Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f68d4f7-476f-31c8-a542-640cf22de2a9.roa
File: 7f68d4f7-476f-31c8-a542-640cf22de2a9.roa (raw, json)
Hash identifier: YLn+XOJInj1koaFrJ69MfevtdkOk8wx8RnhGP8SxD/g=
Subject key identifier: 8F:B8:2F:43:21:C3:75:8F:97:BD:8D:77:27:1B:92:E3:35:51:BA:23
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D211320C65EF0D76FD22A880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f68d4f7-476f-31c8-a542-640cf22de2a9.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 393460
IP address blocks: 209.155.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 19:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:32:0c:65:ef:0d:76:fd:22:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=88b64220-12e3-465f-8f01-c81abf3978b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:03:d5:23:b4:bb:e9:53:13:14:a4:a1:b2:
b6:4e:9f:99:db:51:03:a4:5c:22:9a:4f:f3:fb:ac:
59:7b:36:7a:4c:c1:5f:24:71:15:5a:d9:99:68:96:
c2:c2:b7:28:60:aa:8e:ea:e6:5c:12:43:7a:1e:e7:
12:b3:e3:80:12:ff:62:19:16:14:79:b4:4c:70:46:
9d:47:b7:85:24:3f:23:94:83:57:d9:2b:20:55:30:
eb:ad:86:a6:5c:89:ca:f8:34:a3:d2:9b:8c:db:ed:
78:f2:75:cf:db:86:69:a8:8f:fc:5a:a2:c5:b4:62:
36:c6:e9:a2:f7:42:49:12:10:a8:b5:d4:bb:d5:6f:
2f:16:7a:86:88:69:9d:7d:e1:c2:6c:25:03:8b:58:
52:a8:5b:c5:0b:37:d3:19:d5:ce:92:7b:c6:4e:39:
b2:b5:90:1f:bb:df:fc:dd:60:88:f4:b9:f7:6d:01:
25:c1:23:ac:2b:88:55:95:26:03:5a:65:09:a3:5b:
60:d9:a9:7a:6e:78:ba:eb:a6:5a:74:bf:74:55:bb:
3b:d6:6c:c3:98:cd:f6:f3:6d:cb:ea:be:dd:df:6e:
ac:e1:2b:5a:75:5b:8e:6d:a4:01:63:e7:3c:40:8f:
cf:8b:72:74:9a:40:ff:b6:e0:73:81:2b:d4:32:51:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:2F:43:21:C3:75:8F:97:BD:8D:77:27:1B:92:E3:35:51:BA:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f68d4f7-476f-31c8-a542-640cf22de2a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.155.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:83:30:47:a9:c4:ae:2c:f3:67:49:0c:68:9f:65:1a:f9:5b:
26:0e:83:e0:1f:b7:df:04:8c:40:65:b5:d0:e5:95:4b:a7:92:
1e:ab:ae:24:ef:4b:21:b9:81:af:aa:1d:a0:e0:71:e1:58:70:
74:07:7c:7d:a1:cf:62:cc:f5:6c:79:e5:b4:3a:f9:a2:15:66:
73:25:6e:38:fa:fe:eb:29:cd:bd:36:7e:b0:40:04:3d:4c:c7:
f1:fa:7f:54:69:05:eb:12:af:97:f2:fe:b9:3a:69:97:cf:ba:
d8:49:37:d6:d6:03:ea:91:9e:27:94:2c:7d:03:1e:82:df:a8:
8a:91:d2:a4:8a:ee:3c:96:2c:e9:43:69:d8:14:f5:54:31:0c:
b8:f9:99:94:42:ff:19:82:39:27:b8:fe:99:c2:52:38:cd:79:
6e:bb:38:7c:9b:83:41:91:92:29:26:f9:51:92:64:4e:e9:5b:
33:a9:5d:4c:5b:80:92:8b:ba:de:7e:fa:46:72:5d:ab:29:2e:
b8:34:4e:1b:2f:ee:79:fb:e7:a9:56:5b:4f:be:0a:00:1e:c5:
27:20:84:b5:55:ca:2e:3f:ab:ab:1b:11:b6:da:95:d6:46:41:
a9:b9:2f:6a:b8:a4:3b:95:df:8c:27:eb:19:fc:0e:8d:30:1a:
db:75:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:47 2025 by rpki-client