Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f14acbc-bf1d-35ca-b76f-dc59b003d03a.roa
File: 2f14acbc-bf1d-35ca-b76f-dc59b003d03a.roa (raw, json)
Hash identifier: Xa0IhgWWzVwA0UYaE0zQUz0ICn+cVGlbH4dPMHP8oJA=
Subject key identifier: 46:82:AC:F7:91:4B:BD:9C:5D:B7:9F:D6:2B:B7:25:D3:ED:FB:DB:C7
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285849F5AFCEA089AD76674CD2F420
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f14acbc-bf1d-35ca-b76f-dc59b003d03a.roa
Signing time: Sat 24 May 2025 13:01:04 +0000
ROA not before: Sat 24 May 2025 13:01:04 +0000
ROA not after: Fri 22 Aug 2025 13:01:04 +0000
asID: 53356
IP address blocks: 209.178.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 11:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f5:af:ce:a0:89:ad:76:67:4c:d2:f4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: May 24 13:01:04 2025 GMT
Not After : Aug 22 13:01:04 2025 GMT
Subject: CN=92d7e32f-db7e-4f9c-9a08-5ea24b4b73dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:d4:a7:17:44:c4:6b:7e:29:31:9f:6a:37:
70:b2:21:6a:2e:96:07:7d:02:de:6e:9a:00:1a:d5:
59:c4:db:0c:1d:68:38:72:c3:ab:c3:e7:dc:fe:cb:
ba:31:58:cd:dd:c6:1b:e1:ba:a5:1a:80:a5:30:a6:
05:59:9c:8a:ff:1a:5b:40:ab:4d:10:3b:e2:7e:75:
a2:a0:2f:ea:46:87:9d:7f:00:1b:38:0e:2d:04:d4:
9f:6e:f1:7c:6f:76:9b:ae:d7:ef:e7:91:d8:f0:01:
8e:c9:6d:6f:76:70:43:be:02:50:53:cc:e0:46:17:
81:ac:2c:24:2a:44:f9:6c:4c:b2:fc:34:39:98:17:
5b:02:f6:82:28:0d:c3:76:d1:0c:64:1d:16:41:c7:
15:9b:b7:95:4b:16:c1:35:06:a0:88:78:0c:f8:de:
02:b8:66:4f:8b:6f:e9:eb:05:97:42:6f:cc:e1:d4:
eb:59:27:1b:1a:b6:4f:1a:23:ce:22:11:c8:4c:f6:
c6:bc:f5:fe:89:a7:f2:f8:ed:de:3d:51:b5:ef:1e:
d1:d5:d6:ed:14:8d:d6:54:53:d5:36:a2:c4:5b:17:
78:89:31:b8:ac:4e:e9:5a:d6:3d:02:d7:c5:e8:a6:
5f:66:ce:24:fa:0e:9d:a6:8c:28:c0:33:e3:a2:9f:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:AC:F7:91:4B:BD:9C:5D:B7:9F:D6:2B:B7:25:D3:ED:FB:DB:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f14acbc-bf1d-35ca-b76f-dc59b003d03a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:7a:b7:b2:90:e0:2f:76:25:e0:91:a4:ac:2a:6a:2d:14:8d:
3f:32:c3:87:87:88:10:0d:02:35:6e:f6:e7:ec:4b:75:a8:0d:
d7:e0:0a:f9:9d:0d:1b:2d:7e:bb:d0:74:9c:b3:16:17:cb:bb:
d1:4f:23:7a:4b:f0:97:b4:e1:2f:82:b7:62:28:52:88:9a:f6:
f1:7b:84:17:fd:0b:b5:74:27:50:7a:f6:58:44:cb:66:ae:9f:
44:0f:f6:70:b0:40:e0:5a:1b:06:2a:5d:f0:cd:28:41:32:1d:
37:ba:2d:89:54:c6:c8:91:1b:9c:63:ef:b4:71:e9:ab:d9:52:
53:40:7c:2c:bd:8b:0a:ad:0c:a3:c2:ab:cc:76:ff:d8:8b:78:
29:20:7f:95:e4:00:91:9b:20:c4:de:e6:5e:2f:4c:51:43:f7:
61:34:5a:d0:d4:9c:4d:62:f9:e0:a0:73:a6:db:64:4b:88:ad:
35:1d:b3:f7:60:37:b1:af:5f:f4:fa:98:7c:5c:d3:df:1d:18:
3c:4f:40:a6:d3:67:49:80:2c:4b:93:de:e3:7d:e0:27:04:df:
4f:ad:a2:19:71:ec:8e:03:02:a9:f5:97:a8:e6:8e:0f:65:35:
31:01:16:26:72:5d:aa:a8:ac:02:ea:31:c0:02:86:eb:04:01:
19:10:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:35:06 2025 by rpki-client