Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/bb04a344-df58-3624-a1ac-3de45e3dc81c.roa
File: bb04a344-df58-3624-a1ac-3de45e3dc81c.roa (raw, json)
Hash identifier: z9+g75MkcfUELwdGe8nmOYPHAWIjWKXl9ISJEWmTCIQ=
Subject key identifier: 7C:70:05:F3:AD:CC:1E:25:B9:18:6E:C2:BE:D6:28:68:74:78:E7:CB
Certificate issuer: /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial: 010D0C9F43285849789797503624AFA889EADF80
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/bb04a344-df58-3624-a1ac-3de45e3dc81c.roa
Signing time: Wed 09 Apr 2025 17:36:16 +0000
ROA not before: Wed 09 Apr 2025 17:36:16 +0000
ROA not after: Tue 08 Jul 2025 17:36:16 +0000
asID: 16509
IP address blocks: 206.219.224.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 19:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:97:97:50:36:24:af:a8:89:ea:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Validity
Not Before: Apr 9 17:36:16 2025 GMT
Not After : Jul 8 17:36:16 2025 GMT
Subject: CN=19fef38b-b135-4faf-a92e-55dc46c2bf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:67:af:f9:2b:b1:f4:5f:d5:94:0b:c9:8e:
38:28:df:e5:67:b4:78:0b:c7:e6:fe:81:a3:70:24:
8c:9a:21:19:c9:bc:b2:93:0c:f2:ba:b1:50:3e:ce:
85:75:55:9f:6d:ee:6e:d7:67:70:b2:28:b4:96:92:
a3:27:76:ce:c4:0e:a9:2b:2e:c9:63:21:eb:81:a4:
f9:d2:e0:91:8b:d7:28:47:4d:d4:3f:11:d7:ce:d6:
81:0e:61:aa:65:fe:c2:18:c6:f3:85:e4:89:a7:4e:
18:21:e3:b5:e5:13:80:43:b6:25:b7:f4:70:3b:87:
4b:b5:76:b3:48:9d:ca:42:34:e2:87:61:23:a5:7e:
55:21:a8:f4:7d:0d:2f:87:f4:c9:a2:be:7a:10:95:
d7:bf:8e:f9:dc:61:88:aa:db:27:27:97:26:8b:32:
68:55:15:4a:89:00:7c:88:59:c6:d1:11:42:89:44:
69:8e:d2:a1:33:b8:75:7d:70:03:dd:d1:6d:df:d9:
8c:a8:0a:f6:9a:28:21:fd:69:27:fd:03:79:02:ec:
08:bc:ca:d6:f2:bc:b0:66:40:1b:54:cb:89:28:f3:
dc:a8:cd:93:f5:45:ab:2a:16:0f:fc:c5:1b:46:2c:
2e:5d:13:8b:77:ad:47:4f:1f:49:76:b4:15:cf:93:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:05:F3:AD:CC:1E:25:B9:18:6E:C2:BE:D6:28:68:74:78:E7:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/bb04a344-df58-3624-a1ac-3de45e3dc81c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
X509v3 Authority Key Identifier:
keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.219.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:c6:06:2d:f8:1b:a6:dd:d2:a7:37:22:b0:d4:07:31:61:ec:
af:94:45:4d:30:57:4d:09:8d:2d:ff:77:b9:bc:5b:19:37:bf:
ea:fb:71:99:b6:d6:bb:ae:8e:ab:31:23:23:f6:4a:b7:a5:e0:
cf:53:76:54:6c:13:27:2b:b6:1b:89:0f:03:d6:9d:fe:09:51:
ff:a2:34:8c:b4:30:f8:d7:6f:05:f9:28:94:18:7f:b3:2d:22:
96:63:69:66:5d:94:7d:c6:a1:78:22:52:5a:01:59:49:a1:22:
65:16:2f:74:7d:45:14:95:54:9c:19:f8:08:05:c0:f8:c8:d3:
ef:ef:4d:9c:04:30:48:8d:be:ad:bc:19:49:13:62:6a:88:9f:
3e:cc:37:5e:d8:45:dd:e1:ed:33:07:13:38:e8:cc:4f:a5:7c:
7d:7a:14:cd:9b:12:59:d1:6e:c3:b9:a9:0e:4d:98:0f:c3:7d:
e9:5a:94:82:a5:f5:c6:15:65:22:3f:a6:b3:21:ea:fb:c8:ce:
8b:5f:d5:48:7c:9f:5e:df:91:6a:f8:d2:44:f0:de:89:a9:92:
e5:7e:ad:b4:84:45:b9:04:f9:c6:55:19:02:8f:b5:b3:fc:b1:
67:0e:70:7b:8b:0a:89:87:04:12:32:f2:86:a9:fe:a4:47:43:
e0:62:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:59:24 2025 by rpki-client