Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9da44c41-69e9-3fbe-8e02-4bce613a94b4.roa
File: 9da44c41-69e9-3fbe-8e02-4bce613a94b4.roa (raw, json)
Hash identifier: qSQCi9jHhmBE+26etpt017GFeCjQvwZrA96LPG1XgTM=
Subject key identifier: 84:3A:2C:D4:3B:6D:8C:B9:9D:0E:16:30:9E:E0:0E:6A:91:AB:2E:C9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B7360043929B4D5733256780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9da44c41-69e9-3fbe-8e02-4bce613a94b4.roa
Signing time: Thu 30 Jan 2025 11:08:37 +0000
ROA not before: Thu 30 Jan 2025 11:08:37 +0000
ROA not after: Wed 30 Apr 2025 10:08:37 +0000
asID: 30036
IP address blocks: 173.17.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:00:43:92:9b:4d:57:33:25:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:08:37 2025 GMT
Not After : Apr 30 10:08:37 2025 GMT
Subject: CN=d5b67566-0f82-4981-9480-f53a6c0e9f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:30:07:bc:49:80:c0:2b:a8:00:9d:3a:5c:
8f:ef:99:3d:ee:9d:f2:13:e8:5f:c2:11:06:e5:21:
0e:78:74:67:f8:fe:43:7c:de:e8:48:9f:0b:bb:df:
c9:31:56:2b:be:b1:e8:60:55:33:36:5f:b8:6d:26:
2c:fd:b8:29:d7:68:a0:56:a8:42:c0:7b:ae:48:1a:
7e:06:e3:ec:e7:70:30:26:69:0b:07:94:8d:f7:40:
94:7e:81:b6:ea:26:e6:3b:e4:8c:75:34:36:7d:2f:
ab:ff:11:73:3f:a7:47:0a:cc:cf:73:4f:d7:d9:b1:
2a:45:88:54:94:ff:7a:69:da:a2:b4:b1:79:07:ab:
38:d1:eb:08:cd:3a:ed:64:85:01:92:c4:fb:50:f8:
0e:28:f4:1f:83:88:21:ed:d7:51:f1:00:ad:6b:49:
9b:ba:0a:45:15:01:93:0e:ac:16:c8:c8:23:11:d0:
96:ff:b3:0b:13:ef:93:df:54:f4:ee:0b:60:57:26:
ee:68:5d:dd:e5:1b:11:c1:f1:20:44:5f:7f:86:69:
0a:b6:49:d9:35:e4:d1:ec:53:24:b8:46:91:a9:cf:
9b:df:81:5f:48:ce:b3:3a:7e:e1:8f:81:e0:6d:9f:
47:de:06:27:d1:06:46:ca:19:5d:22:bb:0f:a6:16:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:2C:D4:3B:6D:8C:B9:9D:0E:16:30:9E:E0:0E:6A:91:AB:2E:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9da44c41-69e9-3fbe-8e02-4bce613a94b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:f1:6f:20:68:7c:87:b8:aa:1e:88:2e:b9:3b:32:62:e6:00:
52:a6:50:b6:26:2d:6b:f7:35:35:ab:a7:91:4d:ac:91:80:c3:
c5:89:2c:ce:f2:ce:2a:e4:21:db:b0:f6:31:02:78:85:1f:c5:
cd:25:22:d0:46:5f:ea:5b:d4:d2:5b:44:97:d4:20:05:6e:0f:
c1:2c:27:9b:52:b7:ec:5f:ec:36:2f:3b:8c:d2:a2:7e:83:9d:
e1:b8:85:16:56:95:1b:a4:f0:12:7e:41:5e:0a:33:90:27:19:
8f:19:9e:ab:41:41:15:72:00:2f:65:9c:fe:f0:28:52:33:09:
89:5a:22:d4:1f:99:9d:10:8a:c1:c2:ea:39:a4:df:09:23:75:
c3:d3:bf:0f:ff:4d:94:e4:d0:12:53:f4:24:72:c2:4d:68:6c:
9e:a6:95:86:b7:26:fe:44:3f:85:26:71:8e:08:44:56:0d:3f:
5d:bc:7f:79:49:88:97:cd:92:fe:ce:a2:72:0b:a5:9d:ca:a5:
d2:2c:02:32:3e:59:87:66:cc:ed:1a:59:9d:2e:96:46:2f:7f:
96:04:33:81:46:80:ff:9f:6d:1b:9a:d6:b0:9d:8b:9f:12:b2:
79:34:6e:66:8a:fb:31:9b:9c:aa:9b:af:34:be:5a:98:15:3b:
99:c2:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:31:46 2025 by rpki-client