Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eb9d72d4-c317-3e1a-a081-60e0a74a1099.roa
File: eb9d72d4-c317-3e1a-a081-60e0a74a1099.roa (raw, json)
Hash identifier: ApkwT5xD/tHbuoRH9G6HHu9Zei4815vqZK7KX3OVxeQ=
Subject key identifier: 3C:88:85:7E:D1:A3:37:8E:CF:3B:01:0E:02:D9:5F:CB:4E:71:80:35
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285849CE9A2FBB2E0694A175DDCE60
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eb9d72d4-c317-3e1a-a081-60e0a74a1099.roa
Signing time: Sat 10 May 2025 13:01:00 +0000
ROA not before: Sat 10 May 2025 13:01:00 +0000
ROA not after: Fri 08 Aug 2025 13:01:00 +0000
asID: 834
IP address blocks: 104.129.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 17:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ce:9a:2f:bb:2e:06:94:a1:75:dd:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: May 10 13:01:00 2025 GMT
Not After : Aug 8 13:01:00 2025 GMT
Subject: CN=b2e66fa2-831b-4ef5-af19-e647ff0e59a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:74:ee:f3:46:81:28:35:d6:b2:ac:8a:5f:
74:a6:dc:f5:83:a2:91:71:ce:18:11:38:22:52:05:
18:11:c7:21:fc:70:9f:57:64:4a:d3:b3:61:e6:11:
0e:1f:05:32:6c:5b:bd:a8:92:5a:6d:62:d2:16:82:
d4:b3:83:c2:8e:4b:9e:3a:14:60:6f:52:80:e5:c8:
8e:03:3d:b6:c7:d9:8a:33:03:65:2b:c4:43:dc:b3:
ef:01:61:2a:45:8b:74:6d:ff:61:45:f4:15:9a:e2:
46:87:29:e1:88:e3:d1:f9:02:52:6d:6e:44:22:f8:
8e:df:2c:63:96:b7:0b:85:f2:ab:5b:a1:c5:14:6d:
78:70:b1:4c:78:f8:6b:75:21:fc:c7:28:a8:ef:0c:
c5:d0:7f:aa:7f:c5:c1:74:29:b6:1a:e1:fb:51:5c:
b8:87:33:f3:f3:20:9c:3f:61:1a:1f:ff:38:66:13:
cb:9f:3e:05:51:46:10:28:c4:3f:49:4f:1c:78:ac:
5d:d2:85:34:fa:f1:cd:70:ed:dd:67:77:0a:d2:14:
bb:10:50:74:5b:a9:27:66:45:c3:04:68:f8:58:f5:
54:c2:0d:cf:41:dd:d2:bb:8f:56:1b:dd:35:67:0f:
ad:a9:98:b0:d6:51:97:09:ea:97:0e:1f:9e:ae:bc:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:88:85:7E:D1:A3:37:8E:CF:3B:01:0E:02:D9:5F:CB:4E:71:80:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eb9d72d4-c317-3e1a-a081-60e0a74a1099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
104.129.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:19:94:37:c4:9b:f2:3f:bf:2f:0d:72:a6:12:d0:c8:17:cb:
5d:d8:64:e6:35:bf:d1:6b:c8:e9:e3:5d:d6:ef:40:56:50:c9:
ca:03:87:c1:65:6f:e0:3a:6b:db:b5:00:56:58:7d:1e:2c:ed:
84:e3:e1:44:eb:bb:f7:b4:dd:93:c3:fe:80:29:18:71:8c:66:
f1:7a:cf:9d:92:b2:b3:ab:09:af:56:aa:95:3a:6d:f0:d1:e3:
f0:c4:40:92:ed:07:e1:a3:04:55:64:f8:7b:21:6d:f2:4f:26:
7f:93:0e:5c:cb:9e:c3:6e:fb:c3:4b:12:cf:80:b0:77:f4:40:
17:47:2f:74:f1:fd:0a:ef:bd:68:d7:3d:09:4c:1d:dc:ba:46:
33:89:28:10:02:84:bd:50:a5:da:86:79:0e:c9:2d:2e:b1:43:
78:9c:8e:07:02:f4:8b:e6:55:ea:5a:14:d8:e6:ba:81:35:58:
c5:c7:92:a9:cd:0a:da:76:5e:f3:be:e3:d0:71:eb:ed:8c:7e:
cc:5c:83:fc:e6:23:91:03:74:b8:90:9e:da:58:9c:f6:2f:70:
d1:52:95:36:44:7f:bb:19:d9:c9:90:6d:3b:6f:b7:65:2d:82:
fd:21:fd:ff:63:82:aa:f7:77:b9:5c:f5:c9:3c:62:d3:48:a9:
87:1e:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:57:25 2025 by rpki-client