Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/8ead94dd-ae84-3004-ae9c-8466b1e4d51e.roa
File: 8ead94dd-ae84-3004-ae9c-8466b1e4d51e.roa (raw, json)
Hash identifier: 2RI5gC0tQWCbDgmEAC/9eWTShUnXwek++SgyG06W+Hc=
Subject key identifier: 81:59:BE:26:E4:6B:8B:88:1D:79:D2:CF:42:7B:66:E5:7F:21:02:4F
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F43285848C9615264081C6AE55E8F7800
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/8ead94dd-ae84-3004-ae9c-8466b1e4d51e.roa
Signing time: Wed 05 Feb 2025 23:20:27 +0000
ROA not before: Wed 05 Feb 2025 23:20:27 +0000
ROA not after: Tue 06 May 2025 22:20:27 +0000
asID: 16509
IP address blocks: 209.54.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 19:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:61:52:64:08:1c:6a:e5:5e:8f:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: Feb 5 23:20:27 2025 GMT
Not After : May 6 22:20:27 2025 GMT
Subject: CN=cfb8f654-564c-491f-b9d6-dc07c05a74f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:30:10:31:3b:a8:b9:c9:99:1d:7d:27:4e:
ef:ea:48:e0:c1:aa:dd:db:f2:06:6c:68:48:7b:fc:
75:a0:e7:37:a5:d2:09:ea:9d:79:19:12:da:9c:1a:
12:ba:85:f3:ba:dd:c7:cd:34:63:4b:f6:d1:d3:e2:
93:50:78:75:30:a5:6d:c2:b3:f4:d0:07:67:99:25:
22:d0:ef:ac:19:bf:81:e1:03:dd:54:ba:15:f4:d1:
1b:26:04:47:28:a1:da:ec:41:a4:8a:53:f1:fd:74:
2f:62:02:e2:d4:25:d3:9d:69:be:b0:b9:97:18:58:
53:d0:51:72:11:26:43:2c:71:2d:be:e0:c1:7f:f4:
d6:ee:d6:a8:b6:42:a5:3c:f2:91:cb:dd:b5:f6:8a:
9e:35:56:8b:4d:55:15:25:43:ea:ef:f0:75:f1:d2:
b7:8d:fa:03:e9:6e:6b:76:dc:dc:ad:b6:e4:4e:c2:
71:c9:f4:a0:fc:02:69:69:66:52:9e:1c:f8:df:02:
3c:75:59:07:e7:e4:ea:81:ba:82:1c:13:3d:67:e3:
d4:cd:b6:f7:e2:fb:df:89:fb:4a:dd:36:e7:21:71:
3f:ac:ec:2e:e9:1e:26:f8:ef:58:69:65:66:65:6d:
d3:e7:65:b9:c1:ed:03:ea:5a:5f:35:bc:a2:3e:6a:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:BE:26:E4:6B:8B:88:1D:79:D2:CF:42:7B:66:E5:7F:21:02:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/8ead94dd-ae84-3004-ae9c-8466b1e4d51e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.54.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:65:b6:29:2a:fa:01:5c:9a:9d:e2:72:9a:51:ed:e9:20:be:
b0:d4:e1:5b:76:bb:b7:f5:84:25:5f:89:15:50:51:2e:dd:0f:
8d:42:c9:c5:12:87:a6:c4:ec:05:04:20:a1:38:fb:75:c4:a9:
74:33:a4:fd:2a:23:5c:3a:62:22:aa:82:e8:b5:6c:e2:2f:2c:
32:88:9d:1d:f7:d6:15:1b:a9:4d:86:3b:86:c0:09:e4:30:40:
3a:0a:09:bd:ad:3f:a6:5c:e0:01:b8:e5:43:0c:59:70:73:b2:
a2:16:dc:08:22:a4:98:e3:d3:2e:b4:17:ef:41:18:37:f7:cb:
5c:20:9a:3b:db:02:64:2c:a8:28:26:56:32:b4:b3:3c:d6:e1:
d1:9a:48:65:ed:93:7a:56:99:30:1f:e8:28:a5:27:6f:07:7f:
6e:0d:ee:0c:40:5c:29:f3:73:17:5f:2e:7b:b3:3f:57:a8:51:
1f:65:26:25:0c:ef:1c:b5:4c:00:71:ab:e0:3e:7a:62:48:2b:
6c:74:19:c9:1e:60:58:9f:99:bd:b4:76:1c:4c:61:3b:13:fe:
08:bc:a4:53:1f:f4:3f:8e:c5:9f:5c:3b:9a:7c:ab:d9:60:bd:
79:b0:44:60:e3:e6:24:2e:4c:dd:1e:1a:90:2e:72:ff:23:0b:
f5:96:8d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:40 2025 by rpki-client