Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd4b3a5a-a58b-3508-81ff-4aefaf187d7b.roa
File: bd4b3a5a-a58b-3508-81ff-4aefaf187d7b.roa (raw, json)
Hash identifier: lw/27lGU0yd2nNTekWyICqf1LseOo1F7i7Uq7truIGY=
Subject key identifier: 61:38:0E:A7:41:F8:5F:B2:18:6E:C8:76:10:57:B0:C7:87:8E:66:C0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849B0BDD9DDD827F698EB182F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd4b3a5a-a58b-3508-81ff-4aefaf187d7b.roa
Signing time: Tue 29 Apr 2025 20:18:37 +0000
ROA not before: Tue 29 Apr 2025 20:18:37 +0000
ROA not after: Mon 28 Jul 2025 20:18:37 +0000
asID: 19905
IP address blocks: 173.29.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 12:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b0:bd:d9:dd:d8:27:f6:98:eb:18:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 29 20:18:37 2025 GMT
Not After : Jul 28 20:18:37 2025 GMT
Subject: CN=0ef7378d-6fd2-4994-aa25-7dffa073950f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:7c:21:e0:2c:73:9e:2a:d8:17:23:f5:78:
50:23:ce:97:d9:73:12:94:79:d3:0d:3b:b9:66:ff:
32:ff:f1:e2:38:a7:20:20:8e:39:4f:0d:75:dd:ed:
e1:79:e8:8e:7b:99:7f:2a:e9:40:76:9f:36:c0:ba:
f8:01:f6:2a:6d:7a:db:15:71:a5:58:f9:6a:ac:fa:
31:62:f6:c6:af:bf:e9:ef:5f:2f:a2:60:be:12:02:
4e:dd:df:47:f3:4d:ee:10:6d:15:4d:ee:81:d1:a7:
38:20:04:3b:d4:1d:9c:c2:f6:30:18:b7:b1:ae:41:
7f:47:f5:cb:4b:46:88:6b:dd:aa:67:35:95:30:87:
81:5f:a0:ca:40:8d:82:c1:50:65:0d:63:b2:99:72:
e3:0c:11:28:21:d1:2c:f4:33:26:d6:ed:6f:b8:82:
91:e1:f4:be:50:4f:d0:35:4a:81:59:f1:79:53:4f:
2d:72:cd:f1:c8:05:ec:8e:c3:cb:25:3d:2b:7c:3d:
ed:3b:a3:5b:ab:0c:76:91:6a:c7:9a:b0:e1:50:ae:
af:6f:af:09:24:cb:4e:7e:e0:20:ab:bd:da:d4:f3:
f5:81:98:31:a2:19:cd:07:0c:82:58:1a:6c:52:97:
be:86:7e:c6:85:e8:6a:66:66:0c:4d:e0:51:c4:79:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:0E:A7:41:F8:5F:B2:18:6E:C8:76:10:57:B0:C7:87:8E:66:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd4b3a5a-a58b-3508-81ff-4aefaf187d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a3:ca:4f:87:c4:aa:a8:cd:46:1b:a9:1d:aa:cf:05:8f:d0:
fb:a1:45:51:7f:86:a4:7a:19:da:ed:69:09:4d:00:c3:6a:6d:
3e:85:ec:1a:16:94:3a:64:41:14:d2:fb:dd:85:cb:c2:f7:72:
67:31:62:3f:0c:d8:45:0c:0f:77:93:1b:48:af:ec:7d:3e:fd:
19:d8:91:15:d1:16:0d:41:d3:93:22:3b:35:a9:0b:29:88:b6:
cb:ad:04:99:f0:30:a5:62:d3:ea:f0:3e:1a:8e:e5:b5:65:9f:
fa:7d:d3:d3:df:ae:d7:73:f2:67:a1:36:8d:71:9a:89:52:e6:
30:5a:31:9c:8d:29:7d:1b:eb:51:a9:48:ad:33:c0:74:eb:b5:
b0:c3:ff:5c:f2:2b:f1:d9:81:37:62:e4:97:0a:b2:d8:4b:4e:
e3:f5:b6:fb:e0:d0:c2:c3:ac:3c:7b:a3:c0:07:db:11:ae:3c:
51:b5:5a:20:86:28:74:eb:a4:61:41:37:e6:e7:68:07:62:db:
95:aa:f5:e5:79:9c:36:17:1f:60:44:85:e0:3b:42:55:e5:9a:
ef:c9:b1:a2:34:46:55:83:05:02:ce:c6:5f:11:3f:e5:21:ea:
e2:87:f2:bf:f1:aa:1a:c4:14:51:01:b3:c9:11:ff:80:6f:8a:
26:64:cd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:46:56 2025 by rpki-client