Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/4589e70a-70dd-3cd6-af10-eb9fed130ae0.roa
File: 4589e70a-70dd-3cd6-af10-eb9fed130ae0.roa (raw, json)
Hash identifier: EEhh6m6F7fUwuKveff/hBctJe9dryt+MhcjocqYwV+M=
Subject key identifier: D5:18:DF:82:69:E6:BA:E7:F5:16:72:8C:FB:24:E0:E9:96:15:DE:20
Certificate issuer: /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial: 010D0C9F43285849CE9A43ECB1A6DB742965A500
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/4589e70a-70dd-3cd6-af10-eb9fed130ae0.roa
Signing time: Sat 10 May 2025 13:01:00 +0000
ROA not before: Sat 10 May 2025 13:01:00 +0000
ROA not after: Fri 08 Aug 2025 13:01:00 +0000
asID: 47002
IP address blocks: 74.114.88.0/22 maxlen: 24
158.51.60.0/22 maxlen: 24
208.80.4.0/22 maxlen: 24
2604:4f00::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 18:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ce:9a:43:ec:b1:a6:db:74:29:65:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
Validity
Not Before: May 10 13:01:00 2025 GMT
Not After : Aug 8 13:01:00 2025 GMT
Subject: CN=2377b262-a099-4b07-9b09-276d1503fc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:20:3c:50:09:5c:20:f3:57:16:23:70:80:
a9:69:73:ea:d4:6c:6e:73:69:b4:25:59:db:b7:c0:
89:09:40:8e:6d:1f:d9:66:13:58:fd:f2:dc:99:96:
60:81:ad:72:c9:84:9d:0b:4e:df:d5:b5:c9:5a:1a:
75:d7:ea:13:f3:67:10:33:e6:ac:13:b8:e7:72:fd:
bb:77:a8:cb:22:02:55:16:b1:02:e5:7a:fe:69:4a:
a3:73:96:fb:81:bd:1f:6c:6a:30:e1:2c:07:99:58:
91:22:67:29:70:a1:82:9c:06:76:43:9b:60:19:44:
e8:aa:af:96:7e:33:72:5e:42:b9:dc:2e:66:27:ae:
f3:15:b0:45:ce:7b:87:c4:45:25:ca:42:db:27:76:
bd:6b:56:da:11:75:a9:cf:63:d9:98:9b:88:80:19:
bb:f8:0d:5a:0d:da:76:41:ad:a9:70:2e:23:02:f9:
2f:f0:18:00:fe:a2:03:9b:40:18:67:14:2c:7e:8f:
06:62:0d:0a:27:fc:a5:21:bb:41:f2:80:8e:a1:77:
48:8d:ee:c2:04:40:b3:22:f4:eb:55:01:59:ad:d3:
15:7a:65:ef:ee:fc:c7:c7:18:e3:28:47:8d:b3:57:
bb:a1:81:75:3d:ea:cf:d0:72:9f:11:79:b6:92:73:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:18:DF:82:69:E6:BA:E7:F5:16:72:8C:FB:24:E0:E9:96:15:DE:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/4589e70a-70dd-3cd6-af10-eb9fed130ae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
X509v3 Authority Key Identifier:
keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.88.0/22
158.51.60.0/22
208.80.4.0/22
IPv6:
2604:4f00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:c2:7a:02:5b:38:70:6b:14:93:7c:29:bb:f7:36:1c:f1:ab:
53:f3:13:c1:46:de:ce:b6:5b:e6:cc:09:0b:c4:7f:71:ea:cb:
bc:58:8d:42:3b:ba:66:cf:6f:30:5f:c9:c4:53:07:67:37:17:
e1:ca:69:02:8e:62:de:e4:7f:be:60:1a:ed:b4:35:07:b6:51:
62:cb:76:49:23:c7:d6:33:b9:30:9d:be:18:de:ec:34:b0:27:
14:07:c2:65:45:e5:44:0d:47:35:ee:ed:52:f6:b0:c4:d2:a9:
61:b1:5f:39:25:81:0d:58:41:3c:d0:32:22:cc:9b:2e:5f:c3:
a3:cf:7f:fc:f3:31:af:31:ff:b5:89:22:03:7f:33:2c:47:50:
07:9a:7e:07:1a:78:b7:bf:33:17:74:a6:08:73:41:0a:95:8e:
fa:de:69:8e:9a:4b:82:af:57:f4:0c:08:d6:02:57:80:d1:ba:
6e:26:d1:5f:a0:cb:4f:63:cd:7d:10:90:a2:6e:9a:49:fa:3d:
f0:e5:44:7c:c1:0c:30:c3:53:1f:5a:a7:b5:f9:01:97:bc:bf:
97:14:94:cb:bf:30:6e:64:8f:5b:4a:08:e0:d0:b6:23:95:24:
6d:08:6e:66:de:c5:2e:3d:dd:0d:f0:a9:91:bd:6c:af:6f:27:
e0:5d:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:44 2025 by rpki-client