Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/b4aa358d-76d2-3149-a207-4b3684596209.roa
File: b4aa358d-76d2-3149-a207-4b3684596209.roa (raw, json)
Hash identifier: kR1zkGaxGvElPdoEVukw2yllsVQVthqbgTY4lShwCyg=
Subject key identifier: 23:AB:EE:E3:41:0F:44:14:6A:31:DD:CF:0F:E5:5E:EB:3B:19:5D:69
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F432858488B7AA570E1EB51559CA21CC0
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/b4aa358d-76d2-3149-a207-4b3684596209.roa
Signing time: Tue 14 Jan 2025 19:11:22 +0000
ROA not before: Tue 14 Jan 2025 19:11:22 +0000
ROA not after: Mon 14 Apr 2025 18:11:22 +0000
asID: 10103
IP address blocks: 65.87.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 14:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:7a:a5:70:e1:eb:51:55:9c:a2:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Jan 14 19:11:22 2025 GMT
Not After : Apr 14 18:11:22 2025 GMT
Subject: CN=531a64e5-cab1-48dd-8597-45ea4e1b88b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:e9:56:8a:60:fb:32:9e:ef:de:c7:ca:44:
39:dc:8b:30:46:21:64:42:68:78:1b:40:34:8b:f4:
c3:84:53:5d:a7:b4:2a:0f:3b:cf:32:6e:68:e8:a9:
af:8c:b9:a8:28:7d:d1:f9:1e:eb:fe:f1:15:1c:93:
11:7c:9c:ee:2f:a3:76:2c:1d:ba:08:b1:5f:5c:c0:
5d:91:a7:ff:b5:75:79:26:96:c1:be:6e:b2:45:c9:
16:9d:3e:b8:df:1e:5e:af:72:2c:45:54:93:47:62:
98:b1:a6:da:8c:fa:fd:88:c3:48:16:40:35:7a:b9:
0c:8b:39:12:9e:99:8e:62:57:4b:d7:c7:7a:10:bc:
e8:ab:7e:5e:dd:e1:74:a6:98:69:af:64:88:83:df:
f7:56:fc:2b:c5:26:42:da:dc:d6:f4:e7:41:5d:2b:
43:bf:80:9e:98:64:9e:61:96:5a:b6:58:6c:cb:2d:
37:79:52:0a:0d:5a:35:b8:3a:6b:c9:ac:8c:b8:c1:
47:b5:ec:8e:24:87:80:58:76:e8:75:08:26:23:d2:
9c:1a:3b:83:82:22:4e:c5:90:ad:23:24:2b:03:ed:
f5:b8:d8:80:5c:08:4b:51:7d:0c:79:9d:9b:06:98:
8d:7b:01:66:31:d0:38:bb:97:15:32:39:03:d6:da:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:EE:E3:41:0F:44:14:6A:31:DD:CF:0F:E5:5E:EB:3B:19:5D:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/b4aa358d-76d2-3149-a207-4b3684596209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:c3:4b:c2:03:6d:76:e0:43:83:d1:a3:29:24:c6:dd:a5:e0:
13:75:0c:9d:10:12:d9:79:67:72:f9:2d:fc:7a:2c:01:0c:76:
3f:ee:de:02:39:70:bd:37:79:a4:7e:6e:67:9b:a2:0e:d0:59:
76:4d:b6:21:bf:3b:b6:fa:4b:c5:ec:30:20:11:2a:c4:5c:5d:
54:d7:69:5f:22:04:ad:8c:8f:b8:cd:04:b9:db:d5:22:02:c9:
36:07:29:e3:09:85:22:46:48:54:96:b5:8a:9e:08:cf:07:a7:
78:96:20:62:64:bd:4a:bc:98:00:df:2f:03:b0:32:00:69:4d:
8c:39:81:17:56:b2:2e:7d:24:df:3c:86:ce:bf:98:a5:ec:ae:
e3:7f:7f:7e:8b:19:3a:62:81:d5:2f:18:8b:16:1f:10:f6:d8:
09:43:0c:e4:bb:65:cf:82:b1:df:ef:78:ac:63:f4:58:f6:7d:
2a:1b:a7:7e:2c:f6:97:21:e6:2a:c7:d2:85:3b:68:d3:25:40:
f4:c6:ba:fc:eb:2f:3b:7e:bd:f5:ac:f5:51:69:07:8a:57:10:
da:c5:33:fe:0c:6e:a3:f9:ce:e1:1f:9e:d9:51:d9:68:b8:50:
8a:0f:d7:62:d8:24:1f:47:d4:17:05:fa:2b:1e:9b:48:e1:21:
fc:32:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:14 2025 by rpki-client