Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/9d8a3744-7249-3827-a794-da97a49d873a.roa
File: 9d8a3744-7249-3827-a794-da97a49d873a.roa (raw, json)
Hash identifier: QpZPd2YyXP7Sv9wawTaie9sLdrCqpkWsCtPjU0vmAuE=
Subject key identifier: A9:BE:E2:E5:CF:0B:3C:19:E0:30:82:1E:5B:5C:07:DB:38:0B:12:D3
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848E277250F121EF7078C9121A0
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/9d8a3744-7249-3827-a794-da97a49d873a.roa
Signing time: Fri 14 Feb 2025 22:59:38 +0000
ROA not before: Fri 14 Feb 2025 22:59:38 +0000
ROA not after: Thu 15 May 2025 21:59:38 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 00:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:77:25:0f:12:1e:f7:07:8c:91:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 14 22:59:38 2025 GMT
Not After : May 15 21:59:38 2025 GMT
Subject: CN=8d7f4e5d-3508-4293-8426-a214287f5e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:d9:21:0f:51:58:c6:87:25:60:f4:2a:b0:
e3:26:be:ec:fb:33:7d:ba:d8:e7:a5:26:72:a0:0b:
5b:7d:16:b3:ca:84:ba:5d:e8:a7:33:09:6b:38:ec:
78:38:6c:77:94:91:86:03:a0:b2:ce:e1:11:09:a3:
63:1b:49:88:6a:64:dd:66:4e:bd:da:8d:0c:71:eb:
f3:2f:e1:e0:98:c3:bf:80:37:83:ab:cc:ea:16:8f:
37:46:ee:f6:ec:3b:ca:6b:02:f3:ce:30:e4:bc:60:
57:93:5d:3e:1c:5b:fc:7e:b6:19:e8:54:c1:e2:8c:
58:91:01:92:e0:d1:de:a9:f1:f1:eb:91:4a:fd:26:
6e:9f:77:41:57:f3:80:97:cb:9b:36:44:bf:1e:93:
da:06:ed:cc:96:7e:38:32:b2:fa:6b:d4:e4:cd:1e:
9b:a5:d0:94:a2:b9:ad:46:0c:29:9b:c9:1d:84:ce:
fe:db:7d:54:63:a6:e1:95:cf:33:71:d9:07:51:11:
58:12:6c:53:13:cd:e7:ed:c4:63:98:4a:39:50:bb:
30:e2:91:1a:4f:c6:b9:91:3d:33:f4:d8:7f:02:47:
8a:c4:be:62:46:e1:d4:fd:a7:10:51:eb:6a:1e:c8:
09:0c:3e:cd:87:cd:87:3d:71:c6:0e:c4:95:8e:8f:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BE:E2:E5:CF:0B:3C:19:E0:30:82:1E:5B:5C:07:DB:38:0B:12:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/9d8a3744-7249-3827-a794-da97a49d873a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d3:0a:03:28:f8:ef:5e:c1:79:db:1e:f1:fa:fc:bb:4f:d0:
bd:01:98:3a:ad:85:21:ec:5c:fb:fa:cf:6e:0c:74:6e:47:9f:
67:64:ed:92:f3:9c:47:5d:73:17:d2:0e:2e:9a:99:32:83:ee:
8a:aa:88:95:ab:86:51:05:e6:65:0b:42:7f:ca:aa:e9:6c:cb:
39:e3:a9:c0:16:9a:87:5a:b3:11:84:e7:57:ef:6d:75:fb:19:
ce:fb:dc:4b:91:98:4a:39:7c:7d:47:d3:3b:3a:18:be:bf:5d:
c5:3b:60:39:09:d5:59:57:83:60:cf:98:41:84:be:58:92:50:
c7:11:34:8d:23:79:4f:6e:73:0d:10:7c:a4:6d:5b:73:84:5a:
af:42:31:a1:35:45:6b:a0:54:ef:18:53:6c:3a:1e:d5:2c:29:
5a:d0:c5:f1:92:4f:ce:90:30:43:54:32:d6:30:6e:ca:a3:8f:
0c:94:0f:77:cc:52:bc:3d:e3:12:0a:87:64:3f:d9:a5:ef:bd:
a8:34:bd:79:5b:3d:cf:3b:b4:8f:ce:34:e4:66:6c:38:72:1b:
47:22:81:c7:68:c1:ee:e4:44:96:23:af:f8:e0:05:4f:50:40:
c9:cc:b9:d7:c1:77:89:4b:c8:28:bd:68:1b:b5:d9:aa:4f:9f:
95:9f:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:35 2025 by rpki-client