Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa
File: 8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa (raw, json)
Hash identifier: nkVSQTLtQCf6dGAeazH9OG3BjaWJEXGelHwYyL6Vvic=
Subject key identifier: 69:57:D1:CC:7F:81:A8:86:8A:37:9B:FA:1C:8D:EA:E9:DB:F6:05:B2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112DB375878DDD4A022F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 26284
IP address blocks: 209.83.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 15:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2d:b3:75:87:8d:dd:4a:02:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=c88a35a6-634e-4fc6-b13c-2f7cc48dd4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:6e:7c:cc:2c:6a:86:ba:50:c6:ba:ad:45:
f0:65:a3:ff:60:57:ec:e0:0c:05:b0:9e:ca:61:98:
61:3b:22:16:c0:29:fc:ee:b2:02:3b:bc:29:d7:ad:
3a:df:14:0c:70:0d:8b:14:fe:6a:12:25:a9:1b:36:
1d:a8:2d:be:75:cd:8c:45:60:2a:af:00:9e:23:02:
f9:6c:5e:e2:f5:38:bc:42:43:1a:c4:c7:de:b2:de:
32:1f:cd:1e:94:f9:b0:39:5d:d9:2e:24:f1:7f:19:
76:dd:0a:87:80:6a:5c:88:33:05:5b:7a:7a:34:b3:
27:22:ad:05:ef:b6:ec:4d:e4:56:62:2d:41:b3:18:
2d:35:97:e7:11:90:fa:15:d5:19:06:88:07:c8:17:
28:33:ce:27:d4:2e:2a:92:18:cb:ae:84:0f:38:c6:
46:4a:dc:58:b4:a5:3a:58:a3:51:53:2a:de:69:d6:
90:fe:6f:22:f9:54:24:df:59:3e:0d:46:e9:25:5c:
fd:e9:f2:a0:33:20:43:4d:be:9b:25:41:ea:00:98:
f7:5e:ee:25:59:da:c3:c4:51:f5:44:17:1c:72:4b:
a9:fd:78:a0:09:df:e5:66:1d:55:7a:3d:a3:6c:b1:
5a:75:6c:f7:ea:9e:b7:69:70:8b:5c:12:fd:99:c9:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:D1:CC:7F:81:A8:86:8A:37:9B:FA:1C:8D:EA:E9:DB:F6:05:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.83.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:38:97:5e:48:ea:e6:c2:30:ba:8f:d6:66:b3:5f:a6:9f:36:
99:64:75:2c:79:88:ea:de:b5:90:b3:7e:b0:d4:b6:d4:fa:3b:
f4:19:4c:4b:f6:c4:6b:ae:6d:dd:00:51:de:4a:d8:20:81:78:
93:ae:cf:b1:4a:10:4a:cf:ca:50:68:03:a7:ed:51:62:c8:e5:
9e:96:80:21:b9:b9:77:a2:fe:6b:7e:4a:31:69:b5:ba:0c:98:
10:a6:96:79:f8:17:f4:50:c4:e8:33:66:d7:5a:73:ff:35:33:
5a:62:35:99:06:fd:6f:f2:2c:b3:f1:51:40:9d:31:5e:27:84:
5e:39:69:8f:bd:bb:ff:d4:3a:b4:0c:2c:02:f5:ac:d0:f5:35:
4c:de:3d:bc:25:31:3c:00:df:f9:65:74:af:fb:f8:0e:6a:05:
91:88:8d:8e:27:af:34:bd:6b:31:0f:9a:3f:c0:d1:70:78:3d:
5d:69:f4:06:97:54:ba:66:4d:c3:64:e3:1b:74:86:e7:8d:7a:
54:61:c0:a2:e9:1d:71:0c:37:ad:81:50:eb:55:fb:fe:a6:25:
aa:89:42:d1:b0:f9:43:de:14:2c:67:eb:42:7d:58:3d:df:1d:
12:44:10:e3:22:ae:25:15:43:21:a4:06:6d:eb:29:27:c9:af:
0a:d0:25:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:32 2025 by rpki-client