Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa
File: 99ee8cf6-7047-378e-91c7-a5d27665d772.roa (raw, json)
Hash identifier: AldSdwteKMq8sU5w5RqT+cW3SekdT6K9ml1fi7QxH0c=
Subject key identifier: 7B:30:59:96:FA:BB:77:06:F7:A8:AE:3E:6B:B6:D6:75:3E:09:4F:82
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F432858489FD09AB410C6644E036A0D00
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 1239
IP address blocks: 64.20.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Feb 2025 23:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:9a:b4:10:c6:64:4e:03:6a:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=6e581045-085b-4f5d-94db-d34813912979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:d2:b3:de:db:2f:e4:e3:80:ab:9d:4c:c6:
12:f8:34:45:61:f6:3c:e8:1c:e7:6f:68:28:7d:8d:
e7:d6:19:a6:05:fc:80:2e:24:9d:18:9f:67:c7:e1:
38:53:9a:45:36:d5:f1:3a:84:c3:00:79:f9:23:f4:
f7:9b:21:ff:8d:cc:13:80:70:99:ba:8a:44:e8:4e:
33:14:f3:a9:8f:6a:9f:f0:6e:79:7d:41:98:78:ad:
50:6c:b7:a0:8f:c8:d8:b3:32:be:d9:b8:f8:1a:c5:
2d:88:7a:34:3f:11:be:1e:7d:06:8f:50:55:2c:47:
08:c4:a5:06:8d:9c:ef:3f:16:49:54:93:54:82:4f:
90:c4:b1:87:a6:ec:e2:47:db:f1:14:73:4f:67:ac:
72:82:65:00:7c:e4:5a:ef:fc:e0:0d:f2:af:28:d7:
27:d7:49:21:6b:0d:76:d0:d2:10:e1:21:2d:3f:3f:
dc:0b:93:86:1f:de:33:54:59:f8:94:e2:3a:5b:cc:
6b:d0:68:93:28:16:93:95:af:62:b5:6e:1a:8e:fc:
03:b1:e3:15:77:43:e5:80:81:b1:b7:05:b1:b2:c4:
b2:15:21:4c:76:43:c2:3d:a9:9b:b3:54:f5:02:39:
cc:d5:1b:eb:dd:cd:5c:50:84:71:a9:fc:92:f6:80:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:59:96:FA:BB:77:06:F7:A8:AE:3E:6B:B6:D6:75:3E:09:4F:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:51:c8:51:26:c2:72:0c:f9:8e:77:d0:23:7c:27:19:ef:25:
64:46:3d:59:78:0f:53:e1:27:d7:7c:9f:d3:d0:63:75:2e:c4:
db:44:8b:e6:55:27:f2:48:99:e2:32:f0:7c:d6:d7:26:bc:ab:
c3:8f:90:26:9a:e0:43:8f:4b:a4:df:d9:3c:91:ae:53:e8:3b:
53:c9:a1:3c:4e:d1:87:a8:2a:3a:e9:fc:65:f7:b3:f3:67:61:
af:c3:61:bc:76:3b:fd:31:ad:dd:ce:b0:cb:a1:4a:12:ca:6e:
bc:53:2d:c4:5d:89:ba:c2:ca:79:20:ec:01:89:09:78:b7:27:
09:44:15:88:b2:10:54:73:fd:48:4c:e2:ad:ad:f7:64:72:e4:
6f:92:45:c3:c4:13:6c:f3:17:e6:6f:fc:bf:8f:45:4a:82:85:
e0:1f:15:c2:4d:fa:4b:c2:76:cd:14:17:d5:1d:f4:31:67:cc:
2a:3a:9f:6f:bd:28:69:64:1a:4b:bc:13:f6:79:3a:cd:bf:4e:
1b:66:25:6c:b4:11:c8:00:d4:e1:07:02:5c:d5:54:a8:e3:3f:
4b:5d:d5:3c:da:fa:4c:83:44:62:2a:78:b1:25:b1:f6:79:7a:
2a:c0:51:96:62:56:c3:30:d6:c3:01:8e:72:a7:6e:6b:21:70:
6a:e6:5b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:00 2025 by rpki-client