Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3be249-70d6-3a84-9b5e-3fe025feafa3.roa
File: 0f3be249-70d6-3a84-9b5e-3fe025feafa3.roa (raw, json)
Hash identifier: yANuHRRnOckbmpCrW9E9csF+8kJTxW4pje+VKPtMW+s=
Subject key identifier: 04:22:5A:2F:D3:3A:D0:C7:FC:D2:55:F4:72:EB:F7:A4:B4:88:85:40
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F43285848B62619D368BC6ADC289E9278
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3be249-70d6-3a84-9b5e-3fe025feafa3.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 1239
IP address blocks: 64.22.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 18:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:19:d3:68:bc:6a:dc:28:9e:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=41247ac0-c086-44ee-a4f1-ae3efbb846a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c4:ef:21:bd:b0:c0:45:5e:b9:b6:57:3d:a8:
3a:2f:29:1b:70:d9:0b:ef:be:9f:9d:2d:00:d1:f9:
b6:b3:c0:52:37:55:ec:22:38:b3:ae:e5:02:6d:32:
ad:c9:b1:82:63:d5:0f:81:30:ba:29:38:6c:dc:ca:
1e:01:16:a6:1f:0f:5a:da:92:ae:e0:84:11:e4:56:
4c:08:d9:98:38:ec:96:44:55:f3:75:8d:b3:3c:9d:
93:71:0a:60:0e:80:5a:7f:32:46:97:ec:5b:fe:6d:
a8:ab:0d:21:00:f0:89:81:c8:c2:40:01:cb:62:81:
d9:6e:c7:a5:1a:3d:3b:2e:a7:e4:9e:44:b0:b6:e7:
c9:0e:57:5d:b6:8e:4f:05:e1:8a:3b:98:19:3c:96:
8a:87:d6:7a:29:49:85:2b:1d:d3:82:0c:e2:6a:61:
1e:7c:44:be:92:ca:61:1f:6a:bf:f1:a7:48:40:a4:
4c:75:16:b4:03:ea:62:d7:65:27:3a:ac:07:32:70:
c3:90:6f:d8:6c:fd:80:21:af:02:b8:be:aa:ce:2f:
5c:cf:b3:11:b3:df:36:1c:12:64:65:32:a8:bb:67:
d3:01:4b:8a:9e:00:07:db:88:ab:ab:20:99:80:88:
4e:a0:53:20:81:78:9c:8a:c4:a8:5d:ce:7c:ab:89:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:5A:2F:D3:3A:D0:C7:FC:D2:55:F4:72:EB:F7:A4:B4:88:85:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3be249-70d6-3a84-9b5e-3fe025feafa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
64.22.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b3:06:96:8e:1f:29:06:c5:6e:f5:78:83:a0:1b:29:8c:0a:
df:e0:07:d2:b9:e9:bb:c5:83:23:26:fc:f4:97:4f:4a:81:fc:
26:36:c8:4b:31:e7:76:33:f8:6e:17:45:0e:26:28:7b:89:48:
50:08:5e:7a:b7:a2:ad:dc:ee:8d:7d:c6:41:6c:41:9e:ad:a7:
87:18:46:0e:98:96:74:a8:03:f3:f1:b7:dc:81:27:4d:eb:dc:
aa:3f:c3:8e:a6:d4:3a:be:2a:e1:41:69:e0:e2:da:58:8e:6f:
4d:fd:2a:f7:e0:25:41:6f:81:df:72:99:a0:c6:d2:3d:71:0a:
9b:25:23:e6:a2:e7:88:ce:44:de:5d:0f:7e:84:e5:30:57:1b:
bc:d4:01:8b:e1:0f:52:5b:c2:5d:87:99:4d:00:41:04:98:78:
9b:97:52:58:a7:3d:d8:98:ca:3e:be:fc:d1:55:14:a5:c8:4f:
7a:9f:74:9c:e6:92:eb:cc:b3:ae:3d:af:d6:20:e7:87:18:b4:
a1:ee:0a:f7:57:8d:65:4d:c8:cf:82:bc:16:af:90:8e:bf:8f:
45:65:00:3a:06:68:4a:dd:b7:f4:82:c9:f1:26:a2:46:12:47:
a0:f1:62:3a:6d:c7:b1:71:d6:a0:4f:e6:ec:9b:82:14:59:e3:
90:08:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:23 2025 by rpki-client