Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/c30332a2-b979-3aac-a7b6-e20347aff3b8.roa
File: c30332a2-b979-3aac-a7b6-e20347aff3b8.roa (raw, json)
Hash identifier: hVxnYVFppDz1GLR+zL4JvERFgiZwABeJpfeoqgtnbNc=
Subject key identifier: 27:65:12:63:83:AF:1B:0D:75:8B:2D:C5:62:72:30:97:9B:02:24:24
Certificate issuer: /CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5
Certificate serial: 010D0C9F43285849CC176D8CE14D38F06F029880
Authority key identifier: 5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/c30332a2-b979-3aac-a7b6-e20347aff3b8.roa
Signing time: Fri 09 May 2025 15:25:56 +0000
ROA not before: Fri 09 May 2025 15:25:56 +0000
ROA not after: Thu 07 Aug 2025 15:25:56 +0000
asID: 2675
IP address blocks: 199.212.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 17:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:cc:17:6d:8c:e1:4d:38:f0:6f:02:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5
Validity
Not Before: May 9 15:25:56 2025 GMT
Not After : Aug 7 15:25:56 2025 GMT
Subject: CN=fe004433-6680-4883-bcff-15628dadebfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:68:7c:b0:bd:87:a5:85:a7:91:30:46:24:
3d:ee:b6:93:6e:2a:c1:58:ae:60:24:d1:cb:4a:08:
63:6b:b3:2c:85:ca:6b:95:fa:1d:ef:8c:6f:3e:3e:
fb:2b:b2:46:b0:15:e7:01:e2:94:8d:97:21:12:d8:
83:7d:1d:df:42:af:55:a3:f4:3b:e6:82:28:02:35:
3d:5f:4f:83:84:2c:85:85:cf:a2:05:1f:03:8a:17:
5c:aa:9c:83:a7:71:64:41:cc:aa:3a:96:4c:4c:fa:
22:ce:33:dc:99:25:2e:32:ec:e3:66:18:ee:8d:dc:
45:3c:91:88:92:8b:4c:6a:84:da:12:be:5b:c2:14:
fb:3a:4e:6c:58:f4:f0:d9:9a:cb:46:15:bd:4f:9f:
c6:e3:78:66:d6:92:4e:bc:89:16:f0:db:98:31:43:
21:e2:76:4f:a0:75:2f:02:1b:50:d9:3d:36:90:96:
78:2f:4e:9f:02:b7:20:40:58:4d:41:60:35:ca:ae:
51:ba:57:27:ac:1e:c4:9a:3c:41:b5:0e:f3:95:22:
f9:e0:ed:8c:c2:11:65:bc:73:f8:b5:b9:8b:53:8b:
1e:29:12:ac:9d:79:df:a6:1b:07:08:89:f0:b4:35:
89:99:16:de:76:de:94:27:e1:62:7a:67:bb:89:4a:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:65:12:63:83:AF:1B:0D:75:8B:2D:C5:62:72:30:97:9B:02:24:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/c30332a2-b979-3aac-a7b6-e20347aff3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.crl
X509v3 Authority Key Identifier:
keyid:5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:04:02:91:58:b9:7b:65:28:95:bd:26:7e:4a:b6:e7:e5:84:
07:af:f9:7c:e4:ba:c2:42:7a:d0:d1:9b:0d:a9:b5:06:60:17:
9f:d2:b3:79:76:a1:60:1d:54:e0:1a:69:cf:9e:8a:6c:c8:7b:
27:8e:f1:20:4b:b4:a8:c0:c0:07:71:a5:74:5b:63:bd:2c:02:
22:a5:b0:00:cc:8f:c6:ca:aa:26:fd:2c:2d:dc:68:74:26:ab:
58:cd:5a:38:e9:43:ee:9f:57:31:90:c8:f5:d5:c3:e5:19:21:
33:d6:17:73:9c:2d:14:8f:dd:1f:06:f3:d6:ac:19:2b:25:c7:
f7:84:dc:57:81:b8:6c:47:b5:95:e8:85:ac:da:00:ff:69:f1:
59:af:d6:b5:26:f8:27:0c:d7:12:3d:59:55:db:00:4a:4d:42:
97:85:98:6f:0e:c6:18:96:cb:ec:f3:2f:eb:e4:12:ff:6d:ee:
62:97:28:99:9d:93:29:4d:29:dc:6e:85:60:00:d8:a9:59:ce:
79:e1:e7:1d:33:91:68:f1:c9:bb:d6:9f:eb:3b:59:97:a7:b9:
a7:23:ff:4c:91:f9:d8:79:bc:20:e4:a0:d3:c8:aa:4b:84:89:
d0:63:db:da:d0:16:ae:3e:55:98:f1:f5:d9:a0:e8:3f:3d:7d:
bc:c2:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:01:28 2025 by rpki-client