Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/4f2f35f6-0f0d-3638-a8ee-ad29794e41b1.roa
File: 4f2f35f6-0f0d-3638-a8ee-ad29794e41b1.roa (raw, json)
Hash identifier: qfw7C2bXhxQZNOR+Ub1uaGnSJ8vcIWEirmUo9nEY9k4=
Subject key identifier: 42:C6:01:67:9F:4C:EC:9E:2F:3B:CC:A5:90:B0:D4:1D:BA:79:A1:26
Certificate issuer: /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
Certificate serial: 010D0C9F4328584913AB401D4C68D037F9EF8140
Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/4f2f35f6-0f0d-3638-a8ee-ad29794e41b1.roa
Signing time: Tue 04 Mar 2025 13:59:14 +0000
ROA not before: Tue 04 Mar 2025 13:59:14 +0000
ROA not after: Mon 02 Jun 2025 12:59:14 +0000
asID: 9009
IP address blocks: 140.235.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 07 Mar 2025 20:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ab:40:1d:4c:68:d0:37:f9:ef:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
Validity
Not Before: Mar 4 13:59:14 2025 GMT
Not After : Jun 2 12:59:14 2025 GMT
Subject: CN=7294ecde-b1b6-4d4c-bba3-37ae9ac8086c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:0e:77:3f:f8:a7:4d:ac:af:6b:29:46:54:
2b:12:b3:eb:7a:35:ee:cc:f6:cc:c6:03:15:c2:dc:
85:a8:5b:17:c0:5d:db:1a:fa:b6:bb:78:9f:90:e6:
92:7f:2f:f3:3b:da:1f:69:3d:b0:8c:09:92:ec:65:
c4:84:3c:b7:b6:96:69:18:ad:9d:b1:26:ff:ec:25:
64:15:99:74:22:ed:cf:0a:a7:4e:b1:0e:ca:fc:94:
26:fa:bc:9b:c7:05:06:29:dc:e3:e1:ec:2a:34:ee:
24:3a:22:4e:7a:67:9d:e8:3f:06:9b:24:4d:9f:16:
7c:a8:cb:74:d5:de:21:2f:fa:97:bf:47:ab:c7:2a:
c5:5d:06:fc:cd:1d:ba:2f:14:a8:e5:7b:ef:d2:54:
e7:1c:7a:de:b9:51:3e:ee:fe:ae:da:e0:5a:86:6f:
e5:5a:8d:1b:d4:a0:08:67:f6:1e:b7:95:ba:19:ad:
10:3e:af:77:f4:9e:f6:3a:d9:b3:44:86:3e:64:36:
27:35:e9:22:f6:39:df:b3:93:26:da:9f:49:22:9c:
f9:63:ed:81:80:23:1f:9d:9b:43:f6:e3:03:d4:ea:
75:96:05:3d:01:39:64:49:7a:0c:1d:77:0e:8c:b9:
3d:72:39:20:9c:2d:e4:d6:82:a6:3e:c8:b6:1c:4b:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C6:01:67:9F:4C:EC:9E:2F:3B:CC:A5:90:B0:D4:1D:BA:79:A1:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/4f2f35f6-0f0d-3638-a8ee-ad29794e41b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl
X509v3 Authority Key Identifier:
keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:e5:58:59:44:0a:fb:4e:56:9d:5b:0a:23:51:ef:fe:86:d1:
08:0f:f4:b2:3d:bb:17:77:26:1a:0b:cb:80:43:21:c2:53:d7:
f8:f2:e2:cd:bc:5e:dc:dd:16:0f:b3:2a:a2:01:00:5c:6a:d6:
c8:51:c3:e6:f0:51:c7:07:1f:0f:67:d2:06:fa:16:76:92:fa:
d8:7a:dd:c7:2b:5f:d5:7d:e1:9a:0b:a0:89:c4:6b:fa:07:7b:
22:b7:d9:10:68:68:f8:62:8e:b8:55:9e:05:b6:c4:c0:f4:31:
23:6d:c1:bc:bd:76:5b:ed:1e:51:f2:b5:5b:5a:ad:75:35:1c:
85:bb:a6:ea:4e:31:7e:22:75:d6:ab:27:6f:9a:a3:46:94:20:
9f:23:c8:ea:17:16:f2:c4:0c:3e:8b:ab:b9:72:da:3b:25:cd:
aa:1b:35:4f:d1:76:83:d2:93:b4:52:54:51:4a:cd:15:e2:27:
c9:80:96:c9:0b:d9:fa:d5:c6:a0:85:fa:da:59:db:b6:9b:14:
3b:ad:14:e3:7f:1d:39:ef:8b:09:bd:19:27:02:ff:66:64:b3:
3c:f8:ec:bd:02:6b:61:58:9f:fb:a3:32:52:50:ac:3b:8e:d5:
d0:49:8e:21:bc:9e:8d:7d:b4:5e:a2:9d:f1:24:7a:2a:aa:5d:
b7:a9:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:45 2025 by rpki-client