Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/abc64503-1ac7-3dec-a238-dd70d69320cd.roa
File: abc64503-1ac7-3dec-a238-dd70d69320cd.roa (raw, json)
Hash identifier: kRKsMvan10VHQw1eiPjqJ2CoKaOmBbCREiqdf3LW5JI=
Subject key identifier: 78:3D:75:CB:F9:7E:27:7A:0C:E8:A1:4E:7D:69:5C:34:D9:A0:40:54
Certificate issuer: /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial: 010D0C9F4328584906DD6EFC88EAEF1C427FD5C0
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/abc64503-1ac7-3dec-a238-dd70d69320cd.roa
Signing time: Thu 27 Feb 2025 23:54:50 +0000
ROA not before: Thu 27 Feb 2025 23:54:50 +0000
ROA not after: Wed 28 May 2025 22:54:50 +0000
asID: 0
IP address blocks: 23.164.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 00:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:06:dd:6e:fc:88:ea:ef:1c:42:7f:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
Validity
Not Before: Feb 27 23:54:50 2025 GMT
Not After : May 28 22:54:50 2025 GMT
Subject: CN=21ddfad6-f6d5-4cb6-a574-406f7505dc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:92:ec:54:ba:31:59:15:98:1f:96:ac:2b:26:
13:7f:7e:ef:34:bb:8c:05:95:be:96:0f:08:5d:6f:
70:f9:be:79:e4:8d:bb:b4:4d:e1:dc:28:c0:94:a6:
0d:a8:81:d6:14:fd:f8:b7:f6:74:01:29:7e:13:87:
91:71:3a:dc:6b:59:db:fa:11:2d:b8:df:17:d8:a5:
8a:19:6a:ca:9f:03:d3:e3:b8:51:a6:89:52:bd:f3:
25:5b:f3:7a:89:37:8f:19:d1:d2:66:6b:cc:d3:af:
47:f5:0c:66:a1:4e:5f:3e:ab:bb:a7:71:6a:30:e8:
a4:87:e1:b9:e2:6c:99:a7:ad:9c:75:da:42:de:df:
a5:78:f7:ba:eb:3f:ba:cb:e7:6d:b3:03:12:ad:ae:
33:b0:24:f8:86:ff:e3:25:ae:1d:d7:ec:95:02:e8:
70:2e:c6:df:e8:ef:d9:3c:5e:68:c6:a1:35:c0:08:
8b:e5:14:5b:99:22:3e:50:9c:f3:a5:09:73:0e:1c:
18:a5:4d:58:d8:e3:1f:e6:45:e1:0e:b6:c0:d3:c7:
d6:65:84:52:6c:c7:38:9b:d2:26:13:55:fb:b5:0d:
1e:51:74:f4:d1:b4:ee:49:54:5e:b3:af:16:85:fe:
8c:c8:24:3f:2a:67:26:0a:5a:7d:b5:72:5c:df:f1:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3D:75:CB:F9:7E:27:7A:0C:E8:A1:4E:7D:69:5C:34:D9:A0:40:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/abc64503-1ac7-3dec-a238-dd70d69320cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl
X509v3 Authority Key Identifier:
keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:85:f8:91:7e:53:1e:19:cf:c5:a7:e6:67:63:d2:7f:04:2d:
f1:a4:8f:0f:af:dc:16:90:bd:dd:11:8b:2a:30:98:53:60:75:
1d:6f:bd:55:27:02:d0:92:36:fb:6e:2f:13:1f:7e:53:d6:4b:
74:57:a2:48:fb:d2:27:9a:6f:39:07:21:8c:69:56:2f:31:53:
8f:5a:6b:0b:9d:c5:07:91:7a:d1:4a:cf:e4:cc:4d:de:5b:3d:
fd:38:00:f1:4b:40:c3:50:6b:27:35:80:14:6a:1c:89:69:c4:
0f:58:bf:a0:69:bb:e4:cb:96:43:03:95:ff:44:2e:ce:81:a3:
b5:5c:a7:ff:7e:f1:d9:a7:25:2a:9f:b7:4f:d9:74:9f:f1:50:
06:f5:68:c6:55:84:90:f1:1e:20:07:2a:fc:b6:0c:68:7e:1f:
89:3f:01:ee:44:4f:7e:e0:29:a0:6c:cf:b9:88:e5:ce:4c:33:
90:c6:e1:81:20:1d:6d:38:a5:11:1d:3c:25:fc:e3:08:6d:1a:
04:5c:63:49:0f:a7:44:40:c4:ff:af:a9:72:04:46:54:75:54:
ad:ae:2f:d4:1b:b8:12:ba:e7:8f:ea:b8:88:a7:4b:9d:19:40:
b7:93:a3:98:85:9f:f9:dc:57:ea:a8:bc:9b:63:eb:1c:55:bf:
c7:57:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:44:15 2025 by rpki-client