Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb2b59c0-4966-3ee7-9344-a8d4d0b09b78.roa
File: cb2b59c0-4966-3ee7-9344-a8d4d0b09b78.roa (raw, json)
Hash identifier: 9bGTDMluNyyI4zL4TyT0RULEplPl00YHLMmVh2FpV0I=
Subject key identifier: 5E:31:F8:86:23:58:52:9E:5A:CE:22:55:1E:77:60:90:D9:A3:0A:1B
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285848B2FCD260493E55A67CC9E1C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb2b59c0-4966-3ee7-9344-a8d4d0b09b78.roa
Signing time: Tue 28 Jan 2025 22:50:11 +0000
ROA not before: Tue 28 Jan 2025 22:50:11 +0000
ROA not after: Mon 28 Apr 2025 21:50:11 +0000
asID: 834
IP address blocks: 200.229.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 23:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:fc:d2:60:49:3e:55:a6:7c:c9:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jan 28 22:50:11 2025 GMT
Not After : Apr 28 21:50:11 2025 GMT
Subject: CN=b098eaee-8147-4386-869a-30acda4a3781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:80:d8:0c:0a:3b:4c:4a:eb:c5:93:c0:4b:
cd:81:57:d1:23:fa:b4:35:db:e8:34:de:b2:a6:ff:
db:78:40:84:78:c3:91:6b:a6:30:29:0d:c2:a6:d6:
87:c1:50:24:6c:15:0e:3d:65:b9:80:24:36:07:8b:
5d:ae:f5:12:e9:b9:a1:1f:8a:8e:d1:ee:a9:84:60:
23:80:61:0b:31:c7:98:d0:4a:47:c3:c5:f8:cc:56:
af:40:43:47:3b:90:71:ce:75:6f:5d:12:4b:4b:d9:
0c:e6:47:4a:ec:0b:cf:87:d9:0a:7f:ca:51:35:05:
e6:64:bf:dd:f9:72:06:b5:86:54:e2:ec:47:8a:3b:
43:49:d7:ca:fb:91:da:32:d7:3c:da:41:d2:f7:75:
de:f9:70:9e:b2:89:24:af:f2:59:7e:54:33:1a:9e:
ec:ab:40:7f:45:10:36:6e:9c:1e:d8:be:6e:42:dc:
4d:bf:31:2f:11:5c:c6:ca:74:fb:9b:7f:03:dd:00:
65:9d:33:19:96:1f:b7:2f:4f:d4:e0:30:38:d7:c3:
02:52:bc:ec:a2:bf:07:c2:d2:aa:e1:d5:75:a8:5c:
f1:d4:bd:94:1c:59:7d:93:38:46:da:e0:43:ea:04:
7e:8e:52:ca:49:03:43:c1:d7:aa:f7:1e:5d:2b:d0:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:F8:86:23:58:52:9E:5A:CE:22:55:1E:77:60:90:D9:A3:0A:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb2b59c0-4966-3ee7-9344-a8d4d0b09b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:23:2f:ae:08:26:b1:58:00:fa:76:e3:d9:e8:d4:91:8f:89:
56:1f:13:6c:74:a2:25:96:20:d0:96:f7:02:29:ca:dd:e7:4c:
5a:83:a3:95:bf:66:a4:0e:a8:fa:45:54:de:b8:24:d3:26:10:
8e:19:2e:f8:c9:56:27:36:a8:99:7c:c1:76:52:6e:0b:fb:20:
ab:f0:22:be:45:a7:c3:41:12:c3:0d:a7:bb:fe:c0:6a:f4:5c:
7f:e5:f9:67:d5:d1:ba:66:25:50:15:a7:3b:f6:a5:77:d8:81:
a3:40:48:5b:3c:e2:d7:cf:82:a1:63:7c:a8:ab:b6:51:89:c5:
c1:79:34:8e:41:d9:4c:b9:fb:d8:18:f6:1d:86:8b:40:71:41:
15:9c:f9:ba:60:10:63:77:13:a0:3e:85:95:4e:dc:fa:b8:ca:
06:6a:39:34:84:d4:a6:28:ec:f0:68:e1:a1:e8:6f:9f:d1:9c:
fd:b1:c4:bc:c8:98:b4:ee:c7:4b:a3:89:dd:2d:41:cc:2a:da:
12:4e:99:3a:1f:0b:7d:8d:ee:ad:1a:5f:c6:e5:8b:fe:4c:40:
84:bf:73:00:59:aa:8d:c5:8f:e5:2d:df:4f:6b:0f:70:c0:c1:
2b:69:eb:cd:d3:e2:9c:4c:eb:c5:93:3f:d5:57:d3:c1:b4:7d:
af:e5:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:59 2025 by rpki-client