Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/124b5c14-55cd-3725-a899-a85b0d2c6d74.roa
File: 124b5c14-55cd-3725-a899-a85b0d2c6d74.roa (raw, json)
Hash identifier: ESIMCDMQ680i2tqPr/ACcc/Aq6DzkUoR0z+laI0yfiE=
Subject key identifier: 08:D3:4C:8C:22:5A:F7:9F:DA:B7:34:97:0F:8D:8B:AA:BD:79:67:3F
Certificate issuer: /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial: 010D0C9F43285848D97C707FEDDD94BA7E0C89C0
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/124b5c14-55cd-3725-a899-a85b0d2c6d74.roa
Signing time: Tue 11 Feb 2025 17:48:02 +0000
ROA not before: Tue 11 Feb 2025 17:48:02 +0000
ROA not after: Mon 12 May 2025 16:48:02 +0000
asID: 16509
IP address blocks: 165.140.58.0/24 maxlen: 24
165.140.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 16:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:7c:70:7f:ed:dd:94:ba:7e:0c:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Validity
Not Before: Feb 11 17:48:02 2025 GMT
Not After : May 12 16:48:02 2025 GMT
Subject: CN=120636da-ac9c-4a6e-9747-8024a4cc81e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:87:f2:d3:f1:f4:f6:40:aa:1b:68:88:ab:
5e:ad:d2:ac:e7:51:b4:ad:d6:45:c7:02:0c:31:0e:
6e:32:27:43:09:05:c0:e3:c8:b4:f4:d0:34:76:68:
22:01:48:13:af:68:e9:be:ce:6d:7c:52:b2:94:de:
ff:25:6b:82:97:87:39:14:d5:08:7b:9c:d2:8b:e5:
18:32:1c:3a:a1:72:f4:b3:92:98:34:44:6d:4a:e1:
f9:00:66:fb:84:5f:32:74:4f:43:45:66:bb:7a:d4:
62:06:16:0b:78:cb:f3:cc:1a:76:f5:fe:d6:46:32:
02:6a:9b:a3:62:5a:96:ff:e2:41:8d:70:06:80:20:
b1:f4:c4:39:04:30:f4:71:02:17:3d:01:5c:c5:67:
9a:56:65:4c:bb:28:3d:0a:72:e2:69:22:d0:df:1c:
c6:53:7b:e4:35:2f:c5:67:97:78:e2:e0:4d:e4:fc:
35:0e:52:57:5f:fe:b4:bf:6a:33:05:17:03:01:46:
c0:ac:e4:25:e6:6b:11:20:be:e6:22:15:5f:63:f1:
96:5d:fe:00:df:d5:ee:91:27:d6:f5:cc:3f:b4:1a:
1d:85:b1:61:b6:ea:0d:a1:11:c6:02:59:00:73:92:
3b:f6:37:78:b5:c1:50:77:35:f5:ca:6b:9d:5d:bb:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:4C:8C:22:5A:F7:9F:DA:B7:34:97:0F:8D:8B:AA:BD:79:67:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/124b5c14-55cd-3725-a899-a85b0d2c6d74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl
X509v3 Authority Key Identifier:
keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c4:0b:8e:d9:63:76:6b:89:d6:9b:cd:4d:2c:a8:fd:13:87:
77:9f:f8:dd:5e:78:9d:61:93:32:e4:29:af:91:68:32:be:45:
11:f0:7c:6d:5f:d0:29:f9:bf:2e:21:a9:d0:20:51:c7:c4:e0:
78:f9:59:ac:f6:7b:b8:1b:b6:c9:b4:13:d8:2f:36:e4:e4:89:
36:ac:92:bd:81:c9:05:93:a1:95:e0:75:1e:31:19:4d:11:28:
fb:c8:f9:36:86:f8:6b:85:bd:76:0e:dc:d4:79:11:57:8f:7d:
5c:cf:86:08:12:fe:d7:6d:03:68:1e:99:a2:e3:1c:fe:88:78:
1a:96:ee:54:09:8e:2a:a1:5e:fc:8e:53:1c:f7:68:e9:47:c3:
de:eb:22:61:9c:8f:ae:4e:50:32:6a:5c:0a:ee:b1:53:8a:03:
ab:9a:5b:d7:21:c9:af:87:78:d4:2d:52:a1:20:16:23:0f:54:
4d:9d:5c:37:ed:74:2b:7d:d2:f4:e0:94:77:62:67:8b:c4:0c:
d3:0d:46:46:fa:dd:50:77:18:1d:b3:f6:e2:22:88:7b:93:c6:
ff:6c:92:d8:1e:35:54:6e:69:b0:d2:03:19:6e:32:77:11:1b:
05:d3:24:1d:fd:c3:73:80:19:54:3c:78:15:06:7d:8d:02:9d:
fb:2b:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:13 2025 by rpki-client