Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cb9d75eb-1773-3d67-afee-4b6fcae2c4c6.roa
File: cb9d75eb-1773-3d67-afee-4b6fcae2c4c6.roa (raw, json)
Hash identifier: WuXGUDTCr4iA7pOylfzksiYKR3tp6OlUBZcN6KV0ekU=
Subject key identifier: 27:94:60:EC:8D:4B:8B:7D:5A:32:08:60:BC:CE:30:30:82:E3:D9:E0
Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial: 010D0C9F43285848E5DE77DBDCBA8E2043AB1900
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cb9d75eb-1773-3d67-afee-4b6fcae2c4c6.roa
Signing time: Sun 16 Feb 2025 04:15:15 +0000
ROA not before: Sun 16 Feb 2025 04:15:15 +0000
ROA not after: Sat 17 May 2025 03:15:15 +0000
asID: 36352
IP address blocks: 104.143.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 13 Mar 2025 09:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:de:77:db:dc:ba:8e:20:43:ab:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Validity
Not Before: Feb 16 04:15:15 2025 GMT
Not After : May 17 03:15:15 2025 GMT
Subject: CN=a771f7af-b475-4f36-80b7-cbb30ed4a93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:e3:3a:a0:d6:a2:e2:89:79:e8:f8:a8:bd:
c4:13:e5:f9:d8:07:b4:7d:4a:8d:50:00:c2:8b:68:
a0:ce:8c:93:9d:99:e8:b1:9a:e7:dc:ce:d3:bc:fc:
51:51:2f:af:ba:01:73:78:cb:26:0f:fe:58:1e:38:
1d:fd:c7:c1:95:55:d0:01:06:4c:e9:70:dd:e3:b1:
d1:53:b7:64:ef:ed:be:e9:28:7e:f9:57:6c:33:20:
db:9e:cf:84:eb:fe:ae:3f:a6:a1:db:d4:ad:38:f7:
7c:71:ee:90:21:b5:5e:12:ca:7a:4a:15:de:56:6d:
5d:aa:97:fa:0f:7f:5c:85:d6:12:7f:b5:76:42:75:
d8:d2:80:a0:70:65:af:ae:17:31:58:22:48:2b:f4:
be:21:b9:ad:98:1e:27:6e:fc:25:e5:41:72:f6:1c:
70:01:8c:0c:11:55:a4:ef:96:f3:77:21:de:d6:49:
a2:2e:1e:1f:ca:71:a3:fc:6a:f3:db:ef:7f:c6:5e:
11:43:9a:6e:cf:94:62:81:99:80:f6:6c:17:d4:f2:
a5:b6:9f:de:eb:8b:64:39:aa:57:fb:41:ae:40:91:
91:fb:fe:e2:8e:01:4d:46:d1:08:e8:cf:85:2d:6b:
58:90:3c:9b:db:56:11:35:6e:c2:fb:2a:4d:6f:24:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:60:EC:8D:4B:8B:7D:5A:32:08:60:BC:CE:30:30:82:E3:D9:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cb9d75eb-1773-3d67-afee-4b6fcae2c4c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
X509v3 Authority Key Identifier:
keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:42:96:40:34:bb:a0:7d:61:3c:42:00:fb:eb:6d:69:44:a5:
e6:48:25:de:7b:48:38:6e:78:0a:c4:b3:a3:6b:cf:03:96:a3:
e3:59:dd:a8:93:4e:ef:ad:be:87:ab:f7:de:53:2d:cf:45:1d:
0b:38:6e:a6:1e:1c:2b:29:80:aa:ea:e5:30:c6:4c:b9:1c:f2:
50:77:c5:ec:92:fb:61:1d:94:dc:88:8c:3b:0e:36:d2:8e:55:
5a:ec:b1:60:37:40:f2:1b:bf:ac:1d:78:64:fe:b8:d0:51:30:
96:29:23:97:90:fc:d5:27:5f:08:47:82:cc:93:be:0c:ab:c7:
a0:d1:f6:77:d3:0b:d7:e4:94:69:06:d1:95:ea:f8:79:c9:e4:
57:90:ff:f6:a9:fc:eb:d6:1b:da:96:48:62:d5:04:0d:2d:1e:
a7:cf:da:b7:76:1d:c3:12:e7:e8:ab:3d:af:3e:5e:20:d7:74:
3d:01:d4:14:2f:14:d4:3a:23:dd:44:93:eb:83:c7:ec:54:27:
1c:25:04:8a:44:2f:77:e2:f2:5e:c2:4f:e6:4a:83:c5:3e:bb:
91:5c:a7:d6:9e:85:fa:0e:e8:42:39:2d:a6:af:33:be:66:be:
05:ad:fa:42:f4:5d:c5:d4:14:07:b5:90:5f:d7:c2:d6:10:e0:
ac:30:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:16 2025 by rpki-client