Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b9fe79b0-cbe7-39d5-a240-16660a11873c.roa
File: b9fe79b0-cbe7-39d5-a240-16660a11873c.roa (raw, json)
Hash identifier: csNZbaPqQ6cfE1B6I3EC6QyNtgva+/oWxKvbmWIK3dc=
Subject key identifier: 18:57:77:E9:F2:C9:A6:9D:90:27:2D:F0:AE:3A:EA:4D:C0:E6:4E:9B
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F43285841BD362136288F69130343BF00
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b9fe79b0-cbe7-39d5-a240-16660a11873c.roa
Signing time: Wed 19 Apr 2023 20:00:12 +0000
ROA not before: Wed 19 Apr 2023 20:00:12 +0000
ROA not after: Tue 03 Aug 2027 04:00:00 +0000
asID: 3507
IP address blocks: 67.214.179.0/24 maxlen: 24
67.214.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 17:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:bd:36:21:36:28:8f:69:13:03:43:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Apr 19 20:00:12 2023 GMT
Not After : Aug 3 04:00:00 2027 GMT
Subject: CN=cfbf04dc-57cf-4c9e-9e3a-11f56b2cf315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:97:f1:f5:ca:ec:3b:ce:8b:16:d7:fc:e3:
7f:f1:db:5b:38:15:78:c7:82:44:f0:ab:ba:4d:a0:
d4:c1:e4:10:1e:fe:5f:9e:a2:8f:7f:98:11:9b:1c:
a8:79:82:2f:07:e0:12:b3:e3:07:d0:66:dc:57:4b:
6c:05:c3:7f:39:71:49:b6:98:20:dc:e5:01:a9:ae:
6c:b4:10:e9:d0:e2:d0:ec:c9:da:f9:5b:08:18:cc:
cd:8b:f1:54:79:ef:f1:95:30:ea:c0:d8:62:20:db:
17:10:9e:9e:e8:ff:3d:e4:69:54:ff:06:e0:4e:2d:
e1:74:57:e3:27:dc:bf:c9:f7:7d:68:56:05:cb:33:
3e:d5:19:e8:02:f5:d8:41:23:c9:06:d2:89:c5:fc:
11:32:07:87:cc:4c:a5:b4:b8:d2:c5:fe:83:98:3d:
51:6a:c8:e4:78:ba:8a:b0:d4:8d:be:d6:04:6c:38:
c5:bf:89:23:13:98:58:25:8b:23:d9:3c:44:64:b7:
66:df:2a:ff:25:74:51:e4:8f:21:20:d9:5b:16:b3:
22:4d:22:af:1f:e5:fc:9a:85:74:2c:35:90:ab:4e:
1a:86:2b:c9:31:f0:0e:6e:45:01:a1:f0:27:73:5b:
22:f3:aa:76:8b:45:5d:fc:39:20:2c:94:a9:44:07:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:57:77:E9:F2:C9:A6:9D:90:27:2D:F0:AE:3A:EA:4D:C0:E6:4E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b9fe79b0-cbe7-39d5-a240-16660a11873c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.179.0-67.214.180.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:7e:af:56:f4:98:79:32:2c:20:d9:8f:ba:cc:8d:65:61:6c:
77:65:21:80:94:78:30:54:55:6b:41:e6:86:e7:11:dd:46:d2:
fe:25:4c:82:fe:e9:dd:c4:be:98:54:84:15:cc:fa:63:82:ef:
77:cb:f7:9d:d2:e0:16:4c:40:cc:da:73:e8:5c:6d:04:08:5b:
94:40:57:16:b1:f8:5e:4e:ee:03:e7:67:7b:2f:32:b4:3f:e1:
e4:85:72:f4:75:f4:59:e5:12:06:20:d1:80:3e:35:a0:cf:ba:
62:92:b5:06:d6:d8:b3:03:65:2a:3e:94:39:56:01:d9:2d:c9:
00:fb:2d:4b:9b:d2:c3:ed:62:a1:99:77:b5:dd:16:2f:36:63:
6e:a1:e6:de:a6:7e:4d:a8:78:91:d4:d0:35:7f:de:1a:6d:16:
dd:6a:b1:7c:e0:fb:c7:ca:13:f9:cc:50:0b:05:36:18:cb:1f:
7b:1d:9f:2b:bf:95:40:b1:7a:41:9d:87:9c:f7:aa:88:8b:90:
48:a7:fd:e6:b5:af:97:69:cf:b5:1b:b8:f3:02:fc:0f:a8:7f:
b3:19:3c:10:ba:7d:28:91:88:da:c0:91:1e:11:ff:e2:f1:8c:
a5:df:33:ad:11:d1:42:65:a9:0d:fb:02:00:a2:bf:63:74:61:
d8:c2:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:27:42 2025 by rpki-client