Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/fd4fb7f1-604e-391f-aa35-856ed2eaa977.roa
File: fd4fb7f1-604e-391f-aa35-856ed2eaa977.roa (raw, json)
Hash identifier: Ni9UfFZd+RPkuPwWg8mneYc/WLxyEhUx/zMQ+rP+EqI=
Subject key identifier: 7C:86:56:20:D6:BB:7B:0A:E3:A9:7A:4F:43:BF:F2:45:79:2A:CC:40
Certificate issuer: /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial: 010D0C9F4328584978A32A5AE759796FDC6B9880
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/fd4fb7f1-604e-391f-aa35-856ed2eaa977.roa
Signing time: Wed 09 Apr 2025 17:59:35 +0000
ROA not before: Wed 09 Apr 2025 17:59:35 +0000
ROA not after: Tue 08 Jul 2025 17:59:35 +0000
asID: 14277
IP address blocks: 65.50.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 11 Apr 2025 03:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:a3:2a:5a:e7:59:79:6f:dc:6b:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Validity
Not Before: Apr 9 17:59:35 2025 GMT
Not After : Jul 8 17:59:35 2025 GMT
Subject: CN=a7d9230b-f2fa-49b1-9144-567c3eba7d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ce:43:81:22:36:9c:16:f8:f5:d5:99:83:30:
02:d0:83:5b:ac:76:65:7c:0c:59:89:4e:ca:c0:c2:
fb:55:83:73:04:da:a7:25:da:72:c4:34:50:f9:a6:
f7:fb:22:4e:08:4e:11:ce:4f:d5:ba:e8:45:d2:23:
6b:90:f3:7a:62:29:ab:29:4a:09:d4:29:8c:c5:00:
48:16:55:c3:14:6c:9a:58:53:87:de:e8:3c:57:7e:
00:ab:75:1e:53:6a:0f:bb:fc:50:8d:0e:5b:96:0e:
8d:aa:fc:53:03:68:c1:54:82:f2:76:06:48:6c:96:
c8:9e:9a:d5:9e:8a:9c:00:79:36:dd:55:c1:6a:87:
b5:d6:9c:7c:bd:5b:a6:18:12:fb:de:5f:ee:3f:61:
3e:e0:b0:c7:33:e6:a3:98:32:9f:c8:5b:39:5e:e9:
e5:02:b5:0c:1e:cc:c7:91:72:25:a5:5d:fc:25:41:
c7:7f:7e:51:76:0b:cd:58:fd:27:7f:68:a4:3d:d5:
18:2a:13:fd:0e:e2:07:5d:21:4c:9d:e8:65:20:a8:
2b:be:09:a2:69:15:94:4f:81:b5:2f:32:d1:c3:64:
f0:85:ff:21:ff:2e:17:c8:87:eb:86:bf:3c:9f:7f:
a5:0c:72:9f:bc:f9:ed:08:49:0c:f6:77:f5:c8:e4:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:56:20:D6:BB:7B:0A:E3:A9:7A:4F:43:BF:F2:45:79:2A:CC:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/fd4fb7f1-604e-391f-aa35-856ed2eaa977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
X509v3 Authority Key Identifier:
keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
sbgp-ipAddrBlock: critical
IPv4:
65.50.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:3e:6a:e6:6c:f5:7d:a3:e1:26:6e:b8:6e:10:cd:36:32:cb:
3c:c0:85:10:25:73:ef:e5:e0:69:03:81:d2:60:37:a1:3b:01:
ad:e1:61:1c:3d:27:ca:f3:e7:67:c9:6d:f7:bc:69:9e:a1:2f:
6a:a1:93:d9:db:a1:b9:bb:1c:60:f5:ef:a7:43:73:46:cf:ca:
c8:43:4f:d1:06:e7:b2:26:c3:3e:25:9e:51:8f:35:6e:d1:b1:
3b:5d:b9:8a:17:16:29:bf:36:10:95:04:0d:c9:79:e2:6b:c6:
54:97:f2:2e:b2:fd:4f:2f:56:41:aa:5a:0a:80:7e:32:75:cc:
10:d1:29:1d:3b:1a:f0:06:47:ce:bf:ee:98:e8:70:fb:2e:ba:
9b:30:ea:cd:bc:a8:d0:7f:a0:80:bc:28:2e:91:10:07:59:76:
98:35:4c:90:f5:82:68:32:6b:cc:f1:e2:1e:fd:04:7c:d3:95:
85:b2:6d:bb:a2:3f:e3:7c:8f:36:9e:6a:b1:93:a4:3b:f1:20:
2b:34:64:21:a5:8a:e0:16:e6:c3:a0:ae:f0:d2:3f:79:1a:6c:
4e:2f:dd:95:32:fb:f4:bb:70:8b:d9:0f:e7:88:ae:c2:7b:94:
e2:87:5f:40:a8:a5:bf:af:4b:ca:0e:ca:7d:9c:7a:4e:6a:18:
bc:ec:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:33 2025 by rpki-client