Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d5d46c4f-3eb5-30ba-b503-64f58842e4ac.roa
File: d5d46c4f-3eb5-30ba-b503-64f58842e4ac.roa (raw, json)
Hash identifier: ZR60edptWSw89KdZgeS/hl3ULelxQesHoSFvCnxjrG8=
Subject key identifier: AF:74:6D:2F:A9:35:4C:FF:86:40:BD:35:36:43:80:CD:87:64:55:93
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F4328583E1BC8E2EEE0F4D3BD81B84780
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d5d46c4f-3eb5-30ba-b503-64f58842e4ac.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 25 May 2028 04:00:00 +0000
asID: 54858
IP address blocks: 198.244.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1b:c8:e2:ee:e0:f4:d3:bd:81:b8:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : May 25 04:00:00 2028 GMT
Subject: CN=1c2321c3-a41e-4ba0-9688-0e851c80fe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:b9:be:4d:c9:cd:41:9a:1b:b4:eb:1d:a6:
4b:ec:5e:30:04:59:ec:46:98:0e:cf:a3:c9:05:f1:
9b:cc:f1:fb:b7:5e:0f:75:2e:6a:48:9f:87:2f:06:
67:0d:ce:ce:83:dd:f5:fe:d6:c4:be:51:a3:eb:2e:
02:5c:22:65:1a:52:6f:08:11:d8:fe:9a:2f:d3:86:
7d:86:40:65:5a:a5:d2:e5:b9:f0:37:d3:55:81:fa:
9f:1c:f3:ba:ef:5e:bc:fc:78:f8:c8:c4:e2:91:2d:
83:35:e7:fd:2d:be:27:17:e3:a8:01:b4:e8:06:46:
4c:09:6a:35:8c:91:d1:3e:06:db:cf:1f:ea:ee:14:
c2:bd:ce:bc:ab:cb:d6:c1:dc:b9:cb:81:e9:08:03:
4f:71:bf:8d:60:df:06:b3:0c:84:66:1e:63:34:0f:
6e:c0:10:75:bf:55:e4:f3:ff:32:81:69:4c:8e:f2:
07:3f:23:8e:e8:33:e1:43:9b:95:c6:4b:f2:99:f4:
13:36:8e:f0:be:01:8f:a2:3a:d2:2f:02:3b:a5:e3:
08:c5:6b:0d:a9:68:26:be:f3:a3:2b:bd:5d:5d:88:
de:d8:c8:76:fc:fa:63:da:d8:91:8b:75:46:73:2d:
bb:64:46:f2:99:8f:d1:51:4b:ea:f6:15:32:71:ec:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:6D:2F:A9:35:4C:FF:86:40:BD:35:36:43:80:CD:87:64:55:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d5d46c4f-3eb5-30ba-b503-64f58842e4ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
198.244.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b6:bf:0a:7d:2e:cf:ee:cf:be:7d:6d:4f:3d:d3:5a:87:3b:
37:9f:56:58:33:16:58:b1:bb:49:a1:70:7b:06:80:1a:6d:d8:
f9:ef:54:27:e4:8c:1a:88:ce:24:2a:2f:9c:82:61:4f:01:34:
a3:9b:df:54:a0:13:3c:dc:6c:7b:c3:87:91:d4:3d:1d:26:45:
a2:99:43:c3:d9:49:7a:3e:c9:b8:c4:4a:a5:6e:61:cb:b9:91:
c0:85:0c:d1:fc:ff:0b:e6:61:46:9a:fd:73:42:bb:63:0f:fe:
5a:75:c1:b6:23:62:21:db:88:d6:83:22:ce:03:89:6d:5c:a5:
1c:47:f1:a6:cb:c7:22:a5:53:86:8f:79:35:77:f4:6a:26:c8:
53:70:96:bd:53:07:0f:a1:be:66:15:4d:06:52:d0:0f:a5:2e:
a5:24:c6:91:d7:37:1c:7a:1e:01:0a:47:fe:14:2f:b8:9b:6d:
59:42:6d:64:57:24:90:79:0a:27:44:67:c8:ad:9a:3b:d6:6e:
0e:7e:72:4f:a4:a2:2f:55:92:d2:ec:47:3b:17:18:75:4f:ca:
db:ea:b9:be:f0:9b:ec:68:33:ec:9f:90:70:36:54:49:79:18:
46:4d:4e:cb:a4:da:a1:77:e1:3a:62:12:d9:36:76:db:ff:4b:
39:17:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:42:43 2025 by rpki-client