Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/4e491bef-ef7e-31aa-82e5-18c1156d3508.roa
File: 4e491bef-ef7e-31aa-82e5-18c1156d3508.roa (raw, json)
Hash identifier: bePSATFr8sngnTNLYKVehLvu/wfW3woAhHoM0d+hN9Q=
Subject key identifier: 5F:8D:9B:09:C1:17:87:C9:C6:E9:BF:C1:76:4F:BC:CF:26:48:FD:12
Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial: 010D0C9F43285848C683B230C8A0217CB39F1EC0
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/4e491bef-ef7e-31aa-82e5-18c1156d3508.roa
Signing time: Tue 04 Feb 2025 22:42:17 +0000
ROA not before: Tue 04 Feb 2025 22:42:17 +0000
ROA not after: Mon 05 May 2025 21:42:17 +0000
asID: 16509
IP address blocks: 159.172.64.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 12:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:83:b2:30:c8:a0:21:7c:b3:9f:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Validity
Not Before: Feb 4 22:42:17 2025 GMT
Not After : May 5 21:42:17 2025 GMT
Subject: CN=cffd9b6a-c419-42dc-a7f9-879427ea1b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:65:33:f7:fc:d1:2d:d7:15:6c:bb:65:dd:
be:37:8e:02:d2:95:bc:8a:c1:db:30:39:71:a8:7d:
d8:8c:c3:c2:0d:7c:a7:8c:0f:f8:4f:b6:c6:54:04:
e4:6c:a3:19:68:5c:92:e1:ce:6c:a1:d5:62:5a:b9:
c7:cd:71:a4:b0:56:84:fa:e2:02:d6:be:ac:08:82:
b0:32:ba:7a:46:05:52:7d:28:2d:e8:ad:2c:74:e9:
f7:93:b1:76:12:1c:c3:6e:85:9b:81:44:33:d3:6b:
78:33:10:5a:76:96:ff:e8:d2:93:79:ee:38:80:da:
f1:55:67:d4:08:cc:f2:17:c6:b3:b0:2f:63:c7:bb:
59:48:67:97:dc:55:e0:0c:09:19:ca:e4:92:c2:26:
3b:1e:ed:47:9b:b6:7a:9b:c2:75:b4:82:ad:fc:57:
42:a3:ad:02:f3:64:f0:06:31:34:12:7a:10:2e:5e:
5d:9f:40:55:a0:bf:b0:4f:d0:8d:d9:5f:e6:93:d2:
fc:c5:e7:7c:00:39:d2:1b:71:f1:ee:ef:bd:f1:4a:
2d:bb:02:fd:17:55:ae:10:e6:b7:e8:cb:af:5d:1e:
1a:41:5b:65:30:07:90:52:0a:8e:5e:60:ff:79:1b:
39:5f:f7:88:41:37:42:60:72:5c:35:db:3e:a0:3d:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8D:9B:09:C1:17:87:C9:C6:E9:BF:C1:76:4F:BC:CF:26:48:FD:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/4e491bef-ef7e-31aa-82e5-18c1156d3508.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
X509v3 Authority Key Identifier:
keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
sbgp-ipAddrBlock: critical
IPv4:
159.172.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:5d:d5:3b:1a:60:0a:16:ea:38:a2:43:c2:36:ba:29:9e:5a:
a7:de:d7:c3:fd:87:50:e3:a2:b6:2f:08:ee:3f:dd:c6:b4:f3:
8b:70:9c:84:5c:70:45:86:04:4d:37:98:72:6e:2f:7a:a1:05:
a2:2c:74:59:64:3e:55:4b:4e:15:27:83:0a:f3:bf:4f:a7:b3:
3b:97:4c:9c:71:31:18:d2:a2:b2:e5:f2:05:b8:07:cb:0b:b7:
03:ec:b6:cd:0a:41:3b:4f:46:75:b7:80:e9:db:46:f6:36:51:
0b:66:ea:9b:63:2b:29:2a:16:ac:7c:7a:cb:1f:8d:63:17:36:
29:a7:eb:9b:ba:f4:09:c2:d5:3c:ec:ee:9d:0e:ba:75:e0:91:
18:f5:03:74:de:7e:94:96:92:97:de:1e:56:4b:c2:cf:79:48:
5c:7b:7f:4f:f9:5f:53:4a:a9:0c:ec:78:29:20:2f:f0:e3:b5:
bc:cb:bb:87:37:51:6d:e3:25:fa:9b:f1:33:9a:b3:b3:e3:c4:
c8:7a:1d:d9:21:fb:67:28:b6:fb:5b:12:c1:15:a2:50:b8:e0:
ee:91:bf:c3:c4:05:d1:3a:37:cd:85:bd:b2:10:44:97:d0:80:
73:82:3a:37:ab:0c:59:36:da:61:ff:7f:9f:81:28:de:a1:55:
67:9f:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:56:30 2025 by rpki-client