Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb0f9e80-f0fb-3168-a74f-f06f387a5bfc.roa
File: fb0f9e80-f0fb-3168-a74f-f06f387a5bfc.roa (raw, json)
Hash identifier: qQdSTZmSH4VhXW82jCFw65Ezc5+EHvdZkDFjOt/iSf0=
Subject key identifier: F9:CE:82:ED:A7:18:2C:8C:67:20:77:EA:26:4E:72:97:26:F4:D1:38
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849995707C422B9968CD09E8080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb0f9e80-f0fb-3168-a74f-f06f387a5bfc.roa
Signing time: Mon 21 Apr 2025 11:07:51 +0000
ROA not before: Mon 21 Apr 2025 11:07:51 +0000
ROA not after: Sun 20 Jul 2025 11:07:51 +0000
asID: 213990
IP address blocks: 206.123.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 08:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:99:57:07:c4:22:b9:96:8c:d0:9e:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 21 11:07:51 2025 GMT
Not After : Jul 20 11:07:51 2025 GMT
Subject: CN=49255432-cdc2-44f8-8445-638f71a96c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:e4:3a:a2:c7:01:a9:99:f6:2f:d2:56:93:
39:6a:c8:70:94:a8:f6:b1:b6:39:a2:92:fa:9d:89:
ac:99:15:66:e9:55:8f:41:31:6d:93:96:7f:90:9e:
9c:8c:16:03:49:c8:de:69:31:15:1e:30:df:9e:a4:
bb:ff:8a:34:1c:94:df:8c:03:1c:11:df:2e:89:aa:
f5:f7:c0:cf:a0:8b:92:2f:7f:5e:af:1e:f5:03:22:
e6:70:59:dd:85:7d:82:c9:56:e2:d2:01:25:f4:66:
0e:b9:8b:9b:f6:63:ef:d3:62:1c:91:bd:b8:b2:1e:
c3:61:30:a5:5c:ad:80:fb:be:00:cd:6b:e1:01:96:
f3:d1:64:32:5d:1e:c6:fc:95:be:7d:dc:f6:f9:d1:
6b:30:d5:5c:60:cb:4d:ca:e6:ee:54:db:93:24:62:
72:13:4a:4c:40:d2:a6:35:87:66:1e:60:4f:99:18:
70:c9:d7:ef:59:5e:b0:5d:94:ee:3f:66:6a:92:c1:
82:0f:3c:1a:e9:8c:aa:be:2f:be:1c:ae:61:01:e1:
d7:b7:fc:13:99:e7:b9:84:4b:f7:45:a2:27:e2:45:
42:bc:10:2b:0b:c7:1c:d3:b9:19:42:c4:0a:e1:83:
9f:50:f0:22:a9:79:eb:c6:5d:6d:7a:d2:85:53:f2:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:82:ED:A7:18:2C:8C:67:20:77:EA:26:4E:72:97:26:F4:D1:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb0f9e80-f0fb-3168-a74f-f06f387a5bfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:1a:72:77:98:61:83:be:25:e6:d2:80:b5:66:18:9b:6e:05:
0f:24:d6:00:4a:45:29:f4:cf:5f:fc:82:25:ab:57:2d:34:3a:
62:cf:1b:01:f3:6d:ab:52:44:d1:c6:8c:df:8a:b9:24:7a:cd:
5c:30:43:d9:16:00:b7:43:a6:38:c7:c3:2e:aa:6a:cb:7c:57:
60:14:de:79:39:20:53:73:c9:2b:92:18:82:c5:79:7e:53:68:
af:06:df:90:53:81:4e:0c:9f:da:1a:6d:ce:a4:33:aa:40:10:
03:42:5a:18:68:17:6e:e5:69:a8:e3:ab:07:f3:71:f0:95:3b:
60:45:e7:9a:1d:43:52:77:9a:a8:b2:47:0f:65:e4:5f:8b:05:
e6:c8:59:f9:1c:e2:9b:49:c3:9d:3a:bf:6b:c9:9e:b3:42:dd:
1c:f4:9a:b3:e5:b3:8c:3e:b8:02:cb:db:c7:b6:69:f7:13:97:
8e:cd:ff:25:22:4d:fe:13:9a:a9:b1:03:11:90:38:88:6c:1a:
85:7b:31:ce:21:ee:9b:b0:d1:08:a3:8a:c3:35:11:22:e8:b5:
ce:b2:eb:93:0c:2a:68:65:c5:fc:26:a9:af:b5:73:0a:c7:e3:
12:74:55:a3:51:ba:04:52:d2:b3:01:e4:df:1d:43:c5:0a:1e:
a7:32:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:09:13 2025 by rpki-client