Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/08e91fb5-8f97-3253-8065-2e785a35d869.roa
File: 08e91fb5-8f97-3253-8065-2e785a35d869.roa (raw, json)
Hash identifier: zQFhjWeUGG9C783n33QZkmUztmjeh9pM3cSWMamKCGY=
Subject key identifier: 2E:9C:B0:5D:3F:E1:5F:99:90:77:8B:4B:DD:5F:0E:E6:7E:F7:62:6B
Certificate issuer: /CN=fd82d6ac-3a87-4e88-ac84-e2da6745d53d
Certificate serial: 010D0C9F4328584962145A8D97ED1ABC8F8F8000
Authority key identifier: 11:9D:8A:D0:74:D5:0C:A1:9B:4E:96:B8:86:4F:B3:0C:30:DA:80:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/08e91fb5-8f97-3253-8065-2e785a35d869.roa
Signing time: Tue 01 Apr 2025 16:04:03 +0000
ROA not before: Tue 01 Apr 2025 16:04:03 +0000
ROA not after: Mon 30 Jun 2025 16:04:03 +0000
asID: 376
IP address blocks: 199.124.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 17:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:62:14:5a:8d:97:ed:1a:bc:8f:8f:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd82d6ac-3a87-4e88-ac84-e2da6745d53d
Validity
Not Before: Apr 1 16:04:03 2025 GMT
Not After : Jun 30 16:04:03 2025 GMT
Subject: CN=cda7adaf-03fc-4fb8-950c-0b62a9d7e737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:df:a6:79:ce:f3:8b:5e:c3:53:6d:e2:7b:
44:7b:3f:5a:be:10:88:bb:4f:32:2c:9b:5d:e9:34:
cc:3d:e3:b1:f1:a9:15:5f:44:99:a2:fa:cc:3d:6c:
6f:8c:f8:41:e0:58:44:a0:1e:a2:0a:fd:f1:24:25:
ad:9d:aa:bd:e1:b9:be:c4:7a:65:36:2b:2d:8e:89:
8f:67:5f:1b:dd:a4:b4:a3:94:08:be:b9:0f:d2:5b:
da:70:9d:37:14:3e:bc:b8:35:18:6d:06:64:3b:c8:
36:23:69:c9:95:7a:14:df:69:15:3a:0f:14:57:28:
0a:04:f2:f9:80:0e:d1:05:6c:cc:57:4f:2d:ca:92:
53:d5:28:d9:eb:bd:8f:65:5e:16:1e:86:63:a3:63:
de:47:bc:c7:75:22:64:79:9d:ad:7d:84:f1:88:08:
98:d5:b5:ec:5e:ef:54:10:3e:10:a3:f0:63:d7:40:
d9:5d:8f:70:99:18:3c:d3:67:08:8b:b9:c0:20:e3:
d8:b4:2a:9a:6e:9c:0e:b6:22:1d:75:17:1e:88:66:
ac:09:27:15:1a:ab:85:61:d8:2d:f7:08:67:3f:f6:
8b:98:42:2a:a0:35:f8:02:dc:4d:ec:93:49:ab:d8:
06:a4:1c:66:f7:aa:a7:81:5a:5e:de:06:30:3b:bc:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9C:B0:5D:3F:E1:5F:99:90:77:8B:4B:DD:5F:0E:E6:7E:F7:62:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/08e91fb5-8f97-3253-8065-2e785a35d869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.crl
X509v3 Authority Key Identifier:
keyid:11:9D:8A:D0:74:D5:0C:A1:9B:4E:96:B8:86:4F:B3:0C:30:DA:80:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.124.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:7a:fa:c4:42:3b:87:a2:5a:51:fc:b4:1b:47:de:5a:41:55:
9a:bc:85:37:f7:82:cd:ae:de:6f:a6:21:c5:c6:1b:0b:5f:9e:
26:74:f9:b1:df:0c:44:cc:99:cb:ed:82:ea:ee:49:22:c5:be:
6a:7a:cf:e6:25:b5:0f:61:a6:1d:ed:85:78:07:39:d8:32:57:
76:75:03:b2:d3:a3:a0:b0:fd:58:46:ab:13:5a:ca:20:42:bd:
6e:b8:f6:fe:c9:8e:ac:b5:56:53:b1:9d:1d:34:6b:23:0a:8b:
6d:aa:e8:00:f1:22:62:58:83:34:fc:87:55:33:58:89:eb:dc:
ac:6d:cf:19:c6:8a:23:65:11:07:db:1e:4b:96:e3:23:14:52:
01:1d:dc:9d:a3:af:b7:be:78:ad:56:b6:94:f5:66:91:9d:0e:
a8:9d:d7:a8:7e:d4:39:f7:4c:5f:49:3c:26:cb:ef:a7:e5:33:
d9:7d:e0:46:82:25:ac:99:74:4c:55:b5:da:ab:ef:0c:f1:6a:
fc:aa:f0:dc:0b:25:7d:3c:ad:17:46:13:13:31:80:e2:71:60:
53:d5:d3:9d:86:c7:fa:d6:00:f5:76:46:d5:33:76:b1:61:41:
20:63:f2:0b:78:b8:7f:fd:0d:78:76:7b:97:37:ea:66:81:b3:
4e:e5:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:44:12 2025 by rpki-client