Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03d2bcbe-5b4d-395b-a2ee-68c52957be35.roa
File: 03d2bcbe-5b4d-395b-a2ee-68c52957be35.roa (raw, json)
Hash identifier: 2cAdHeGSey3SxBUW8JlnaojVQpYyElBaVNdx4Qt3Rhs=
Subject key identifier: CA:0B:53:E4:85:74:42:41:77:CC:30:D8:7C:ED:50:73:98:93:03:65
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C576F2D171C24979EB69AA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03d2bcbe-5b4d-395b-a2ee-68c52957be35.roa
Signing time: Tue 04 Feb 2025 13:40:48 +0000
ROA not before: Tue 04 Feb 2025 13:40:48 +0000
ROA not after: Mon 05 May 2025 12:40:48 +0000
asID: 30036
IP address blocks: 173.22.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 12:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:f2:d1:71:c2:49:79:eb:69:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:40:48 2025 GMT
Not After : May 5 12:40:48 2025 GMT
Subject: CN=d026262f-25a0-4cd5-8367-6f16667e64a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:72:12:4a:b1:a0:d5:8e:a3:cb:da:d9:8a:45:
11:0c:ba:59:c7:55:6c:5e:91:5e:91:22:8c:b7:57:
2e:6d:75:e9:08:de:f2:40:67:7c:e6:0a:60:f5:02:
52:66:71:e6:63:e4:6c:3c:0c:fc:02:03:2b:d5:89:
ac:2e:2c:d8:0e:3f:cd:25:a9:09:63:89:f1:4b:ec:
77:02:c0:f1:81:15:8a:7e:7d:27:86:9c:3d:94:61:
21:b5:16:07:f3:25:ee:10:28:2e:3f:93:f8:7a:7d:
56:75:64:49:32:a4:cf:91:26:05:1a:11:8c:c4:b1:
fd:ab:2b:13:12:42:ef:a6:c3:1b:f2:85:45:ba:f0:
f0:81:28:09:ac:15:df:b6:7e:3d:07:6d:57:91:e6:
2b:b1:89:56:1e:95:20:d9:bb:af:57:af:dd:b6:c8:
0f:b5:bb:c3:80:bf:8f:7a:b5:bf:30:d3:3a:ed:75:
49:fb:79:b1:68:eb:64:db:d5:c8:41:ca:72:2a:fa:
28:77:73:f8:37:33:cc:4f:7c:4a:88:db:d8:ce:05:
f4:68:55:40:11:a8:9b:ed:b9:00:6c:52:2c:ad:d4:
29:0c:a6:25:38:c6:b8:19:7c:47:db:66:c3:7e:8a:
fd:2d:12:cc:86:59:58:67:a1:6a:f8:59:74:b6:de:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0B:53:E4:85:74:42:41:77:CC:30:D8:7C:ED:50:73:98:93:03:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03d2bcbe-5b4d-395b-a2ee-68c52957be35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b4:48:7e:d2:ca:b1:86:3f:de:40:66:f8:87:42:c1:51:af:
3c:44:f6:9a:ca:72:94:4e:98:7d:52:4e:36:c5:07:ea:32:48:
d8:c8:f9:2e:a1:ba:49:b8:29:85:1b:55:8f:a7:88:c5:da:c5:
7b:da:33:c6:3e:5a:3f:9f:f9:7d:33:26:a6:73:19:41:b1:a0:
93:f0:e5:46:08:41:88:7e:81:da:c9:6e:14:bb:cc:50:2b:20:
eb:9d:76:81:ac:5f:2a:05:f1:e2:e4:f3:3e:c4:4c:8b:3a:2b:
cf:9b:99:22:ac:e8:65:80:19:11:63:5d:88:e4:06:7f:11:c1:
64:4a:f7:4e:a1:43:48:25:5a:1c:b0:11:2e:bc:ef:11:0a:e5:
4e:0e:56:32:71:56:c2:2e:8f:6a:ed:14:8c:39:34:c7:9d:7d:
fc:2a:fc:7b:73:d4:3f:a5:86:ac:66:92:2e:25:66:fd:bc:78:
7a:af:aa:54:2e:a0:93:05:01:e4:26:85:dc:24:69:96:f7:ed:
64:1b:7d:d6:9b:82:4d:04:e2:c6:35:6c:b5:72:ee:8e:0c:36:
4a:52:94:47:ad:a6:d7:2f:aa:91:00:e2:f7:d7:e8:32:2a:12:
08:3f:f9:2e:83:a2:2b:7e:2b:d2:be:ee:58:1c:d2:8f:18:16:
b2:a5:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:43 2025 by rpki-client