Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1a68fee-cdef-3ba8-8004-a13ee5703abe.roa
File: a1a68fee-cdef-3ba8-8004-a13ee5703abe.roa (raw, json)
Hash identifier: /pFJKZjikFGAEbIHevapVUIjQroKxRi1u+GheNZrle4=
Subject key identifier: 28:BD:21:BB:ED:AB:D9:37:96:43:60:67:F2:D3:27:73:09:A9:62:B5
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848EC96ACE212F07A7C05709C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1a68fee-cdef-3ba8-8004-a13ee5703abe.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 397373
IP address blocks: 104.253.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 10:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:ac:e2:12:f0:7a:7c:05:70:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=a663f872-420a-41cc-8d90-6f258f850445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:5a:19:1b:00:84:3f:03:26:d9:bd:54:bd:
f3:6e:25:6a:ea:17:12:25:45:04:7b:1c:8c:8b:3a:
7b:7d:c8:da:97:35:0d:ea:eb:d1:2f:d0:44:da:ef:
ad:4c:c8:cc:bc:25:50:26:77:6e:99:8d:2a:1f:8c:
1d:3c:61:81:c2:36:8e:8c:cb:2c:a1:ae:87:84:8b:
55:5d:72:50:69:37:80:96:7b:8a:61:0c:17:f1:fb:
57:b5:ec:6b:0e:a8:fd:17:25:81:c2:42:ac:90:11:
2a:bb:db:0d:6d:45:26:2b:f0:68:a0:d7:ac:c2:4a:
64:1c:b0:61:b6:8b:2b:62:2f:81:6c:d0:d5:99:4f:
90:fd:8b:51:c1:0f:ba:e4:c9:b8:41:77:8f:76:e1:
c0:17:35:9d:80:c4:b1:90:02:64:0d:76:97:ca:7f:
d7:34:49:8f:59:35:82:8d:66:52:91:20:71:31:53:
73:0c:c4:13:47:93:dd:22:d2:e6:b2:3b:8c:38:a7:
fb:c8:a1:07:32:23:d3:fb:99:50:94:0a:87:96:89:
8e:e8:1c:31:dd:df:ed:4e:21:21:62:4b:73:b6:45:
af:ff:0e:8c:d3:da:44:9e:37:53:17:14:56:2c:85:
da:5b:fd:ef:75:c6:89:a7:1e:d9:93:b9:50:46:9d:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BD:21:BB:ED:AB:D9:37:96:43:60:67:F2:D3:27:73:09:A9:62:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1a68fee-cdef-3ba8-8004-a13ee5703abe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:d8:9e:c4:28:fd:48:b1:ef:68:3d:48:5b:c6:09:ba:01:3e:
e4:02:75:7e:36:a4:a9:6d:2f:96:96:32:40:8e:f9:86:c4:08:
c5:67:18:7d:aa:a1:2d:ee:1a:26:da:98:a2:2f:b2:39:b0:a0:
02:8d:ab:47:a3:90:63:55:a1:9c:1e:a1:7c:2f:70:88:91:a5:
79:2d:a5:55:c9:44:b9:5b:58:e6:2e:91:56:6a:4e:6c:1a:6c:
c6:02:20:cb:ac:b5:b7:96:61:50:57:69:f4:2f:e2:76:78:c8:
31:aa:db:da:e2:60:a2:06:0e:54:14:a7:c0:a6:4d:c6:dc:c6:
fc:ae:d7:4b:84:9b:81:ee:91:b4:12:59:d4:bd:81:6b:db:f8:
5f:19:74:e5:bd:67:0e:26:87:0b:2e:83:9e:09:d8:48:f6:5c:
54:4e:e7:1f:9a:37:45:79:a8:d7:63:e0:8d:55:e0:bd:16:e1:
a1:74:e6:bc:e0:4d:51:93:17:7d:b7:b5:55:9c:fa:f3:30:bf:
03:40:84:06:48:a1:ae:c8:69:fa:12:1c:5e:fe:d6:12:a3:c4:
94:4e:1b:1d:1c:06:06:48:b4:f3:0f:5f:71:8d:f1:8a:cd:7d:
d0:67:88:a9:3b:c6:7c:c3:a9:c4:c9:3d:5a:62:52:a8:85:14:
08:0c:e9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:13 2025 by rpki-client