Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1b66951d-7f17-38cb-b0f1-335f3614fef1.roa
File: 1b66951d-7f17-38cb-b0f1-335f3614fef1.roa (raw, json)
Hash identifier: m5/GnKJO7zGmv81Dml6PxM9JusIHwdl6Cu/AOLx7wCM=
Subject key identifier: F7:90:76:6B:DB:3A:E8:B3:F6:E7:F5:3C:5E:04:6F:5A:A5:31:83:DB
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F432858493276B5FD905D59E95D4B0BE0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1b66951d-7f17-38cb-b0f1-335f3614fef1.roa
Signing time: Sat 15 Mar 2025 14:43:26 +0000
ROA not before: Sat 15 Mar 2025 14:43:26 +0000
ROA not after: Fri 13 Jun 2025 14:43:26 +0000
asID: 6079
IP address blocks: 209.178.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 23:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:76:b5:fd:90:5d:59:e9:5d:4b:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Mar 15 14:43:26 2025 GMT
Not After : Jun 13 14:43:26 2025 GMT
Subject: CN=21203323-64d2-47d7-8e09-d703634eea05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:5f:73:d3:2e:4d:2a:14:ed:0e:b4:ae:c8:
f4:89:0b:a4:3f:fb:68:6a:fb:9e:52:5d:3e:2a:fb:
06:a5:7b:94:49:32:89:9b:70:9c:96:b7:04:56:95:
70:a4:92:f0:cc:bd:0d:41:d3:83:ad:96:a4:78:02:
4a:fb:ff:11:dc:65:8b:3b:52:53:25:38:c2:dc:6d:
94:d2:9e:5e:e5:2f:3c:2b:d6:4e:22:6c:d6:94:83:
52:66:1f:7f:df:1c:3f:4a:51:d8:25:7b:b7:62:9e:
52:d4:89:9d:b1:cd:6c:98:0a:0b:a1:71:1a:17:e9:
3c:75:f6:f7:ca:45:52:4f:eb:10:1a:72:7f:2a:b3:
e2:eb:80:cd:24:e3:81:05:cf:7b:19:bb:f7:92:3d:
9c:b9:cb:de:f2:7c:4f:68:2a:8c:06:03:f0:27:2a:
2e:98:0f:9b:f9:35:c3:01:c5:57:fa:07:9b:24:48:
08:96:fc:f5:78:bb:45:90:92:81:9e:d8:d0:5d:a9:
97:91:76:69:00:60:29:4c:56:06:fd:28:e0:3b:ae:
a8:6a:ef:d3:be:80:6c:ca:4d:25:e2:90:9e:fd:50:
54:c8:d2:f3:64:04:dd:0b:fe:d8:1a:8b:b1:a1:e1:
3f:ac:54:f8:eb:fe:85:81:35:55:56:31:71:24:2e:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:76:6B:DB:3A:E8:B3:F6:E7:F5:3C:5E:04:6F:5A:A5:31:83:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1b66951d-7f17-38cb-b0f1-335f3614fef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:f7:f4:5d:ca:d0:ce:da:ff:83:b0:b2:14:d3:ca:88:e2:52:
1b:62:61:a8:b9:a0:53:d6:7d:20:94:92:ae:91:e4:b5:37:82:
17:e8:6c:4d:86:ab:aa:ca:bd:cd:81:30:72:97:0c:cb:f3:8d:
5e:20:20:32:24:0c:59:08:dd:2e:35:05:31:20:08:a4:6b:e4:
73:15:33:05:16:3e:8c:4d:23:8a:ec:ef:25:2e:0f:d9:74:1e:
86:ae:fe:9f:14:cc:49:ce:4e:f0:d5:60:b2:09:57:58:f7:82:
39:06:9f:fb:f0:0d:01:02:61:b3:4c:81:44:75:0f:5e:20:6e:
bd:b3:12:83:89:b7:02:88:1a:78:fe:ba:eb:00:be:97:8a:c9:
d0:62:30:65:10:99:26:de:44:07:74:ee:f6:fa:dd:a4:b1:d7:
82:e7:12:90:8d:06:ff:af:f0:0e:f8:a9:0e:76:71:df:d5:c1:
ad:f5:b3:42:d6:dc:7a:23:d9:13:31:19:61:a8:3c:28:ba:e1:
24:12:ad:fd:49:02:d2:d1:6f:6b:df:0c:a2:8a:35:9f:b1:62:
a0:60:91:9d:92:c9:90:59:1f:5a:cf:4c:de:1d:ff:5c:12:0e:
32:01:08:a5:f2:f3:08:ed:fd:33:64:f6:05:7d:40:1c:c4:30:
f3:67:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:03:26 2025 by rpki-client