Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e21cc19-d672-320a-bff1-7c25af3ec682.roa
File: 4e21cc19-d672-320a-bff1-7c25af3ec682.roa (raw, json)
Hash identifier: SNp2MXp0u2w8nbDrEUAgKbCUSYZUwJIpoxmPW6gqIgs=
Subject key identifier: 1A:DF:1B:FD:AC:9C:56:90:C8:3E:80:5D:AA:D9:33:BD:B0:52:46:15
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C260CBF98CEA31396CFC4040
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e21cc19-d672-320a-bff1-7c25af3ec682.roa
Signing time: Mon 03 Feb 2025 11:08:44 +0000
ROA not before: Mon 03 Feb 2025 11:08:44 +0000
ROA not after: Sun 04 May 2025 10:08:44 +0000
asID: 30036
IP address blocks: 173.30.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:60:cb:f9:8c:ea:31:39:6c:fc:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:08:44 2025 GMT
Not After : May 4 10:08:44 2025 GMT
Subject: CN=5a8af7c6-8700-4eaa-b375-ad2253d5b416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:27:dc:19:53:68:77:a6:4e:08:7b:56:46:
e3:0e:e3:4c:df:1e:5e:2e:6f:68:49:04:fd:5a:c3:
29:3d:ca:5c:5c:e0:80:4c:95:57:d7:48:fb:71:78:
02:58:a2:c6:52:87:c1:15:0a:5e:f5:1b:22:02:6b:
8f:b0:f6:67:ae:f6:d5:59:e9:2d:27:f0:45:90:15:
3c:93:ed:18:c0:f3:bc:8c:b0:66:b4:b7:8c:e7:44:
96:6f:94:56:0e:56:b2:fb:6e:da:0a:0a:11:77:70:
e9:a9:63:7f:81:f4:73:1e:51:15:fa:45:7e:1b:71:
b9:0e:82:d7:69:ff:f5:30:f2:7a:4b:44:3a:dc:f5:
40:63:65:4e:b0:ad:6e:c0:38:cd:ea:dc:60:9c:78:
93:e4:e0:ad:09:ec:20:fa:bc:ae:8b:77:32:e9:74:
c2:2a:e2:28:0e:b1:9f:e1:2e:15:59:e5:00:c1:65:
55:6c:3d:96:a8:d1:b6:ec:f2:22:d2:69:cd:81:6d:
38:68:61:64:b0:07:c4:fa:e2:3f:2e:5f:b9:c5:17:
02:eb:8f:ef:c3:e8:13:37:be:0c:2b:7f:ba:02:b4:
eb:0b:ad:c4:25:af:1d:74:b0:c8:33:db:86:fd:ee:
69:f3:e2:e7:4c:b0:a0:10:54:0a:b2:39:4c:eb:c2:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:1B:FD:AC:9C:56:90:C8:3E:80:5D:AA:D9:33:BD:B0:52:46:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e21cc19-d672-320a-bff1-7c25af3ec682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.30.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f6:c1:44:9c:70:7e:19:a4:8e:de:ad:56:4d:cd:8e:81:fb:
59:a0:e3:3f:de:84:46:92:7b:dc:e1:7a:51:85:fa:ad:38:0d:
9a:f8:dd:05:80:43:f5:93:f4:9d:9d:e9:23:33:c9:90:40:d0:
00:f6:24:66:7f:f6:5b:9c:9b:5c:9d:8c:7d:6f:b3:7e:7d:a9:
a9:dd:d6:23:ea:4c:c2:33:2f:d1:24:4a:f0:68:fe:26:1b:6d:
4d:a2:be:5a:6e:3b:4a:07:89:24:95:57:47:5f:9a:83:e3:9b:
7e:73:10:16:b3:d1:16:b9:21:a4:58:50:d2:51:00:49:65:2f:
d5:ec:17:e9:15:4c:22:77:11:f8:85:97:7e:a9:ed:e8:52:20:
fe:03:10:61:9d:27:a6:7f:ac:d8:56:46:c7:ba:7f:bd:a9:06:
32:f7:27:fb:f3:6b:c5:6d:62:3e:68:10:bd:75:ce:26:df:20:
17:81:12:81:54:0a:3e:e5:ec:fe:02:c7:60:75:e7:b5:86:52:
16:2c:18:db:07:99:33:83:5c:9d:1a:87:cc:b5:83:82:cc:aa:
e9:fc:b4:cf:29:05:a1:0f:3c:4a:09:e7:cc:a0:3b:52:a5:80:
50:a6:60:7e:b9:c4:3b:8f:87:66:b8:0c:a7:b3:17:b3:5d:81:
4d:c1:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:51:41 2025 by rpki-client