Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e054ef87-7c57-3b99-8660-964085be4c13.roa
File: e054ef87-7c57-3b99-8660-964085be4c13.roa (raw, json)
Hash identifier: m3OQYb4ukuaHFx7okyFlTAg8acZMj87sgWOCz43b1SE=
Subject key identifier: 5A:E4:D2:8D:79:E4:F8:65:0D:99:BF:4F:08:60:18:E9:0C:C6:14:EA
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F4328584983806B2E957BF0E798AF6000
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e054ef87-7c57-3b99-8660-964085be4c13.roa
Signing time: Sun 13 Apr 2025 15:23:28 +0000
ROA not before: Sun 13 Apr 2025 15:23:28 +0000
ROA not after: Sat 12 Jul 2025 15:23:28 +0000
asID: 834
IP address blocks: 141.140.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 18:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:80:6b:2e:95:7b:f0:e7:98:af:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Apr 13 15:23:28 2025 GMT
Not After : Jul 12 15:23:28 2025 GMT
Subject: CN=d36bb3e8-38cc-42f6-bef8-3536c74e79d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:b3:76:75:26:8f:66:52:51:df:50:2f:a2:
54:2d:fd:7e:61:eb:0a:db:d9:f0:6e:54:16:2b:51:
bc:73:fb:a9:fd:f8:aa:86:2d:c7:d3:88:b4:ab:c1:
3f:80:3b:f3:00:4b:ae:4a:93:8d:95:e8:56:48:ce:
50:9e:d1:86:6d:fe:ad:27:5e:b8:20:0b:d6:53:d3:
10:9d:83:ca:f5:ee:5a:08:1c:a5:fd:ae:20:ee:3e:
d7:36:2d:f8:8c:5b:0f:da:fc:b9:32:73:26:60:cf:
43:ca:08:92:71:76:bd:40:b0:83:77:84:9d:8a:d7:
a8:02:2e:8c:b6:a2:6a:68:67:5f:c7:fe:85:ce:57:
3c:89:fc:c7:f1:a5:77:3d:80:96:12:a6:61:18:38:
47:9e:7e:53:73:7a:e0:d7:dc:c5:04:b6:b9:ca:cc:
9d:b3:4c:8a:8a:89:bb:54:f1:57:8b:15:18:da:85:
8c:9a:4a:1e:16:80:e6:b0:5a:90:c2:d3:e8:86:fe:
e8:ad:41:d6:5e:df:50:94:4c:47:86:2c:cd:16:d1:
f1:ab:c7:bc:d8:d4:03:ac:5d:f1:fb:60:27:ef:02:
35:03:be:a7:0e:67:0d:80:24:b0:44:a2:95:01:13:
0a:e6:32:e7:35:1d:ae:ad:02:9b:6e:7d:99:d5:e0:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:D2:8D:79:E4:F8:65:0D:99:BF:4F:08:60:18:E9:0C:C6:14:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e054ef87-7c57-3b99-8660-964085be4c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:78:72:96:5e:63:24:ec:47:c5:d4:5d:5b:67:4b:9d:4e:ca:
2c:a1:6e:8e:0a:33:4c:69:86:99:b7:47:ab:b8:34:c9:cf:8c:
9f:2a:9c:94:8e:08:bc:c5:7d:b2:ce:7b:74:52:39:ed:9a:5a:
9d:62:82:7d:f9:1f:0d:65:b5:d1:1f:b9:12:a1:e6:88:10:1b:
da:4e:5f:74:c5:44:42:f5:db:66:91:91:eb:36:84:a8:56:4e:
06:2d:b9:a2:ad:1f:72:a9:b3:01:7d:72:37:75:e6:58:f0:d1:
2d:45:88:3d:30:99:37:d6:7a:46:b0:af:e4:44:c1:84:d7:89:
92:94:9a:d9:bc:4c:12:af:d1:bd:d9:cf:12:e0:d8:58:5b:37:
89:fd:6c:7d:1e:36:5e:95:9e:bd:7a:14:f1:96:04:43:f5:03:
5f:f8:9b:1a:0a:f1:cf:b4:17:79:e5:5d:0c:f4:74:c4:48:b9:
8a:22:48:be:34:da:63:d4:19:af:db:d9:b9:b3:42:bd:fe:70:
61:07:de:79:b4:68:5f:76:e1:07:ff:2a:0d:2b:d8:cb:16:58:
c0:f1:e3:2d:6c:e1:4f:6b:91:cb:20:32:b5:27:c4:7a:58:37:
c8:2f:78:cf:53:ac:f8:78:28:62:39:2e:44:39:bc:c9:75:31:
ae:ad:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:32 2025 by rpki-client