Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/413a4991-b703-3767-8ee6-2c19929ea9e1.roa
File: 413a4991-b703-3767-8ee6-2c19929ea9e1.roa (raw, json)
Hash identifier: W7xvrAEnYXwJu4dXIwvxnc1FQX/vK2VcpMSjMTKtrUo=
Subject key identifier: E4:FB:BE:BC:AE:1B:81:C1:D4:5F:E5:08:79:AD:20:0F:5D:B4:22:B7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489E140D4ABE9FFC89C5B48680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/413a4991-b703-3767-8ee6-2c19929ea9e1.roa
Signing time: Tue 21 Jan 2025 11:05:01 +0000
ROA not before: Tue 21 Jan 2025 11:05:01 +0000
ROA not after: Mon 21 Apr 2025 10:05:01 +0000
asID: 329007
IP address blocks: 104.250.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 08:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:14:0d:4a:be:9f:fc:89:c5:b4:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 11:05:01 2025 GMT
Not After : Apr 21 10:05:01 2025 GMT
Subject: CN=c39e63f3-b291-40b5-83c6-a817e6765149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:c2:ec:c7:8b:6a:3a:d7:db:d7:68:68:4f:
0d:c8:f6:cd:b4:9f:42:85:4c:2d:07:c3:13:c1:bd:
1e:5f:ad:b6:ef:74:b1:7c:0d:7f:e6:15:00:f2:ae:
6c:aa:f2:2c:40:bf:3e:ca:81:64:09:69:7d:3b:d8:
dd:e8:3b:af:ac:fb:0f:6a:c9:8c:f5:5d:cc:dc:8b:
d9:3e:e4:72:3b:54:0f:d9:d8:b9:59:57:0b:85:f0:
86:4d:cc:49:14:97:e3:e4:59:c9:96:b0:89:0f:b8:
79:48:0b:6b:d8:44:28:af:7f:cc:85:43:39:49:4b:
71:52:db:bb:47:23:4e:26:87:7f:de:7a:56:4f:a7:
62:7f:c5:d3:ff:01:0a:4f:67:c9:e4:e4:27:b1:c6:
c6:b8:fc:59:1d:40:8e:5e:68:50:19:46:04:e5:41:
37:22:70:c8:45:62:03:bc:fc:46:eb:c7:1a:5d:6c:
e2:dc:ae:79:d6:63:d9:67:43:c3:ae:06:8f:05:b2:
f4:49:71:ba:95:57:1c:cd:26:a7:cc:f0:55:20:9b:
27:5c:61:53:a1:da:c6:b4:6f:e6:57:57:15:0b:1c:
46:9b:6d:77:07:60:3f:3f:eb:a9:2b:c7:2e:f8:e4:
84:d5:72:23:59:f8:68:9d:f4:29:9e:ed:25:2b:c4:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:BE:BC:AE:1B:81:C1:D4:5F:E5:08:79:AD:20:0F:5D:B4:22:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/413a4991-b703-3767-8ee6-2c19929ea9e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:3b:17:53:cc:b2:d3:a3:0f:4f:36:5e:8c:ee:38:79:b5:2b:
a1:0a:4a:ab:b9:13:64:e7:80:1d:a8:71:d6:03:b4:f4:0d:8b:
e7:ec:dd:93:fe:78:b2:cb:1a:56:50:e0:70:29:98:b8:dd:cb:
6f:ae:01:4e:10:a8:cb:aa:89:d4:e0:f3:92:2a:49:52:8d:03:
f1:ef:b9:ae:30:b6:91:c1:42:f2:72:73:ba:0d:66:12:00:74:
74:fe:02:c0:37:4f:d6:71:7f:75:59:b9:4f:1e:b1:d2:9c:c4:
aa:48:67:7a:15:37:9b:70:41:39:ef:47:88:e7:92:dc:c0:a0:
5c:e8:87:91:84:61:0e:f5:2d:cc:6f:3a:2b:71:0c:1a:2d:11:
08:a6:2f:8a:34:10:9e:80:d8:49:54:94:75:c9:79:52:49:58:
ff:a8:c1:e1:91:05:dc:9f:e2:d5:d3:38:94:cb:95:b9:1a:cc:
4e:de:4b:76:bb:57:3d:d2:91:01:dd:11:a6:c1:b6:c9:73:0a:
f3:41:88:b4:c1:c5:5d:e1:9d:43:6c:32:0f:35:ed:59:6b:8b:
28:46:7f:05:d0:44:19:1d:43:f2:7c:b1:58:5f:fa:7d:50:72:
8c:03:0a:9c:9b:f3:40:49:85:f4:af:86:2e:fe:d8:96:b3:58:
c7:c5:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:04 2025 by rpki-client