Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a665e105-17df-3095-b423-6cb824e912db.roa
File: a665e105-17df-3095-b423-6cb824e912db.roa (raw, json)
Hash identifier: PQ8SkLORrwW3HTuZsGaEVfQCkGDw3koy2KPo9TPQnWI=
Subject key identifier: D9:4F:A9:95:1A:61:CA:2F:68:5A:C4:E4:E8:32:5B:27:7E:1C:A5:AD
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285849897CB8811A9A5A7CD435D700
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a665e105-17df-3095-b423-6cb824e912db.roa
Signing time: Tue 15 Apr 2025 18:50:52 +0000
ROA not before: Tue 15 Apr 2025 18:50:52 +0000
ROA not after: Mon 14 Jul 2025 18:50:52 +0000
asID: 834
IP address blocks: 209.178.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 20:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:89:7c:b8:81:1a:9a:5a:7c:d4:35:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Apr 15 18:50:52 2025 GMT
Not After : Jul 14 18:50:52 2025 GMT
Subject: CN=a23ad256-4303-4178-987c-b4aa0ec496c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b2:38:ec:eb:74:b9:e7:1d:d6:a8:07:31:cc:
96:26:89:ba:24:b2:59:7b:5a:91:63:f0:77:30:a2:
e8:da:db:34:d4:bd:5f:72:81:c7:92:7f:06:60:d6:
31:26:0e:48:71:ea:3d:c7:42:5d:bc:3c:bb:0a:11:
bc:4e:07:b2:a3:b9:61:b5:8b:fa:97:ca:bd:dc:9e:
c5:50:37:48:23:6b:44:ed:9b:91:f7:52:c6:48:c8:
e9:c1:bd:a7:79:0d:b5:e5:65:2e:1b:1c:da:cc:ce:
51:89:90:f9:28:62:65:66:84:e3:7b:cf:64:2c:b6:
50:e3:aa:03:cc:57:20:98:1a:eb:1c:af:1d:35:11:
28:42:4e:c8:11:79:f6:b6:68:f0:eb:18:50:52:ce:
6a:98:d8:a8:96:63:45:25:f4:76:db:46:34:9b:99:
ea:3c:eb:80:69:36:fd:a6:64:87:56:6e:1d:37:eb:
4d:27:55:d6:da:5e:46:e9:c2:7a:19:b2:52:b1:3a:
a6:72:b9:60:48:86:ee:c6:37:c4:d0:19:d7:13:74:
6b:5b:00:6a:c7:27:22:51:0a:73:52:b5:9b:73:02:
b9:28:87:58:d8:72:37:70:02:a1:11:63:7d:0d:bf:
d2:14:4a:25:83:d1:6e:cc:5b:56:54:f4:59:df:8c:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4F:A9:95:1A:61:CA:2F:68:5A:C4:E4:E8:32:5B:27:7E:1C:A5:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a665e105-17df-3095-b423-6cb824e912db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:d5:68:5b:dd:e2:73:84:6c:73:37:72:48:ae:94:c7:af:32:
ae:1f:ca:52:29:93:bc:ff:df:e8:d5:63:0f:eb:43:fb:62:06:
41:40:4d:e2:15:a6:6c:d6:a7:05:2b:bb:90:a2:c1:5b:95:e1:
88:4b:55:e9:7b:fc:4f:7c:9a:97:dc:3a:48:49:e2:c6:21:41:
c9:b6:12:6e:d4:0d:80:9e:c1:6e:72:be:cb:67:da:8b:5c:5f:
02:3b:85:75:96:55:3e:40:65:fe:43:ab:10:d8:51:e3:33:85:
48:34:e2:fa:ea:14:b7:6d:e3:2b:6b:f6:b0:4b:97:a2:d3:cf:
cf:c9:18:75:aa:48:6c:92:a3:54:92:a0:17:39:69:d1:af:2c:
17:d2:fa:c6:6c:0d:72:53:5a:88:6d:22:4f:b4:42:1c:42:b0:
9c:c6:08:71:30:d3:e2:70:04:12:a5:70:90:31:63:fc:53:96:
32:31:00:c0:65:24:e2:b2:a9:5f:f3:c7:33:c8:77:b0:f9:43:
51:e1:41:74:ad:52:36:e6:47:46:6b:5a:76:bd:20:61:f8:7e:
08:7c:46:59:ae:12:08:20:fa:75:7c:10:57:fe:4b:ea:dc:99:
d2:39:2c:35:f3:f4:36:93:53:ba:1f:2e:b9:df:7d:09:28:b2:
83:3c:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:06 2025 by rpki-client