Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ad704ea-9eb0-32cf-91a5-f28d7fddab46.roa
File: 1ad704ea-9eb0-32cf-91a5-f28d7fddab46.roa (raw, json)
Hash identifier: HpAqoQcTR1jIM+4wpRylmXq2jA/igqTiMNHqdsIqChM=
Subject key identifier: 58:B0:08:55:AE:19:E1:20:7A:47:70:59:31:86:D1:56:E2:38:CA:72
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858498A3462780B015B64AB240A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ad704ea-9eb0-32cf-91a5-f28d7fddab46.roa
Signing time: Wed 16 Apr 2025 01:00:48 +0000
ROA not before: Wed 16 Apr 2025 01:00:48 +0000
ROA not after: Tue 15 Jul 2025 01:00:48 +0000
asID: 5714
IP address blocks: 192.85.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 14:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8a:34:62:78:0b:01:5b:64:ab:24:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Apr 16 01:00:48 2025 GMT
Not After : Jul 15 01:00:48 2025 GMT
Subject: CN=4543ebaa-270d-44e6-a1c6-0073737cd391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:dd:7d:fb:02:11:fe:72:2c:93:70:dd:1b:
33:ba:41:92:a5:28:14:4e:57:9d:97:1e:29:9a:ab:
fc:21:14:fe:e6:25:c2:b0:0d:eb:5f:df:d2:a6:c1:
c5:b0:6d:d1:e3:11:72:4b:1e:5f:e9:a9:fd:73:b7:
8a:66:0b:79:c9:5e:f3:0f:59:83:03:2b:4d:34:a2:
ef:a0:ef:6c:df:f7:9a:3d:8b:8d:9a:27:86:b5:38:
70:92:a3:ce:83:5f:5e:64:ad:3b:fe:16:0b:13:9a:
4c:a6:04:0d:d0:93:43:51:a5:e6:36:b9:b1:27:f3:
14:d7:12:d9:75:5a:00:c6:35:9c:cd:e5:82:fb:8f:
fd:41:b9:6b:53:c3:52:aa:e7:d3:18:f8:6a:63:e7:
f3:69:ac:32:3f:ca:c3:50:a6:97:5c:24:57:31:6b:
32:c9:99:b0:60:0e:78:2c:a1:ba:20:33:65:dd:95:
82:b1:6d:da:ca:a7:96:ef:dc:0a:53:9d:9b:0f:0c:
09:65:50:7b:49:4f:69:9c:21:8b:2d:ea:73:10:30:
d5:48:4b:bf:85:f4:ae:1a:7c:3a:e9:8a:6e:6d:6c:
d0:4e:83:1c:2d:08:79:6d:d5:dd:76:48:4b:2f:ac:
50:96:69:5f:82:fc:64:e1:6b:75:bd:b9:c9:d4:8b:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B0:08:55:AE:19:E1:20:7A:47:70:59:31:86:D1:56:E2:38:CA:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ad704ea-9eb0-32cf-91a5-f28d7fddab46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:a3:00:fc:85:5f:f6:04:06:80:d8:7a:d8:b9:23:a2:09:04:
5a:8a:0d:73:00:77:04:47:39:7a:3b:7b:af:c3:98:e6:d7:23:
cf:4e:67:0b:06:f6:25:63:db:8f:55:88:80:75:c7:35:97:38:
1b:5f:29:a6:7b:cd:c0:75:34:34:20:cf:85:04:ad:06:72:56:
6c:b5:5d:43:39:0f:00:5a:b0:83:60:01:f7:7b:d8:e0:d0:9f:
c2:68:db:ba:15:c8:19:ff:26:9c:24:5c:0e:3b:e7:5b:37:d4:
d3:ac:18:62:e3:e1:d5:ae:03:f1:f1:ed:cd:55:38:de:31:87:
d1:f3:6a:12:e9:18:3f:b8:b9:bd:18:42:9a:b6:dd:e4:75:95:
f0:0c:a3:00:df:f5:d8:62:40:2d:ed:12:f9:6d:04:2f:30:f9:
76:61:0c:e7:eb:62:0d:3e:11:c9:d8:69:6f:e0:fd:86:ca:5c:
87:0a:d3:0f:be:6e:c3:0d:13:8d:5b:56:81:f4:48:f7:c4:58:
78:f4:80:78:ca:7c:f5:39:ae:b3:98:56:74:6b:9c:b9:e4:ab:
e7:83:5d:a6:f7:4c:65:21:ae:6f:7c:e8:68:d1:2b:c7:44:c9:
d9:04:ad:6c:6b:c3:5c:93:39:3b:2e:0b:a2:29:83:8d:9b:dd:
73:d8:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:19:53 2025 by rpki-client