Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33021ba0-5092-3f7f-8bfd-97278d995409.roa
File: 33021ba0-5092-3f7f-8bfd-97278d995409.roa (raw, json)
Hash identifier: PtaOFKkx6IkV7+u4nucqC1JRbFh8Rw4OVhNqLsV5E5Q=
Subject key identifier: A0:2D:CF:1B:5D:C4:C6:DF:9D:AC:38:51:75:26:43:A0:9C:3A:31:B0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285841D3DD931A1D33C897010DF380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33021ba0-5092-3f7f-8bfd-97278d995409.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 396982
IP address blocks: 34.143.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:93:1a:1d:33:c8:97:01:0d:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=7ff70c10-30c2-478c-b357-f273153ffc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:da:f8:31:13:d8:6a:8d:9b:53:84:53:48:
00:a7:01:88:93:96:ae:59:77:bd:cc:3e:46:30:1a:
6b:ea:a4:b0:36:03:fb:1e:51:19:b5:75:8a:76:6a:
dd:7b:3b:6c:64:fd:bc:ca:11:ce:0d:cc:f5:4d:52:
30:1d:71:f0:eb:a8:f2:08:3b:34:d3:34:df:b3:4d:
f2:fd:a4:c4:8d:9a:56:89:a7:b8:b8:37:93:4d:82:
80:37:2d:0b:32:be:09:f3:13:06:01:e0:15:4a:4d:
af:91:eb:05:d5:e8:12:2b:fe:c7:aa:c9:7c:75:82:
b4:52:be:38:5d:67:aa:63:f8:f5:28:c3:66:b9:35:
6f:85:ea:25:48:2f:cc:c9:18:67:3e:f9:a7:04:9d:
b0:40:be:92:29:00:b7:eb:1c:5e:57:50:f7:79:85:
00:bf:70:93:40:59:69:30:e0:fd:43:ec:64:37:86:
22:58:8e:26:d5:f2:db:2e:76:59:82:43:99:a2:63:
05:50:65:5f:71:c2:b1:e8:27:8b:a8:58:63:d7:70:
05:62:5e:6d:29:ea:b5:37:14:71:6c:28:96:7e:83:
cd:4e:f2:0c:64:ca:a8:4c:0d:98:f4:ce:34:fe:cc:
cd:c8:3d:ef:cc:36:45:b2:63:72:bc:47:45:a0:95:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:CF:1B:5D:C4:C6:DF:9D:AC:38:51:75:26:43:A0:9C:3A:31:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33021ba0-5092-3f7f-8bfd-97278d995409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:bb:85:7e:b1:7f:f7:fa:dd:99:3e:53:40:74:6f:60:b9:3d:
5f:0b:af:8e:fa:04:7d:51:52:8e:75:3b:c5:ba:9c:d4:c3:25:
d2:f2:a6:5b:19:67:a7:27:2d:e6:38:76:49:ff:01:d7:57:3c:
ce:ee:b3:62:0d:19:79:9b:31:9c:dd:77:75:03:3b:64:7f:26:
77:08:db:ba:21:ac:95:fa:74:99:14:0f:9b:e6:d4:59:87:fa:
31:d1:26:c9:8f:cb:44:62:12:93:a8:73:00:1b:1e:de:52:de:
ba:dc:85:98:6a:cf:b2:b5:97:99:b4:dd:4e:46:0a:12:15:64:
ee:19:cc:9d:48:e1:96:6a:d6:f1:fc:54:34:a0:f3:d4:25:c4:
b3:a6:b1:cd:af:69:7a:34:e3:e0:e2:50:d5:0c:04:74:7a:9b:
8d:ca:7b:12:01:eb:a4:a6:9c:62:6b:b6:83:17:41:dc:26:1f:
95:b6:fd:fb:76:45:84:d8:2e:7f:7e:11:a2:bc:6a:4d:03:d0:
a5:14:cc:b0:2b:44:15:a5:89:b9:b5:ea:db:e5:6d:d2:99:75:
76:ca:0a:9d:b6:f6:f0:eb:83:e4:11:0c:9b:2d:60:be:67:2e:
91:68:f9:75:12:97:8d:e6:bc:c3:40:a4:8b:39:92:5f:ca:5b:
3b:8a:53:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:06:55 2025 by rpki-client