Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aac001e4-40e7-32d5-bfce-acf2ff737ccf.roa
File: aac001e4-40e7-32d5-bfce-acf2ff737ccf.roa (raw, json)
Hash identifier: 6XWhDfZkGTuWCrenxV2uUHrclMvOsdXAnNG0ifYRdAw=
Subject key identifier: 71:8C:CB:02:FC:BA:ED:0A:5D:50:FC:AE:E0:EB:DE:09:87:D4:55:7F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112CE22F84003519DEF580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aac001e4-40e7-32d5-bfce-acf2ff737ccf.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 16842
IP address blocks: 205.196.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 20:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2c:e2:2f:84:00:35:19:de:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=ff603a2a-2a96-4038-a7e2-891e641274ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:54:ff:81:60:00:8f:ec:51:df:43:c7:3d:aa:
90:5b:1d:ad:80:95:b3:c4:aa:24:cb:0e:b7:72:1a:
36:da:6d:04:c1:90:3e:78:ce:3a:92:56:87:cb:8a:
48:f5:14:28:ad:9d:1b:bb:41:d8:9e:dd:e0:fd:b9:
e7:0a:06:44:2e:08:e0:2e:d2:61:ca:55:aa:96:13:
52:e2:cf:40:2a:8c:8c:c0:4f:a9:db:eb:1b:a0:29:
b9:6d:a2:fc:ea:fb:61:54:e2:75:4f:b1:f3:74:2c:
66:36:99:12:3e:85:5f:16:ed:7d:3e:32:2a:68:42:
22:6a:d5:7b:8b:72:fe:95:e8:eb:f5:2d:29:b3:85:
38:38:04:c7:8a:79:23:9d:e8:5f:7d:db:57:0c:88:
43:9d:c6:30:c0:97:1b:43:26:ef:bc:b2:59:c4:c3:
c1:6c:03:32:73:9f:80:29:e0:55:f8:fd:12:bc:97:
a1:6e:a8:7c:19:e0:88:90:1d:b6:72:0a:ab:2c:51:
33:85:80:be:b2:15:b3:da:9b:8e:4a:2f:66:83:6c:
82:da:32:88:a8:44:4d:5f:f2:66:a2:4c:9a:e9:52:
bc:a9:2c:7c:5b:e6:1d:b0:bb:1d:c1:50:91:4b:97:
bc:6e:77:c6:3c:b1:d9:5e:5e:85:58:e9:3f:9b:59:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8C:CB:02:FC:BA:ED:0A:5D:50:FC:AE:E0:EB:DE:09:87:D4:55:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aac001e4-40e7-32d5-bfce-acf2ff737ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:3f:b7:4b:6b:a6:00:c3:f8:6d:47:21:a9:6a:1c:55:bf:dc:
82:02:c7:a0:89:cc:98:73:ea:f5:15:8f:b2:06:cf:c2:bd:07:
11:07:be:ff:74:4a:cb:36:b5:32:2a:bc:45:38:8e:bb:07:d7:
fd:b2:19:6a:0c:2f:6a:d3:d0:a9:bc:a0:d5:28:5b:d3:47:46:
11:02:0f:14:35:5b:c3:c5:9c:d5:64:40:5c:cf:af:63:64:ed:
28:7b:45:2b:89:74:ae:8f:89:28:c6:00:40:a9:b7:98:db:ea:
fc:69:a0:71:e0:7c:72:18:8f:dd:99:3b:29:f5:26:26:f1:27:
51:d8:79:5b:95:52:1e:af:60:e1:37:ce:dc:87:bf:f6:20:e7:
17:67:eb:a0:a6:bd:37:9e:b7:77:3b:8e:e2:fc:ec:38:15:9e:
6e:fa:d4:7c:28:f8:6a:2e:87:55:05:44:06:4d:60:09:a4:6a:
2a:c6:ee:21:b1:85:ee:9b:43:ee:1f:a0:f4:e0:e3:51:03:8d:
f7:58:d0:f7:38:a0:09:52:24:4d:c7:39:39:6f:47:d9:ed:10:
31:01:3c:b9:c5:76:ee:ed:76:16:af:12:be:22:6c:50:2c:dc:
b6:30:89:f3:ab:41:61:cf:6b:c6:0d:7f:ab:10:f9:df:52:21:
54:31:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:55 2025 by rpki-client