Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/94b1199b-3d5a-3f6d-ae87-df5e7706d21e.roa
File: 94b1199b-3d5a-3f6d-ae87-df5e7706d21e.roa (raw, json)
Hash identifier: XOCDK2NxNF9GXVsHbNu/TtQFGe42HlfE4wXxn4xZa5M=
Subject key identifier: F0:A1:61:B6:7E:BB:9D:55:71:09:5D:19:23:89:26:63:5B:FD:78:BA
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F4328584889270887DE6529541A643960
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/94b1199b-3d5a-3f6d-ae87-df5e7706d21e.roa
Signing time: Mon 13 Jan 2025 23:11:17 +0000
ROA not before: Mon 13 Jan 2025 23:11:17 +0000
ROA not after: Sun 13 Apr 2025 22:11:17 +0000
asID: 834
IP address blocks: 130.254.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:27:08:87:de:65:29:54:1a:64:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Jan 13 23:11:17 2025 GMT
Not After : Apr 13 22:11:17 2025 GMT
Subject: CN=42b5eeb8-e33b-4383-8f86-032bf0e3ee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:99:cb:40:53:c2:27:e7:84:ed:5a:4a:bc:
a4:c2:54:46:d5:13:e3:0f:ac:48:f1:ca:e4:a5:18:
94:8c:9e:c1:e8:14:12:bd:01:75:69:c1:18:16:07:
43:19:4b:9f:ea:fe:72:13:6d:28:01:9b:44:67:2e:
17:c4:6a:b6:2f:6e:0b:45:9b:1d:07:b1:e8:61:4b:
f8:74:5b:5e:85:9e:dc:98:d2:86:9b:e0:40:21:02:
4d:bc:07:8a:b5:f8:6f:8c:64:4a:a1:c2:0b:a0:6e:
f7:e7:f6:84:97:c8:0a:d4:28:c4:f9:c2:fc:54:9f:
0d:a8:34:6b:68:7f:45:ae:69:a0:92:a9:ef:2f:5c:
c6:ad:fe:c9:5a:43:67:37:ec:78:74:66:73:e5:90:
18:2c:82:20:3b:bc:e0:e1:6e:a5:52:e5:a9:d7:99:
99:25:3e:ea:0f:71:fa:65:0a:c3:7c:5b:82:d2:b8:
1f:56:e0:e5:12:5d:e3:2e:f4:4a:57:be:5f:21:bd:
40:a7:33:b5:23:be:c2:07:f4:bc:e4:57:d4:81:4b:
3f:31:af:84:5c:d8:95:a0:20:64:89:1a:8c:e6:62:
fa:8f:0a:cc:60:a2:04:be:86:b2:6e:1d:d7:35:6a:
8b:c2:6f:a9:75:3b:f4:24:c3:20:0a:fb:74:55:a7:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:61:B6:7E:BB:9D:55:71:09:5D:19:23:89:26:63:5B:FD:78:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/94b1199b-3d5a-3f6d-ae87-df5e7706d21e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:89:35:cf:22:d7:f3:62:8e:0c:9e:f5:1d:c7:7d:f4:cd:93:
a0:2f:3b:60:44:01:dc:b0:92:9c:e0:d6:af:19:c8:8d:e0:60:
be:0a:72:3f:12:66:7b:de:08:1a:20:96:2a:db:d1:28:6f:42:
e3:7b:3b:fc:21:89:66:ce:11:40:fb:de:0d:2f:bf:38:fa:4f:
68:f6:6f:d5:22:6e:4c:16:a7:58:a5:e3:0c:13:07:bb:97:85:
b5:1e:ee:3b:3c:33:fc:b2:6e:38:48:03:59:c1:9d:f4:dd:75:
1f:9b:02:04:85:7d:74:31:e0:f3:fd:c8:62:99:75:9e:71:ad:
81:18:b4:7b:f9:38:df:56:b2:d3:ab:02:90:32:88:e4:74:79:
f6:56:dd:f8:ec:94:5f:ed:32:c5:d3:43:52:d1:8a:60:51:fd:
11:4c:e0:8d:bf:d7:7d:3a:62:aa:fc:f4:c6:1a:ce:35:c4:14:
ba:f0:30:c1:b0:e7:a7:80:9e:d9:e9:64:b9:ae:a0:51:d8:84:
79:45:25:7f:0e:fa:7f:20:6e:72:89:a1:4a:55:84:88:46:ab:
f7:ff:80:70:b1:66:f9:47:c0:7a:7f:b7:17:70:a0:70:5b:c1:
fb:d6:d6:cd:b2:e7:ef:be:a2:de:1b:af:e5:ba:22:61:45:dd:
04:7d:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:37:40 2025 by rpki-client