Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85dbc76c-08e9-3fcb-911e-569b3aff01be.roa
File: 85dbc76c-08e9-3fcb-911e-569b3aff01be.roa (raw, json)
Hash identifier: +BWRsb+nVvzkmCHBOdW4iYkJueAEjVebMPgZizYtafk=
Subject key identifier: F4:AA:E3:A6:AB:31:93:8C:55:EB:26:0C:A2:B7:EA:AA:A5:EB:65:04
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584137874589154874B4E7FC72C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85dbc76c-08e9-3fcb-911e-569b3aff01be.roa
Signing time: Mon 13 Mar 2023 12:00:00 +0000
ROA not before: Mon 13 Mar 2023 12:00:00 +0000
ROA not after: Sun 15 Jun 2025 04:00:00 +0000
asID: 396982
IP address blocks: 34.34.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:37:87:45:89:15:48:74:b4:e7:fc:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 12:00:00 2023 GMT
Not After : Jun 15 04:00:00 2025 GMT
Subject: CN=ed127d56-1471-4c24-a460-995999059298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:48:f6:e8:bc:d2:09:c4:d6:38:51:04:32:
97:44:65:2d:30:82:a5:ac:3b:4e:61:f4:d1:7b:59:
32:e1:85:ae:cd:74:aa:54:30:8c:f5:ea:a9:a8:fd:
ce:ed:6a:91:bb:d4:6c:55:13:d8:3e:8e:6c:cc:42:
99:1e:f8:3a:55:d0:8e:7c:9b:82:b9:3c:ae:38:08:
99:0e:68:d1:4e:cc:c8:9e:28:8b:08:18:d7:20:8a:
8f:88:d3:a6:47:37:91:63:9f:5b:f9:97:71:d9:8f:
93:44:cf:d9:cc:75:86:72:9b:2c:ce:ea:89:8d:f7:
37:4b:c5:d5:5b:01:bf:c4:41:d8:3c:75:bc:4a:c1:
44:38:6f:16:6d:78:37:fb:38:0f:8d:b4:75:fd:bc:
1f:2c:9f:89:36:33:51:d1:64:ee:00:dc:86:35:d2:
68:e1:9b:77:a5:e3:02:f3:5a:74:e0:f0:88:d2:79:
c8:0f:0a:38:6c:67:56:0d:94:72:0c:1b:de:f1:40:
7a:ad:8e:30:f1:ed:c7:c0:37:66:3d:4f:2f:ee:48:
f9:5a:38:9f:fa:01:f6:8a:af:e9:b2:1a:83:26:69:
e6:6b:79:47:1e:d9:81:0f:5d:aa:aa:0b:49:fe:b1:
d5:9b:48:f4:36:d5:c8:e7:cf:7e:9b:10:0e:ac:1a:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AA:E3:A6:AB:31:93:8C:55:EB:26:0C:A2:B7:EA:AA:A5:EB:65:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85dbc76c-08e9-3fcb-911e-569b3aff01be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.34.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:76:72:b3:d6:3e:a9:5c:84:4e:a5:f0:aa:d3:a5:dc:3b:c6:
46:42:c9:62:43:43:ed:be:e2:4e:96:bb:ab:89:40:72:e3:d2:
56:73:c8:20:26:ec:7e:25:70:c6:b6:7b:2d:95:fc:35:d9:a3:
58:b1:01:99:e8:48:9f:3b:5d:d9:a2:97:ec:1d:3a:01:4e:c6:
a3:7e:6e:5b:2b:89:09:27:8c:f9:0f:61:36:0e:70:57:26:df:
e5:42:c8:80:8b:99:02:1a:72:53:cb:ce:55:93:5f:a9:a6:cf:
0d:ee:d3:0a:d7:7a:41:66:03:ad:cf:31:da:3b:8f:75:3a:0a:
10:c1:2b:25:3a:27:cf:98:f2:ec:62:64:5d:b7:44:2d:58:1e:
28:05:31:61:2b:e2:5b:20:4e:21:a6:51:fd:f5:0e:fd:03:17:
63:62:53:e5:a1:d7:3f:7c:34:35:87:08:fa:7a:c1:9e:aa:f7:
de:ef:bb:43:30:d3:bb:1a:32:ce:af:c0:65:1a:ae:f6:fb:15:
28:f1:0f:45:96:f0:3d:33:1a:69:04:8b:b6:dc:0b:c0:91:51:
df:c4:db:c6:7d:d8:e3:5b:3c:80:74:80:fd:a7:b9:d5:8c:a8:
59:ac:3f:ff:87:d0:74:50:d3:f4:65:7f:2f:8e:8f:e7:79:fd:
a0:52:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:25:12 2025 by rpki-client