08:33:df:c8:b8:a1:c4:c8:d8:da:e6:
54:d3:40:5f:b1:fa:07:41:40:c5:f3:79:9b:17:91:09:2c:a4:
e4:9e:00:87:c6:3b:33:f3:68:df:2c:1c:8f:ed:8f:be:f5:cb:
fa:7a:f6:c9:5b:3c:2e:53:7e:eb:77:1b:9c:bb:9e:6c:d2:3d:
c2:0e:34:93:cd:25:73:cf:8b:e8:eb:5b:38:ec:53:c4:26:ba:
bf:88:f0:03:1d:66:4c:2a:89:7a:1a:93:79:7f:0f:4f:3c:ec:
28:82:26:2f:6f:f7:27:54:97:73:c1:ec:4e:32:d6:b8:b6:b1:
64:85:70:1a:93:ce:4e:d1:c1:71:a7:a4:9b:d4:00:f2:d4:45:
89:89:da:49:70:86:02:26:37:cf:1e:06:fa:82:2c:32:0b:72:
7e:53:d6:7d:ab:26:08:5e:3e:0f:c3:9c:e2:49:b6:67:66:4a:
de:5f:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:41 2025 by rpki-client