Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/38c24b38-8117-3de3-983a-bd6205ea759e.roa
File: 38c24b38-8117-3de3-983a-bd6205ea759e.roa (raw, json)
Hash identifier: Y9qY8ZXUFWDR2fkkUp0iDHu3HGdA/+jLL2dtIGVJfJg=
Subject key identifier: 08:94:DD:18:2F:39:EF:82:E5:86:4F:DE:2C:F8:C8:65:C4:0E:AF:61
Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial: 010D0C9F4328584711ECE6912586E7C0F25B6D40
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/38c24b38-8117-3de3-983a-bd6205ea759e.roa
Signing time: Sun 01 Sep 2024 13:26:01 +0000
ROA not before: Sun 01 Sep 2024 13:26:01 +0000
ROA not after: Sat 30 Nov 2024 14:26:01 +0000
asID: 46733
IP address blocks: 2602:f9f4:20::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Sep 2024 18:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:ec:e6:91:25:86:e7:c0:f2:5b:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Validity
Not Before: Sep 1 13:26:01 2024 GMT
Not After : Nov 30 14:26:01 2024 GMT
Subject: CN=53108c1e-2e8f-44fd-a412-61ba0e81a824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:0a:45:0a:8f:29:b4:f3:2c:df:0c:e2:63:
fc:a1:48:7a:69:57:a1:19:d2:9b:3d:eb:1b:19:9e:
7d:f1:9e:63:b3:19:bf:71:c2:3a:ba:58:4b:8e:c3:
a6:fe:84:1c:a3:ca:71:88:26:1c:42:95:47:bc:58:
b6:ca:dc:d2:10:a4:a1:55:5f:a4:f3:44:c6:56:35:
f7:81:c2:ae:31:f1:30:79:9d:ca:ba:89:56:a9:96:
d4:43:0f:c1:47:1e:f5:71:05:b1:0c:90:ff:e0:34:
b8:59:22:4b:8b:dd:dd:53:47:dd:52:15:0d:38:ab:
e7:a0:ee:2e:59:ea:6d:fc:31:1a:1d:99:65:f4:d5:
3f:90:b2:41:45:fd:c1:f9:f6:07:ee:40:25:bf:74:
23:d4:9c:68:8d:01:ad:53:d6:b3:2b:14:eb:50:11:
9c:12:87:34:f6:17:28:34:41:0f:09:53:78:65:b5:
b2:61:c4:b3:f2:c7:e1:19:8e:28:ca:a2:43:d0:d6:
bb:f1:5b:50:6c:b5:c4:a3:a9:53:96:91:03:b8:22:
a3:45:a3:f4:c7:12:90:7b:ff:b2:1c:34:8a:67:4f:
c7:17:90:25:0a:fa:6c:ed:fc:04:e1:b9:52:e3:fc:
cb:ae:b6:72:8a:1d:44:e8:a2:bb:03:fb:f2:68:69:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:94:DD:18:2F:39:EF:82:E5:86:4F:DE:2C:F8:C8:65:C4:0E:AF:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/38c24b38-8117-3de3-983a-bd6205ea759e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl
X509v3 Authority Key Identifier:
keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f4:20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:17:d5:fc:01:53:26:43:a7:ad:42:c8:3c:97:70:15:a7:47:
d3:4b:df:11:6f:7c:d0:7f:42:06:24:e6:d6:8f:52:f3:ce:67:
22:08:fb:8e:a2:02:11:c3:d4:1c:49:8d:be:13:01:5a:7a:19:
b0:17:c9:ce:f8:eb:4a:db:93:c0:39:1e:6e:fc:dc:b2:28:79:
f4:10:b2:8d:04:c5:d4:ab:12:24:be:ee:e5:58:59:ea:df:3f:
4f:f2:67:7d:16:ae:54:05:f0:63:c7:76:52:b9:c5:36:e0:d0:
d5:5c:0a:39:52:a2:19:a5:d9:de:23:c0:c7:09:8e:a7:0c:33:
db:40:05:58:41:26:cc:42:3b:22:95:05:ed:69:13:3f:be:4f:
2b:b7:0a:5a:21:13:44:ec:ec:5f:68:34:48:f3:58:bd:36:9e:
1b:85:0c:6e:6b:46:ef:ee:63:98:55:ef:db:12:5f:84:89:82:
64:2a:4b:8c:b4:96:e9:ed:3f:a8:9c:8d:10:d6:90:54:95:74:
2f:5f:a3:7a:94:02:ea:e9:ff:43:7a:e4:f9:4e:b4:27:7e:fc:
3f:3b:38:d5:f2:2f:11:1c:07:4c:71:d8:69:da:65:f3:52:8c:
db:0b:33:4d:d8:6e:15:08:87:23:e8:88:75:d9:2c:7c:84:7e:
d3:70:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 19:38:24 2024 by rpki-client on console-fra.rpki-client.org