Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/59963d90-aef5-3029-9d57-81148e9ab409.roa
File: 59963d90-aef5-3029-9d57-81148e9ab409.roa (raw, json)
Hash identifier: ZhEmh2fFX/PNeHnakaRcgnAGQSRhRZB1dVXXvtvTMCY=
Subject key identifier: 1B:0E:41:C1:02:F3:44:C1:FF:11:E9:CA:9D:60:1B:8C:3A:38:94:7A
Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial: 010D0C9F4328584989A19321C9BA89360254A240
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/59963d90-aef5-3029-9d57-81148e9ab409.roa
Signing time: Tue 15 Apr 2025 20:05:07 +0000
ROA not before: Tue 15 Apr 2025 20:05:07 +0000
ROA not after: Mon 14 Jul 2025 20:05:07 +0000
asID: 203724
IP address blocks: 131.229.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 20:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:89:a1:93:21:c9:ba:89:36:02:54:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Validity
Not Before: Apr 15 20:05:07 2025 GMT
Not After : Jul 14 20:05:07 2025 GMT
Subject: CN=75d25e73-100e-434b-8f9a-70a2ddeb549c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:78:37:4a:69:b3:ca:8d:7a:88:be:6e:4e:
8e:d5:72:5e:a3:34:7a:16:c7:9a:63:bf:90:72:fd:
7b:51:dd:e1:21:e3:11:d3:46:6b:9b:3a:0b:b4:8e:
ba:6e:73:d3:a2:e0:c3:77:2d:87:de:87:63:cd:12:
04:45:39:7b:53:01:3b:d3:84:09:cf:1e:5b:f3:b3:
f6:e5:42:d1:8a:ce:40:18:18:69:e7:14:26:c1:80:
d7:17:50:5a:2b:82:14:9e:0c:ff:e3:af:0e:0a:7f:
d1:2c:4b:5c:40:37:fa:65:5c:21:34:f9:57:0a:5a:
a2:44:ae:a3:4b:2a:6d:8a:f8:75:70:92:41:49:20:
e0:f5:23:60:e0:0a:7c:43:dd:3c:b1:6f:44:d2:92:
97:4d:b8:73:7f:f3:3c:08:75:15:4a:12:c7:28:b2:
75:96:b8:36:a8:18:a9:0c:5a:bb:2d:1d:ee:2f:ef:
9e:ec:fe:3a:80:83:58:f2:89:67:67:26:d2:82:d0:
fa:62:8a:a7:43:c9:e3:8b:46:15:e3:2f:e6:69:69:
78:8a:93:a6:24:d6:d8:1a:6f:86:a9:e6:bd:5d:0d:
90:30:f1:76:eb:8f:d6:77:53:d4:10:82:d8:29:d3:
a2:ce:cc:69:2f:13:dd:7c:a8:7e:bd:3f:31:2e:fd:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:41:C1:02:F3:44:C1:FF:11:E9:CA:9D:60:1B:8C:3A:38:94:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/59963d90-aef5-3029-9d57-81148e9ab409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
X509v3 Authority Key Identifier:
keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
sbgp-ipAddrBlock: critical
IPv4:
131.229.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:22:04:f0:21:45:25:05:f1:a6:d1:95:94:22:d8:f3:3b:d2:
4c:c0:6a:36:b2:6d:08:4d:b8:05:7f:1b:16:39:70:38:e7:30:
8c:3e:15:15:5b:c8:40:8a:e4:8b:aa:16:28:e1:e4:0a:c9:b2:
15:cf:cb:fc:07:32:d5:6f:d0:6b:30:09:91:14:4c:9b:1a:6c:
23:ce:14:66:33:67:e0:3b:05:4d:4e:d2:28:22:e3:60:50:77:
de:0f:2d:06:39:fa:0b:5c:1f:5d:53:78:6e:c3:b9:15:86:d2:
73:45:ed:0b:55:02:36:e2:64:55:3c:79:05:0b:fc:c3:eb:20:
e4:76:62:db:0a:6d:49:96:eb:a3:83:c7:8d:6b:50:e9:52:80:
35:94:41:64:43:9b:e4:94:49:ab:1d:b4:ca:db:7f:91:15:92:
24:d8:f9:64:2e:5c:47:50:b5:52:b4:03:61:e2:e4:0c:35:07:
1d:e9:e7:d3:c6:ff:9d:42:bc:33:d1:80:e8:d4:b2:c0:52:dc:
44:6f:25:16:c3:3b:61:09:42:2d:d0:af:f3:89:04:74:73:c6:
05:95:8e:ed:f4:5a:83:73:dd:37:24:ba:c0:8b:41:1f:be:ed:
5d:89:a1:57:16:8d:1d:4e:ac:68:6d:72:1e:ba:28:90:45:ed:
ad:ed:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:51:44 2025 by rpki-client