Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/1d0023ed-dd7f-34b5-a0a5-5dba179052cc.roa
File: 1d0023ed-dd7f-34b5-a0a5-5dba179052cc.roa (raw, json)
Hash identifier: iX+wppWtrF/D7wYNmLJWpacgWUdHHTOIC62RnV/nqsI=
Subject key identifier: 66:AA:F2:7D:E4:3A:1C:8E:86:5C:67:67:FE:C8:B6:44:8B:7E:08:73
Certificate issuer: /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
Certificate serial: 010D0C9F432858495EF6834071BD542AC6F85A40
Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/1d0023ed-dd7f-34b5-a0a5-5dba179052cc.roa
Signing time: Mon 31 Mar 2025 13:16:30 +0000
ROA not before: Mon 31 Mar 2025 13:16:30 +0000
ROA not after: Sun 29 Jun 2025 13:16:30 +0000
asID: 14537
IP address blocks: 162.250.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:f6:83:40:71:bd:54:2a:c6:f8:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
Validity
Not Before: Mar 31 13:16:30 2025 GMT
Not After : Jun 29 13:16:30 2025 GMT
Subject: CN=2c0dd2a8-c708-492c-8b46-2a11de369c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:2a:2d:3b:e7:fe:ac:c3:93:96:62:38:1f:
51:3f:c3:84:43:7c:0f:df:0c:91:68:7d:46:fb:40:
bb:6e:ee:44:6d:04:f7:3a:98:bc:bd:ba:e2:12:01:
c4:a1:fe:ad:39:fc:f3:21:3f:d0:e4:10:49:f5:7b:
ac:94:69:7e:1f:ef:9f:e3:00:4c:4f:2c:ec:e1:cf:
1f:e8:cf:b1:6e:c5:c3:8e:b9:43:65:d2:1f:5f:2b:
a8:3c:98:be:06:02:d8:e3:ab:0f:af:c4:15:ab:99:
51:1b:9a:aa:f3:c7:7b:8e:e8:b5:79:2c:9f:c3:ee:
c8:f6:dc:58:15:16:df:a1:73:f7:16:84:12:a6:78:
ee:fa:24:76:44:3d:8d:d7:3b:d5:70:d5:8f:93:13:
75:c0:fa:a7:ea:c2:df:fd:68:85:45:2b:f0:1d:37:
45:07:a8:fa:06:a9:dc:9b:4c:b3:45:60:10:37:cb:
c1:3a:49:cb:51:40:ec:b1:b9:3e:80:ef:08:6c:50:
57:25:5d:35:c6:79:e1:b0:a4:d2:2a:24:20:cb:47:
00:21:26:cd:43:08:9b:fe:44:77:25:a1:e5:b0:bf:
e1:ba:35:4f:cb:33:88:c6:48:8e:18:bd:80:aa:0c:
2b:4a:59:4b:6d:1a:90:3a:3e:80:d0:dc:07:4b:54:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:F2:7D:E4:3A:1C:8E:86:5C:67:67:FE:C8:B6:44:8B:7E:08:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/1d0023ed-dd7f-34b5-a0a5-5dba179052cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl
X509v3 Authority Key Identifier:
keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
sbgp-ipAddrBlock: critical
IPv4:
162.250.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c2:3d:8f:1e:00:33:89:17:6c:1c:e9:03:27:90:90:67:e6:
11:45:cf:92:4c:a4:77:57:af:51:0e:23:ed:7f:ef:65:56:b6:
55:59:bf:7b:b8:95:26:1d:a4:d9:2f:4e:78:61:cf:db:11:69:
13:79:d1:a3:ef:ac:9d:e7:60:2c:e0:a2:f8:b0:c2:1a:7d:66:
2d:5c:40:47:b7:e9:fa:0b:01:83:c1:9e:52:88:a7:48:12:30:
76:01:27:ff:00:1c:ba:a3:33:85:17:05:25:81:ac:51:c9:99:
81:43:f7:01:a3:e7:b1:99:96:57:0d:75:37:a3:d9:89:ee:6e:
64:6f:41:95:7d:dd:b1:5c:e6:a7:a0:ff:b3:a1:9c:cd:e0:3a:
12:b3:bf:c9:df:cc:27:39:a8:47:ab:65:d5:a1:a6:4b:0f:96:
f5:ae:c8:6e:cb:aa:c0:79:7b:99:f1:1d:aa:a9:e2:86:67:33:
3a:f7:03:ef:b3:f2:4d:17:2e:96:41:8c:73:d7:90:9a:77:30:
2c:f8:3c:b7:47:25:e3:96:48:81:fd:48:6d:20:7c:16:53:94:
ea:99:96:25:48:4a:16:28:78:58:81:d8:19:76:c9:b7:17:3e:
07:18:da:5e:0d:14:57:c3:db:51:43:c4:91:df:5f:65:9c:eb:
38:dd:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:02:22 2025 by rpki-client