Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3dbe2c-c64a-3b2a-b52d-eb6cda16f8d2.roa
File: ff3dbe2c-c64a-3b2a-b52d-eb6cda16f8d2.roa (raw, json)
Hash identifier: dxPLqfhrw1dTVKtXO9AhJLrIVl536Ndis0tPaZ4TbTg=
Subject key identifier: C2:63:D7:C1:62:F1:50:B4:CD:BF:C0:0D:12:02:F4:DC:2A:F5:05:11
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7FD28FAD2C62EDD4AB41180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3dbe2c-c64a-3b2a-b52d-eb6cda16f8d2.roa
Signing time: Wed 05 Feb 2025 11:22:50 +0000
ROA not before: Wed 05 Feb 2025 11:22:50 +0000
ROA not after: Tue 06 May 2025 10:22:50 +0000
asID: 30036
IP address blocks: 173.23.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 03 Mar 2025 12:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:fd:28:fa:d2:c6:2e:dd:4a:b4:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:22:50 2025 GMT
Not After : May 6 10:22:50 2025 GMT
Subject: CN=546e94ba-ac6d-44d5-9de2-f79180312aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:55:40:6e:ea:3b:a5:e6:b4:80:12:ba:2a:
08:01:ea:99:8c:cc:3b:5f:67:87:aa:83:20:e0:7f:
7d:a0:c7:65:ee:bb:05:79:b6:e5:fb:3e:2e:85:91:
3f:19:45:dd:0c:06:8d:38:7e:20:42:c1:05:84:d9:
b7:a0:35:04:ea:c4:f2:84:f0:fa:95:3c:67:83:82:
9c:0e:0c:fe:38:9c:1c:d8:21:dc:73:9d:ae:58:53:
e3:b4:16:77:91:70:45:1a:31:d8:ea:32:a9:5e:a4:
ba:27:04:a0:f3:78:7a:93:4c:f8:24:6c:f4:2a:62:
08:d4:6f:87:a8:ca:bb:8c:31:d9:f9:6d:d9:a1:aa:
90:5f:b2:3c:ac:ea:f7:f8:a0:97:f2:ba:1a:73:3d:
3a:f8:1f:5d:10:ff:bf:a5:cd:92:4b:8e:43:c5:48:
fe:ad:a4:40:1f:fb:14:eb:10:27:ee:67:e2:69:7b:
73:22:e1:ea:b4:26:41:03:3c:9d:c8:e1:df:23:f0:
c1:d9:57:5c:73:27:e4:6c:78:8e:40:c5:8c:89:40:
41:3a:c0:a7:3c:62:7f:b6:2b:e3:3b:e2:98:d7:e6:
44:24:1f:ae:f2:97:c7:a8:46:57:11:a1:a0:e3:ce:
c0:ff:12:9b:8e:81:28:89:e7:e5:32:a5:8e:a5:96:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:63:D7:C1:62:F1:50:B4:CD:BF:C0:0D:12:02:F4:DC:2A:F5:05:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3dbe2c-c64a-3b2a-b52d-eb6cda16f8d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a9:c9:42:bf:db:9b:a9:f0:4d:c0:2e:6f:3b:29:13:a5:54:
50:1b:1e:39:09:2e:91:14:97:ed:b4:db:08:cd:c9:5a:40:61:
bd:d7:9e:64:8c:e2:3a:2a:38:f0:8e:ec:44:3d:98:9c:18:63:
ba:67:f6:80:fe:1e:15:be:1e:47:ad:1a:c1:25:d0:78:60:bd:
69:b5:6a:0f:e9:e6:73:9e:f2:d0:f4:28:6c:70:6e:f5:5f:ce:
41:18:20:b7:20:e3:cb:e0:79:9c:4d:7a:fd:96:5f:29:50:51:
d6:2e:15:4f:96:08:fd:25:d7:49:62:4e:8a:1a:31:0a:5d:26:
dc:6b:57:f3:f8:31:67:22:18:72:d9:18:35:57:12:78:7a:85:
cc:26:cb:8d:0f:b2:13:f0:32:61:9b:08:99:9b:97:22:48:c8:
1d:bf:f9:36:cc:ff:3d:54:d7:b0:f2:c6:2a:57:33:41:e1:f9:
59:dd:85:a9:82:6c:43:a9:21:c6:bb:89:22:ef:d0:f8:6b:b6:
49:3c:f8:8e:4c:7c:00:bd:e4:ed:a2:7e:47:c3:c5:53:ac:5c:
77:01:70:49:33:47:ab:92:ac:c1:59:97:8a:2f:1c:12:3d:47:
03:bb:b8:75:fc:8c:b7:65:5c:5b:14:7d:04:dc:d9:d9:2e:84:
35:7a:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:43 2025 by rpki-client