Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/6bf14be1-0216-3523-ad03-394987857f50.roa
File: 6bf14be1-0216-3523-ad03-394987857f50.roa (raw, json)
Hash identifier: jXsZ+bUD46z1zj8IJFExkDTXJ0PviLJCA9nP119IB4Y=
Subject key identifier: FF:BC:C3:11:DB:8F:E1:3C:10:0C:D6:D1:54:7A:AB:C5:AD:F7:5B:48
Certificate issuer: /CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Certificate serial: 010D0C9F43285848DC743DEE630A87992A92CC96
Authority key identifier: 07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/6bf14be1-0216-3523-ad03-394987857f50.roa
Signing time: Wed 12 Feb 2025 19:18:56 +0000
ROA not before: Wed 12 Feb 2025 19:18:56 +0000
ROA not after: Tue 13 May 2025 18:18:56 +0000
asID: 903
IP address blocks: 209.141.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 13:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:74:3d:ee:63:0a:87:99:2a:92:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Validity
Not Before: Feb 12 19:18:56 2025 GMT
Not After : May 13 18:18:56 2025 GMT
Subject: CN=64d04ae9-e236-4e2d-b61a-f14e07ee3e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:8c:d0:5d:f0:8e:d9:99:a3:7a:8f:ba:21:
4c:fa:79:74:f4:20:f3:67:49:d7:7a:dc:e6:93:21:
97:7f:59:69:41:25:9c:2a:5d:56:8b:62:99:73:6e:
c6:a9:ec:6a:5c:87:e8:d5:8a:e8:ea:0a:70:f8:59:
49:c2:db:c8:6d:1c:4f:95:42:bc:66:bc:f6:85:76:
31:ad:2f:30:54:aa:71:6a:65:7a:9e:30:91:8c:2b:
6e:2e:18:c9:98:de:15:44:4e:54:5f:c3:67:02:2c:
80:1f:70:00:ad:12:be:9a:01:b0:58:73:f8:15:8c:
0f:a4:26:8a:c7:8a:c1:30:8a:89:da:18:0c:66:32:
be:36:c9:32:a1:17:a1:9e:1d:5d:45:8b:6a:24:0c:
73:58:5f:4d:17:1d:2e:de:a3:41:e1:41:d7:0c:e7:
16:43:5b:24:5f:ba:e1:42:a5:5f:7d:5d:2e:f8:e3:
a2:fb:2d:a0:cc:00:ed:f6:d3:ef:89:06:08:d6:3d:
bd:81:67:d5:b7:ab:b6:c3:fa:4d:a8:9d:1c:97:87:
cd:86:16:bd:18:36:4b:8f:13:79:42:ed:20:6d:ae:
82:40:80:a1:a2:19:6c:fe:b3:76:6d:67:8d:b8:f5:
63:c1:73:a8:03:4a:1a:bc:1b:ca:cc:3e:d3:4a:c8:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BC:C3:11:DB:8F:E1:3C:10:0C:D6:D1:54:7A:AB:C5:AD:F7:5B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/6bf14be1-0216-3523-ad03-394987857f50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl
X509v3 Authority Key Identifier:
keyid:07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.141.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:52:8c:ea:84:78:9a:9e:e3:3e:1f:33:fa:2b:d4:47:ec:dd:
3f:37:54:a8:20:1a:f6:51:37:84:56:3a:7c:76:60:8b:20:fe:
d5:42:55:34:55:82:8b:5e:17:25:61:9e:2f:f6:e7:c7:0d:18:
7c:76:b2:7e:a9:39:43:11:e7:d0:92:3d:f0:2a:e6:8e:d5:a9:
78:f1:6d:40:48:65:bd:68:ea:b3:3e:48:b4:18:17:74:9f:32:
b3:4f:25:e7:42:e1:c2:f5:c0:68:6a:53:83:9c:98:83:e4:e3:
f0:68:ce:90:29:5f:7e:6c:36:b0:95:c9:1b:21:75:cd:bd:c7:
ca:fb:38:4a:a5:47:7a:c3:53:49:a2:78:5d:f6:fc:fc:1d:86:
e1:6f:c8:7b:08:1d:f9:a9:02:1f:99:5f:bd:d9:75:23:c9:35:
1f:44:b7:3f:ee:31:34:c9:87:83:9e:b4:d8:b1:57:4c:59:ab:
ff:63:81:35:67:9e:64:af:bd:19:5f:42:e7:e3:b0:d1:0a:67:
e5:a8:fc:63:f2:11:27:87:c1:ac:dc:bd:39:aa:ac:c3:fd:d8:
65:f2:35:79:af:27:83:2b:c7:c4:c9:ee:28:85:95:17:59:05:
60:9d:ff:ef:89:db:0f:b0:61:c5:46:e8:48:fb:87:63:f7:31:
1d:be:9a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:04 2025 by rpki-client