Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/c7b15e62-84dc-3e6b-9db1-f52ff165f33d.roa
File: c7b15e62-84dc-3e6b-9db1-f52ff165f33d.roa (raw, json)
Hash identifier: avm29lNR4s1Osah/3OobhNJKazqGu4uWmqIy53LP2CU=
Subject key identifier: F3:C6:C0:C4:B3:27:DD:94:84:B7:08:38:E4:32:FA:7D:07:3F:66:49
Certificate issuer: /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial: 010D0C9F432858489A3B4CF6CFDB52EC12AE1D80
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/c7b15e62-84dc-3e6b-9db1-f52ff165f33d.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 2495
IP address blocks: 198.184.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 21:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4c:f6:cf:db:52:ec:12:ae:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=f3d921ea-ead9-47d7-be82-87afd0df0323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:56:74:e1:7e:75:95:57:66:dd:9e:2a:f4:
45:06:12:6d:8d:8c:d6:4a:a6:a5:d1:d4:f0:da:9f:
c2:71:ce:45:f6:73:c7:e6:1f:b8:2f:36:fe:cc:fa:
a9:c8:fb:44:f8:74:91:1b:72:8a:d8:31:cb:f0:6a:
f4:ad:54:cc:45:97:5f:69:bd:5c:e1:1e:28:b5:05:
bf:c2:28:a3:dd:df:6f:38:cf:bb:e7:69:88:ae:c7:
b2:bd:41:ad:eb:4d:db:33:a7:0e:46:25:b5:b9:7c:
e1:85:65:a4:66:06:ea:37:5e:f8:19:80:40:07:c7:
4c:2a:82:c3:86:cc:38:01:cb:1f:5f:ad:e4:4f:a5:
8f:67:8c:1f:1d:6c:b9:6a:9e:ea:5d:33:af:e3:f0:
f0:9c:0c:22:27:70:11:ab:d4:d8:fc:a6:2f:d2:2a:
12:07:b2:5e:43:41:92:3c:88:51:c3:39:8e:82:73:
08:f5:1c:a4:77:5c:6a:4e:0a:57:07:49:1d:d8:5c:
fe:2b:a2:4f:11:2a:95:5c:73:1f:bc:04:52:47:eb:
72:77:10:0e:8f:8f:e5:e9:d4:0e:22:72:86:f5:41:
b8:97:7c:12:9a:75:d3:28:44:fd:51:03:3d:01:82:
b9:17:a4:5d:f1:f0:72:fe:a8:fb:f0:cc:39:b9:04:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:C0:C4:B3:27:DD:94:84:B7:08:38:E4:32:FA:7D:07:3F:66:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/c7b15e62-84dc-3e6b-9db1-f52ff165f33d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl
X509v3 Authority Key Identifier:
keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.184.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:74:a9:01:20:1a:4d:36:39:65:a7:f4:4e:97:20:b1:20:4f:
66:e7:66:25:09:6a:57:71:c7:fc:5d:e4:b6:67:9b:26:27:f8:
ba:91:c9:a7:cb:ed:18:e3:20:6c:be:ba:ee:68:fd:e9:50:ad:
42:05:a4:e2:af:ba:2a:d9:3e:c5:56:f2:5b:f7:12:3a:1d:5c:
fd:a7:8b:87:89:29:b5:8a:fd:a9:58:df:50:87:a4:6e:96:33:
ad:50:90:aa:4a:b1:b8:f9:c0:b9:34:d7:16:d6:cc:1e:2f:ac:
0d:79:6c:00:47:b7:c2:03:c7:e2:26:83:e9:8a:cc:40:40:fa:
b4:00:67:59:8f:6a:e0:c4:c7:e0:b4:7d:ae:b9:cc:cd:a4:54:
06:f1:c5:43:f1:63:d9:41:2e:2e:9a:2d:14:a7:53:b5:91:25:
e9:dc:74:28:6d:14:f9:3c:ef:93:2d:b7:c1:d2:05:53:3f:c5:
e0:c4:64:d8:31:74:9a:dd:69:d0:72:ed:3c:82:7c:51:fa:18:
ee:ba:8f:4e:ea:03:ce:b8:00:8a:28:42:86:59:32:c2:45:d6:
8a:71:49:41:7b:76:b8:ef:b2:55:51:a7:01:66:a1:82:82:b0:
3b:42:1b:e1:9c:b0:67:d9:2f:3c:d8:55:9f:a9:ba:af:9c:45:
7b:79:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:32 2025 by rpki-client