Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/8c599b3a-3e07-33d2-8421-bf7b07a2ad08.roa
File: 8c599b3a-3e07-33d2-8421-bf7b07a2ad08.roa (raw, json)
Hash identifier: Dzr+gQSUXshScqYL4BFz4F10YiHT/A9wlWrQrCPx+jU=
Subject key identifier: A9:2A:CE:3B:1F:50:40:67:81:46:A5:D8:5E:E1:35:61:98:F2:D8:45
Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial: 010D0C9F43285848AD250CE6AB67AD4A7BAD8FC0
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/8c599b3a-3e07-33d2-8421-bf7b07a2ad08.roa
Signing time: Sun 26 Jan 2025 20:36:23 +0000
ROA not before: Sun 26 Jan 2025 20:36:23 +0000
ROA not after: Sat 26 Apr 2025 19:36:23 +0000
asID: 7029
IP address blocks: 192.101.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 30 Jan 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:25:0c:e6:ab:67:ad:4a:7b:ad:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
Validity
Not Before: Jan 26 20:36:23 2025 GMT
Not After : Apr 26 19:36:23 2025 GMT
Subject: CN=0eb06a24-58a8-4efb-916a-1e879f6bf86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:5c:94:1c:56:2c:ff:f1:d5:dd:f5:7d:f8:
83:9d:b0:44:f2:e2:f3:48:92:9a:77:cf:9c:a8:6e:
a7:43:bc:ad:a6:08:cc:42:6f:8c:06:ce:fe:b8:d5:
8e:fe:61:7c:9c:56:5f:21:80:08:fc:17:13:c4:08:
ab:af:f8:ab:58:92:ea:83:e6:98:af:54:e7:25:09:
ca:c0:65:5a:e5:c5:69:78:68:9f:db:97:3c:9a:c1:
e3:dc:67:b0:5b:9a:fa:42:bc:40:28:13:ed:7c:84:
f5:bc:59:25:a7:23:12:dd:38:ff:60:fe:32:60:24:
65:ac:fe:19:e7:53:e2:16:f3:d7:b0:76:36:99:1c:
7c:f5:6d:d4:5c:bb:75:83:f8:1f:15:de:d4:be:27:
c7:ef:2a:45:dd:cf:08:77:c3:09:58:ab:ba:76:24:
ab:01:4d:8b:b9:b2:71:71:63:45:09:a5:88:62:f0:
89:f4:4c:37:67:84:89:36:83:e0:07:a0:af:3f:9f:
b3:e9:79:f3:99:00:1f:6b:6b:f1:21:39:39:39:a8:
40:2f:65:01:83:97:12:e1:45:f0:74:df:81:f3:37:
f4:e6:da:86:51:20:e5:6e:1d:3f:2b:b6:ab:e8:82:
e2:77:7d:b3:49:b9:14:f7:52:8e:82:14:55:5a:72:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2A:CE:3B:1F:50:40:67:81:46:A5:D8:5E:E1:35:61:98:F2:D8:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/8c599b3a-3e07-33d2-8421-bf7b07a2ad08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
X509v3 Authority Key Identifier:
keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e6:e2:06:f3:ab:80:ad:9e:2d:5c:68:a4:3d:58:c1:db:08:
d1:e6:89:09:21:64:59:e0:47:67:90:52:9b:b3:7b:6b:15:e5:
de:61:84:10:c8:ce:47:7f:41:53:3a:c9:85:3c:90:ea:1d:85:
33:92:0f:5f:b1:48:9a:a2:0e:93:f3:4b:74:3b:a5:81:1e:ed:
66:55:89:65:41:bc:85:b6:3c:72:d7:6e:bd:8b:6f:b3:19:95:
06:38:8a:23:94:10:f6:12:c5:95:58:0e:03:3d:94:98:dd:81:
ed:99:a6:35:71:5a:5e:a2:e2:c4:d3:0c:b2:2d:e7:76:94:6c:
e9:6a:0c:71:41:30:e7:fb:3a:05:1d:27:2f:84:25:3a:a6:62:
81:b5:12:80:fd:fa:71:14:c4:80:1c:a0:ef:e8:75:7e:cf:91:
6a:1b:30:f0:c1:ed:41:7d:4b:a2:56:56:f7:b4:ca:f6:c6:79:
19:6b:d4:a9:dd:82:52:ae:54:b0:bd:df:2c:30:c3:9f:33:88:
c3:fa:94:80:df:10:0c:2d:5f:96:4f:4a:e8:92:63:9f:d3:4f:
ab:a7:b9:80:7c:99:aa:52:77:f2:67:dd:92:23:e7:2a:cb:dc:
ad:80:2a:c2:7c:ff:37:ae:85:48:14:03:ce:2d:7c:46:75:6e:
46:0f:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:30 2025 by rpki-client