Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/9160c2f5-e8bd-3a16-b86a-61b1c8bfc367.roa
File: 9160c2f5-e8bd-3a16-b86a-61b1c8bfc367.roa (raw, json)
Hash identifier: vuObtIVe2/tI19qdRYrds3ZkqFruCR+q7UfiIRMeq/0=
Subject key identifier: 0D:11:BC:67:05:8B:0F:50:71:97:77:FD:B0:F8:9D:63:3D:C2:B1:94
Certificate issuer: /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial: 010D0C9F432858494BA4BFC78337914F3ADA7FD8
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/9160c2f5-e8bd-3a16-b86a-61b1c8bfc367.roa
Signing time: Mon 24 Mar 2025 15:11:24 +0000
ROA not before: Mon 24 Mar 2025 15:11:24 +0000
ROA not after: Sun 22 Jun 2025 15:11:24 +0000
asID: 31852
IP address blocks: 2.57.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 25 Mar 2025 00:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:a4:bf:c7:83:37:91:4f:3a:da:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Validity
Not Before: Mar 24 15:11:24 2025 GMT
Not After : Jun 22 15:11:24 2025 GMT
Subject: CN=7ec321ea-b5e3-485d-bf9d-a92d86dc8314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:4a:95:df:18:0b:3a:93:47:95:d8:3d:d7:
60:ca:41:06:1c:05:20:62:cc:3f:b2:95:60:cc:8a:
28:5e:b9:17:01:7a:41:eb:8b:40:da:f9:cd:b9:5b:
7f:66:5a:44:cf:6c:35:2c:ca:1d:5c:7e:16:77:d2:
a6:df:b9:6c:4f:60:b4:6b:09:0e:17:93:8f:cf:d8:
42:b1:69:e5:80:db:64:7a:3d:df:58:01:43:82:56:
68:f0:14:46:3f:81:ee:ee:33:2c:39:e5:1c:69:4b:
0c:39:a6:03:09:82:6a:9f:6d:a8:27:06:fc:1b:f2:
34:46:ba:2a:a6:11:d9:c4:e2:78:69:11:a5:6d:2d:
57:db:87:35:d4:07:c5:de:75:94:14:17:43:83:b6:
0c:29:81:cf:3a:d4:bd:18:bf:5a:56:93:ba:a3:32:
3c:9b:58:fc:f8:91:97:f3:d1:34:f3:0a:ec:c3:d7:
73:b3:4a:79:4c:f4:15:c0:63:0f:c1:5b:8b:21:e1:
2c:0c:bd:d9:bc:15:41:44:50:48:c9:e2:b5:dc:c6:
79:d1:81:a6:54:63:f7:2e:e4:d8:f6:54:21:c0:a3:
6c:94:47:06:e2:47:a9:92:bc:f2:e0:31:fa:af:48:
76:3f:a5:0c:3c:7b:be:2d:a5:72:26:97:ba:96:e6:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:BC:67:05:8B:0F:50:71:97:77:FD:B0:F8:9D:63:3D:C2:B1:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/9160c2f5-e8bd-3a16-b86a-61b1c8bfc367.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
X509v3 Authority Key Identifier:
keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
sbgp-ipAddrBlock: critical
IPv4:
2.57.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:cd:52:af:30:c3:de:59:69:b6:12:ad:ab:c4:4f:3b:c7:4d:
e2:c7:1b:a9:33:47:91:ca:49:a1:fe:a5:51:5d:79:67:92:b8:
54:a7:6c:f7:07:f5:03:ad:a3:28:61:16:0c:cc:56:88:2b:79:
c9:f5:62:c5:2a:77:a5:f1:c4:31:87:90:34:d9:0d:8b:5d:45:
f7:50:d6:98:87:23:1b:5b:9a:54:96:e4:f0:67:dc:56:bb:58:
84:2a:3e:ef:34:ea:3c:83:e5:6a:3b:3b:f9:78:dd:7e:97:ce:
a1:6a:95:60:f0:4b:cc:36:42:73:74:8f:08:61:dc:ad:f5:16:
92:30:18:95:eb:4b:b3:ec:04:aa:15:c2:2d:c4:2b:80:09:eb:
55:d8:ad:64:ee:f4:16:34:5c:04:e3:d1:06:28:6d:4a:72:76:
ca:2b:57:c8:f5:db:fd:ed:21:41:a2:ad:bb:69:67:42:59:d3:
39:06:49:4e:68:4e:58:2d:a2:b8:fb:15:19:69:69:54:02:09:
3f:b7:c8:cc:6b:a1:e6:ea:b2:29:c1:83:ec:1c:19:67:ea:52:
01:b6:57:cc:71:1b:e2:8a:ce:80:02:f2:2b:b7:44:b4:79:08:
c2:7a:76:6b:5f:c9:df:04:0a:8f:94:64:f2:af:2d:17:28:e4:
ed:d4:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:33 2025 by rpki-client