Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/9ea6a813-b0f2-3437-954c-278a4ade55fc.roa
File: 9ea6a813-b0f2-3437-954c-278a4ade55fc.roa (raw, json)
Hash identifier: BLk0TDf6fGKkM3WFsyB6RM+53QK71eZZ+33Q7XIhZOE=
Subject key identifier: 32:E0:AC:EB:9D:8C:C3:6D:68:AB:EB:CF:EA:FC:00:85:EF:60:E7:E7
Certificate issuer: /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial: 010D0C9F43285848A1361A0E24E371EB7B389600
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/9ea6a813-b0f2-3437-954c-278a4ade55fc.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 8100
IP address blocks: 23.247.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Feb 2025 04:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1a:0e:24:e3:71:eb:7b:38:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=08a9df81-08dd-40fc-bf72-d778e18ddabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:a7:dc:66:bc:66:80:7b:ee:e1:a9:7a:3f:
fd:a8:17:aa:29:89:d3:b0:31:d8:d2:f0:f9:bd:88:
ac:55:c9:28:e9:2f:41:c6:9d:ba:01:1a:b9:1f:3c:
a1:ba:25:4f:5e:a4:8e:f5:b9:24:37:bc:05:fc:d0:
76:f9:67:40:95:34:3e:8b:81:8f:46:96:5f:f7:79:
0d:d9:e4:dc:ae:13:9b:1e:cd:05:49:95:22:f1:71:
14:82:a5:8e:0e:a4:b8:7d:60:c4:75:5a:a9:02:8b:
1a:5f:01:4c:c0:dd:07:b8:97:b0:88:87:64:2e:a4:
7e:85:b6:b0:47:d1:b7:30:d8:18:e9:d5:83:7c:46:
4c:1f:a1:a6:19:93:58:11:28:35:3b:64:cd:6f:4e:
9c:1c:ab:48:a9:e7:3f:2d:b1:bd:2b:88:b8:7f:a2:
23:3e:16:b9:b5:80:2c:cb:cf:62:4f:60:09:96:9c:
90:a8:ea:e2:a9:82:ad:25:14:80:a6:47:a2:77:57:
98:2e:78:93:bc:fa:52:c3:28:8c:8a:1e:b8:eb:b6:
bc:dd:56:22:cf:ef:7c:ca:ac:36:bb:e9:c0:ea:f8:
66:15:a9:22:cf:32:9d:ed:8a:36:79:d5:43:b2:2a:
bc:34:50:01:4a:5a:97:af:99:8f:90:12:34:b0:6c:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:AC:EB:9D:8C:C3:6D:68:AB:EB:CF:EA:FC:00:85:EF:60:E7:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/9ea6a813-b0f2-3437-954c-278a4ade55fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
X509v3 Authority Key Identifier:
keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:d2:5b:b8:db:f3:00:58:28:12:f1:42:21:0b:9b:5e:bb:5f:
c3:03:be:2c:f8:2a:e3:b1:e9:1a:25:98:95:7e:68:e8:54:b6:
9e:8d:7e:b9:40:42:04:a9:4f:68:f6:56:25:c6:40:e4:00:bf:
f0:4c:6e:85:4c:bf:b6:b8:68:e0:f9:42:14:97:68:5d:ee:fa:
e4:9f:aa:7b:14:7c:82:38:6a:cf:01:f8:4b:07:87:fb:a1:68:
e1:02:be:23:f8:00:3e:62:60:26:0b:52:1e:d1:26:e4:29:a7:
ab:59:47:17:8d:c8:4a:4f:b0:68:58:e4:b8:d5:6f:57:a5:b8:
fd:75:cd:c9:ca:e3:c9:59:9c:ec:dc:ef:e7:85:57:1c:42:af:
e9:30:4a:7c:61:98:f5:17:d7:78:90:5c:c9:7d:85:10:f7:a4:
82:b6:92:9f:2c:32:21:79:3c:53:48:66:a4:5d:64:dc:73:ca:
eb:8c:28:a6:e5:a9:cd:c9:b7:03:67:c4:12:e1:d8:e1:7c:45:
b4:cb:6b:b2:74:c5:b0:05:fb:fd:9f:15:0a:af:52:0b:52:0e:
69:93:82:95:ea:84:12:1c:05:e2:d1:26:22:71:f3:f2:32:1c:
94:28:39:4e:ec:85:62:a0:6e:23:bf:60:34:32:86:01:3a:ff:
49:e0:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:25 2025 by rpki-client