Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e4171ef3-5009-3265-9f48-f3bd94b8b417.roa
File: e4171ef3-5009-3265-9f48-f3bd94b8b417.roa (raw, json)
Hash identifier: Mw8gOmWXtHw4LY48BBs7OcyBEumBvg3TFaHO3IzVmoo=
Subject key identifier: D7:5E:51:5E:CE:3D:94:71:91:ED:B6:89:D8:EA:D2:54:57:7D:DE:07
Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial: 010D0C9F432858488764062900D754F9DA809C00
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e4171ef3-5009-3265-9f48-f3bd94b8b417.roa
Signing time: Mon 13 Jan 2025 08:02:33 +0000
ROA not before: Mon 13 Jan 2025 08:02:33 +0000
ROA not after: Sun 13 Apr 2025 07:02:33 +0000
asID: 329007
IP address blocks: 204.235.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 13 Jan 2025 14:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:87:64:06:29:00:d7:54:f9:da:80:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Validity
Not Before: Jan 13 08:02:33 2025 GMT
Not After : Apr 13 07:02:33 2025 GMT
Subject: CN=71c76d17-a5f8-4994-a2ff-8d7d0019a506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:20:91:36:aa:64:f5:dd:37:58:07:a0:a4:e8:
e7:ac:ab:56:62:e6:ac:9e:b5:12:9b:cd:d7:85:ef:
cd:93:3b:31:56:bf:21:38:c3:fc:f6:53:bd:7d:66:
8c:da:51:9a:35:f8:16:5b:c9:33:6f:a4:9b:c1:67:
21:e3:21:ab:28:d0:a6:e7:9c:47:9a:5e:cf:c9:e2:
79:26:f5:aa:8f:77:e3:c2:f5:f8:f8:22:43:77:79:
b9:05:e2:9f:b9:9a:99:f9:55:a4:50:4d:e0:bd:1a:
cc:c2:fb:fa:f9:6f:c5:b1:37:34:72:47:f5:d0:23:
bb:fb:69:8a:9e:87:af:1b:f3:16:ab:8b:42:7d:75:
8a:87:bd:4f:76:d2:d6:9c:14:e3:cb:6f:1e:f8:56:
74:46:b5:74:d1:7b:a9:19:63:c0:24:60:fa:a2:b2:
80:93:e4:4e:ca:d6:ac:48:78:88:da:f3:c1:bf:ad:
b0:b0:c9:f8:2e:50:1e:86:ec:0d:ff:02:0f:7c:59:
e9:d0:de:03:31:74:f8:59:94:b9:75:02:79:d4:0c:
7b:b9:3d:a7:63:2c:bf:c9:a7:b8:c7:09:4a:60:d4:
4c:82:9f:35:31:1c:70:87:b4:d7:95:c1:7e:b0:e7:
e7:d3:f2:0d:2c:c1:12:af:09:53:38:c1:fe:2c:81:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5E:51:5E:CE:3D:94:71:91:ED:B6:89:D8:EA:D2:54:57:7D:DE:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e4171ef3-5009-3265-9f48-f3bd94b8b417.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
X509v3 Authority Key Identifier:
keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:73:1c:ad:8e:a6:f6:5a:ae:32:f9:aa:68:ba:73:93:b3:e5:
6f:36:99:f5:af:49:f1:2b:0e:ea:7c:d2:91:71:03:bf:5f:23:
10:63:1a:ad:8e:56:66:de:d4:c6:02:4b:df:b0:5f:0b:ee:55:
d3:87:69:27:70:05:f8:79:4a:0e:e1:76:3c:fe:e0:dc:b2:7b:
c3:a1:ea:4f:aa:a0:1f:ed:cb:40:4c:7f:b5:c7:ed:7f:d1:fd:
98:a2:6c:c8:1c:7d:4e:cc:b8:78:3d:52:e7:d4:83:77:e5:cf:
02:98:df:b2:fe:ab:89:d9:09:9e:07:f7:70:82:e6:9d:6c:60:
30:db:d8:fc:54:33:7a:bd:fa:73:21:eb:f7:c9:22:48:17:7c:
d3:1b:d1:3f:10:e4:c1:f5:0b:31:ab:5a:dd:b0:a0:3b:b1:3c:
40:2e:83:6c:96:90:72:34:e5:f6:a8:06:1a:6b:ec:2d:dc:07:
b5:25:b2:00:22:f0:a8:1b:49:20:31:f3:69:b7:52:88:5a:b4:
c7:7f:4f:8a:23:3a:58:75:26:08:a8:a4:5f:80:0c:15:f6:36:
22:f7:5b:70:a5:8a:94:d0:4a:eb:a1:09:d0:15:6b:2c:e7:02:
0f:e3:05:f1:06:65:e1:28:b5:aa:59:0a:8c:6f:ed:6d:9e:65:
3b:52:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:02 2025 by rpki-client