Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a249c08a-cda7-37f3-854a-f5de7ccffbcb.roa
File: a249c08a-cda7-37f3-854a-f5de7ccffbcb.roa (raw, json)
Hash identifier: MnxGtkwtdxM0inT91Ga7y+JJmxEjang7qFnkJf8o0xU=
Subject key identifier: 54:2E:0C:60:5E:14:2C:88:94:5E:DE:97:34:67:15:D7:CE:4C:66:9B
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285848862BAAD6A08A88B1887E2240
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a249c08a-cda7-37f3-854a-f5de7ccffbcb.roa
Signing time: Sun 12 Jan 2025 21:33:11 +0000
ROA not before: Sun 12 Jan 2025 21:33:11 +0000
ROA not after: Sat 12 Apr 2025 20:33:11 +0000
asID: 834
IP address blocks: 141.140.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:2b:aa:d6:a0:8a:88:b1:88:7e:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Jan 12 21:33:11 2025 GMT
Not After : Apr 12 20:33:11 2025 GMT
Subject: CN=63d94da9-e59a-4e0c-9fb6-c0d4d97f30b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:91:51:4a:19:52:2e:45:6b:22:b3:03:68:85:
68:28:43:af:76:50:01:b1:fb:40:b9:5f:7c:33:06:
d4:6b:2b:9c:b2:f9:95:6f:ba:33:29:e6:f1:0d:73:
45:95:5c:cb:ef:50:67:00:73:83:0f:9c:57:57:4f:
f9:30:28:36:d8:45:c8:d6:7a:99:9b:03:cd:ec:de:
3a:6e:8b:87:ff:38:8b:ae:5a:3b:27:72:9b:36:42:
64:94:59:90:0f:d8:8b:bb:60:76:54:63:33:d1:4d:
0e:07:5a:26:27:3d:27:66:eb:a0:42:e2:12:19:0b:
05:71:b9:82:7b:03:71:e9:7b:39:f9:23:9e:f8:d3:
07:b6:14:9c:40:b1:8c:2a:94:7d:ac:b3:1f:af:c0:
f2:b6:16:dd:64:b9:47:4f:3f:d3:28:a7:91:c7:08:
bd:c1:57:8e:07:e3:3e:ed:d3:43:8f:ac:11:ee:69:
bd:bd:36:19:e0:fd:7f:5c:8a:e8:3c:d3:61:b6:c3:
f9:38:14:1d:e2:bd:f4:32:53:b2:24:df:b2:9a:33:
10:6f:4f:a9:46:5b:0f:00:24:a4:89:67:db:8f:5a:
6a:09:33:06:a0:ea:b3:18:e4:c9:6e:67:0b:cc:67:
3b:40:07:53:fc:75:dc:0e:0d:92:73:55:26:95:7a:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2E:0C:60:5E:14:2C:88:94:5E:DE:97:34:67:15:D7:CE:4C:66:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a249c08a-cda7-37f3-854a-f5de7ccffbcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:95:fb:6b:a9:ca:57:88:ff:9e:79:ca:6a:08:ae:92:17:db:
22:23:51:41:09:99:ef:e6:6d:3b:03:f0:96:cf:ed:e8:0f:06:
fd:3e:6d:d6:7a:0d:c2:6d:7b:69:f3:f1:b4:64:b3:b7:60:da:
44:d9:9a:8f:a6:89:5b:f4:9b:a3:aa:d0:9e:fe:0d:19:88:cf:
3c:81:b0:78:85:76:ec:7d:2d:24:8f:e8:fb:3f:d8:8b:4b:20:
2a:b7:af:ac:7c:45:4d:7b:bf:ea:8d:99:b9:7d:0e:07:b3:6f:
69:32:f7:21:a1:a3:51:ce:cb:3e:71:ac:a3:48:1e:93:65:2f:
a7:bd:33:85:48:e8:13:21:7b:29:38:ef:6b:f1:f1:cb:f7:53:
65:35:eb:16:60:e3:2c:61:c8:4c:dc:12:d4:30:85:be:1a:86:
99:37:dc:e8:a4:1a:a4:b3:3c:24:6a:8f:b5:ec:61:3f:56:95:
aa:c0:ae:58:28:08:b4:a0:3f:e3:1f:2c:2e:6b:51:4e:03:23:
59:b8:d3:62:48:a3:24:83:c0:e1:1f:2e:1d:35:0e:82:65:8a:
0c:0b:cc:8b:ee:fb:c4:78:36:79:56:e8:42:94:1e:a9:86:68:
a5:f3:cd:52:f6:74:78:c1:5f:dd:f3:e6:01:74:af:56:10:6d:
47:22:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:35 2025 by rpki-client