Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d06b0c-5839-3dfb-b0da-751b50099957.roa
File: 04d06b0c-5839-3dfb-b0da-751b50099957.roa (raw, json)
Hash identifier: 7aBdWyiNI/yY1ofx/T/RrsDZOCk1IWwk5a7NgOTkcE8=
Subject key identifier: 2C:FE:10:3A:FB:89:86:FA:91:D5:B5:AC:6A:FC:5B:F1:CF:76:59:03
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849B0C5498D4843D8725B428880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d06b0c-5839-3dfb-b0da-751b50099957.roa
Signing time: Tue 29 Apr 2025 20:33:36 +0000
ROA not before: Tue 29 Apr 2025 20:33:36 +0000
ROA not after: Mon 28 Jul 2025 20:33:36 +0000
asID: 19905
IP address blocks: 173.20.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 May 2025 12:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b0:c5:49:8d:48:43:d8:72:5b:42:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 29 20:33:36 2025 GMT
Not After : Jul 28 20:33:36 2025 GMT
Subject: CN=bf06eb2b-4cb7-4cc4-bbe6-d68c3df05cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:12:25:95:ae:80:c9:f1:8f:2f:38:c4:be:
da:b2:c5:3f:c4:8e:a8:c9:1e:8e:f6:75:a5:cb:50:
45:19:f8:fa:a9:99:ea:94:1c:0d:f4:5f:ea:fa:59:
23:9a:d5:a1:7e:1a:05:47:8a:6d:8a:cb:fc:d5:7b:
7b:cd:a7:8b:12:03:77:e3:c6:8e:6d:f6:50:67:4d:
b3:b1:76:e3:4a:01:9f:c7:c7:20:f0:59:b1:96:e6:
e5:eb:2d:0c:57:35:46:da:f9:80:6e:ce:8d:65:af:
7f:1d:a4:c5:bf:56:7d:b4:19:29:39:d1:dd:1e:da:
d7:30:e3:8a:85:93:29:46:30:8d:87:a3:a8:ed:86:
73:9f:99:39:f6:a1:54:74:c7:89:bf:44:37:f8:2d:
8f:cb:39:d1:97:cb:e9:19:15:6a:06:68:fc:d3:58:
83:f0:e4:94:56:2b:f6:e6:61:ac:be:cb:1c:f2:a6:
a9:90:e2:a1:ca:3f:fb:91:4e:c5:7b:1d:4a:bd:00:
e6:36:49:27:37:23:03:5d:9e:9f:36:a9:89:0a:c9:
4f:b3:cf:a4:9a:c6:14:e1:b1:76:2f:5e:a4:b4:74:
8d:ed:2b:56:0c:5d:44:c1:ed:c3:25:b5:fb:81:72:
9a:dd:54:1a:9e:39:fb:d0:10:06:fb:67:27:fa:83:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:10:3A:FB:89:86:FA:91:D5:B5:AC:6A:FC:5B:F1:CF:76:59:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d06b0c-5839-3dfb-b0da-751b50099957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:72:02:7c:d8:4e:c9:f7:69:55:3e:b4:11:de:c4:10:fe:d4:
dc:01:15:28:01:2c:f8:6b:17:dd:cc:d6:73:f4:bd:0d:aa:b9:
08:bc:9f:fb:e4:da:f1:40:bc:9d:9b:bd:9a:aa:e5:57:91:eb:
79:a6:fa:aa:2c:ae:d9:8f:04:e4:ec:77:a5:ef:77:b4:e1:b1:
d9:0d:74:60:dc:53:05:a1:fb:7e:f5:ca:32:8b:32:ef:d7:74:
dc:b2:4c:1d:17:4b:23:68:42:13:0f:ee:b4:5f:ac:e4:d1:09:
34:88:0d:b1:10:c1:31:42:d1:30:7a:80:e5:73:80:6b:a4:bd:
cc:8c:8b:c3:e5:fc:19:a3:97:f6:60:ae:27:02:43:bd:b0:c9:
66:0b:26:9b:20:17:9b:f8:b3:90:db:98:aa:75:96:b1:9e:7b:
b8:cf:3e:f0:c1:62:02:17:59:7b:a9:e5:2d:a2:0c:f3:76:72:
9d:ff:47:ee:9d:ec:83:96:b4:bd:98:63:b4:5e:d1:0a:6e:74:
11:af:a5:a9:a8:23:1c:d9:7d:45:71:08:eb:3f:60:d1:a1:62:
d3:4d:e8:20:56:d5:dc:0b:d0:eb:0b:09:04:b5:83:e0:7f:2d:
7f:a2:c1:96:39:98:29:a3:da:63:8c:c4:da:64:61:90:48:ca:
6f:48:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:15:38 2025 by rpki-client