Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/443fe304-46c7-3dcc-ab7d-91d5e7bf92e6.roa
File: 443fe304-46c7-3dcc-ab7d-91d5e7bf92e6.roa (raw, json)
Hash identifier: NcMl/u/klw7hSzRhjh9G/AzQ2oJS1s7qQmN8KJzVkBI=
Subject key identifier: BC:E8:4B:13:98:10:FB:63:6F:12:2B:5C:C8:53:8E:AE:D4:AC:42:32
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F43285849929463003981422927D4A5C0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/443fe304-46c7-3dcc-ab7d-91d5e7bf92e6.roa
Signing time: Sat 19 Apr 2025 01:00:48 +0000
ROA not before: Sat 19 Apr 2025 01:00:48 +0000
ROA not after: Fri 18 Jul 2025 01:00:48 +0000
asID: 0
IP address blocks: 157.133.16.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 02:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:92:94:63:00:39:81:42:29:27:d4:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Apr 19 01:00:48 2025 GMT
Not After : Jul 18 01:00:48 2025 GMT
Subject: CN=9c1eafca-a084-44eb-ac96-1c748ca8c547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:14:75:1c:db:b5:83:e8:9f:06:8d:4f:b5:
27:d1:b5:0c:de:06:ca:80:d1:36:c5:94:8f:88:a8:
2b:72:36:04:7c:84:d3:97:cb:9f:46:83:0e:53:d2:
22:56:77:c0:c9:e2:cc:5b:c3:85:c0:6a:d2:7c:bd:
13:0b:3a:f7:2d:e5:31:88:78:24:36:b8:83:8d:12:
b4:13:bd:83:f7:fc:df:f0:f9:6d:14:ae:22:51:16:
5e:01:2a:17:70:9f:98:e7:fc:03:8c:80:40:8e:e2:
b3:8c:08:9e:5f:41:f1:de:c7:e9:a0:15:0a:40:95:
5c:c5:6e:c6:3f:0d:3e:c2:5a:b0:26:21:e8:03:09:
99:13:bc:a3:ed:f4:7e:38:4d:d3:63:8b:f9:09:50:
94:93:de:27:9e:be:20:28:da:04:02:dd:42:2d:1f:
f1:03:2e:b1:1f:b5:14:7e:11:7d:3e:29:f3:f1:fa:
cf:70:36:2c:df:b3:5d:e7:42:b5:f1:9b:e0:ba:28:
9a:6d:a7:fa:57:9e:8c:3e:05:b9:d1:ce:0f:81:1f:
ab:cb:7d:f3:ae:7f:e9:0f:dd:fb:8d:7e:32:e7:33:
d5:9c:09:c4:ff:81:db:cd:ea:6d:4f:eb:f4:41:67:
ef:98:1a:97:f5:86:88:80:b0:80:6b:f2:e9:de:8a:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E8:4B:13:98:10:FB:63:6F:12:2B:5C:C8:53:8E:AE:D4:AC:42:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/443fe304-46c7-3dcc-ab7d-91d5e7bf92e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:2f:2f:57:97:71:7e:7f:02:bb:68:19:d5:0a:9d:14:7c:c1:
87:6f:ae:82:b4:d0:60:ab:77:c5:a9:36:59:7a:a9:9d:b4:19:
5b:64:2c:b6:e1:bf:8c:34:9c:6e:73:9c:bf:2e:7c:f4:41:b8:
fc:67:f6:07:dc:c4:bd:62:af:c7:0d:b6:2a:fd:00:c0:05:0d:
86:a1:d5:38:4b:19:65:bb:ac:91:27:74:55:4c:31:e7:a8:ca:
56:38:96:b1:64:30:4c:fc:15:0c:c6:e3:10:12:b0:2d:8e:9a:
9a:e3:3b:61:9b:91:ae:4e:b6:dc:3f:7c:6c:ae:d1:c1:65:1f:
f1:8c:5f:bb:87:02:ad:bf:44:36:5f:c8:e0:0c:92:e8:d3:2e:
36:0e:4d:1c:67:8c:62:9b:9e:34:88:50:8c:bd:80:8b:b9:ca:
a2:2a:7f:4b:c8:af:1d:ad:36:78:2b:86:0b:92:62:18:8f:c3:
73:19:d3:b6:a2:c5:cd:69:0c:70:cf:b0:6f:47:50:1d:19:56:
e1:f1:dd:02:54:e5:64:dc:c6:f8:c4:06:09:c7:b8:f8:41:f9:
dd:3f:dc:64:b6:7b:a4:93:ba:c3:35:d2:2d:f9:48:e0:03:fd:
b7:eb:65:54:f7:a1:b8:7d:5d:12:75:7a:82:38:0e:f7:1d:bf:
a3:c8:62:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:17:19 2025 by rpki-client