Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15a3e91a-37d7-3a8f-9e59-ac4a56035924.roa
File: 15a3e91a-37d7-3a8f-9e59-ac4a56035924.roa (raw, json)
Hash identifier: HHtc1iZ2tpS8p9UmvZpAjSNU9LG+tapXTct8wUgCkjk=
Subject key identifier: 75:BD:9C:AE:42:51:05:08:C9:89:66:D1:8A:64:F2:A9:83:DC:75:D3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5771164E075EFDDC27B8800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15a3e91a-37d7-3a8f-9e59-ac4a56035924.roa
Signing time: Tue 04 Feb 2025 13:41:02 +0000
ROA not before: Tue 04 Feb 2025 13:41:02 +0000
ROA not after: Mon 05 May 2025 12:41:02 +0000
asID: 30036
IP address blocks: 173.25.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:11:64:e0:75:ef:dd:c2:7b:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:41:02 2025 GMT
Not After : May 5 12:41:02 2025 GMT
Subject: CN=d142f47b-7458-4852-8e26-107d16d139d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:bd:42:3e:4a:ba:28:6f:8c:9b:b2:44:7a:
d1:9a:ca:85:d4:f0:57:ae:42:9b:1b:31:fa:3f:5d:
bf:f6:ad:b3:f1:da:82:17:e0:26:1a:2a:23:ee:d4:
22:53:80:b7:83:e3:2c:1c:91:0f:17:e4:af:96:ca:
75:2b:d6:d2:14:9b:60:57:ab:f5:09:99:59:52:66:
ed:69:79:9c:99:20:1f:9a:da:04:70:22:ec:84:5c:
84:49:09:b0:e5:1d:9b:61:61:7e:e0:2f:22:91:e9:
a3:97:cd:b3:d0:0f:de:70:e2:6f:19:90:94:af:89:
f0:3f:aa:3a:04:f4:db:3a:e2:d9:dd:4c:fb:7c:36:
72:12:f6:f0:71:d8:45:a2:d5:25:73:2e:3f:3a:75:
b3:8c:2e:45:f6:e2:4b:5d:df:74:37:e1:b8:0f:07:
48:4b:17:ad:88:2a:eb:74:d1:13:86:e1:e3:fa:6a:
9c:6f:28:4d:14:af:50:91:d8:08:7a:94:a0:48:6a:
08:28:c4:e3:fb:f9:7c:f7:c5:36:7f:b6:a2:5f:ee:
df:49:99:2a:a8:33:b4:f9:59:bf:fc:c4:aa:66:8e:
b9:a4:01:52:50:01:49:bb:e9:9d:a5:7a:0b:41:cb:
74:fc:ca:a6:87:d6:5a:fc:c8:49:4b:f3:f3:ec:87:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BD:9C:AE:42:51:05:08:C9:89:66:D1:8A:64:F2:A9:83:DC:75:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15a3e91a-37d7-3a8f-9e59-ac4a56035924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ce:46:8d:69:9b:a4:36:32:0a:69:b7:83:89:34:bb:c8:ff:
66:51:2b:e1:21:f2:10:2c:4d:68:6a:e3:2b:55:b5:f6:5c:2d:
80:6d:c0:9d:92:fa:ec:a6:49:6e:52:f3:c0:2c:2a:d7:90:b7:
3f:a7:e9:0f:e5:de:51:40:7a:2b:bb:9c:49:48:70:03:1d:b5:
7b:89:7f:d1:56:1e:d6:e2:3f:d8:a0:1a:95:08:53:5f:48:65:
6f:29:5e:6a:4d:65:4f:e1:25:38:df:46:66:03:20:6f:fb:50:
60:e9:f8:33:b2:01:df:e2:55:4c:8c:e6:1e:d4:a5:02:21:b2:
9a:fb:3c:cb:cf:96:b3:48:ac:5c:35:5d:54:26:05:8d:11:d9:
f7:2a:1a:f2:71:d8:db:65:f3:03:77:80:2d:bf:73:e2:13:bd:
34:0d:a4:c9:ba:8b:e6:e9:b8:7e:de:88:26:2b:a4:12:d6:e2:
6c:08:0f:62:71:02:3a:39:6c:7c:fb:d5:78:78:e8:b5:94:28:
9c:3f:3a:f2:f2:bc:f7:db:92:f3:66:c6:1e:e4:e6:fd:f9:3f:
32:cb:31:96:d6:b8:ba:ea:17:a3:64:4a:36:37:44:17:1f:72:
99:2a:4a:5b:e6:0d:e4:29:cc:c2:1a:4f:bc:33:be:d8:0b:ba:
34:f0:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:03:28 2025 by rpki-client