Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/a9b1e396-2b7d-301f-b3c9-443b4aed5b8e.roa
File: a9b1e396-2b7d-301f-b3c9-443b4aed5b8e.roa (raw, json)
Hash identifier: DM1djSHhXaB4k7FarP85LWmgce+O4htGxwrdiv8PGIs=
Subject key identifier: CD:0D:06:76:52:44:F6:7E:49:F8:EE:D7:27:55:B1:72:0B:F6:47:F0
Certificate issuer: /CN=8b2c8fdb-4736-46fb-9328-319b0c9b78d0
Certificate serial: 010D0C9F43285848FC6F3CC3F52258057F9BD700
Authority key identifier: CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/a9b1e396-2b7d-301f-b3c9-443b4aed5b8e.roa
Signing time: Mon 24 Feb 2025 06:14:43 +0000
ROA not before: Mon 24 Feb 2025 06:14:43 +0000
ROA not after: Sun 25 May 2025 05:14:43 +0000
asID: 3356
IP address blocks: 23.133.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fc:6f:3c:c3:f5:22:58:05:7f:9b:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2c8fdb-4736-46fb-9328-319b0c9b78d0
Validity
Not Before: Feb 24 06:14:43 2025 GMT
Not After : May 25 05:14:43 2025 GMT
Subject: CN=bd1bd758-c9b4-44e3-ae2a-e76465c13924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:64:98:b4:e4:e6:72:95:8d:cf:f9:17:56:
2e:2c:6e:5b:7d:4c:a1:39:12:65:88:f4:5a:26:e7:
b0:ea:f2:b8:83:dc:2c:cb:4f:51:b1:88:3f:1a:89:
32:23:89:00:ee:9b:3c:a1:c8:cb:80:48:f8:4f:e5:
e5:8e:9e:dd:3b:e1:ff:4b:7f:ae:1a:9b:46:f7:62:
01:52:39:18:d0:78:b4:00:cf:4c:82:9b:a1:37:f2:
ed:96:60:91:f5:8d:36:6d:b6:6f:5f:85:4d:06:70:
6c:5d:d8:c7:90:0f:8a:8d:f0:b9:e2:ff:ad:2d:41:
93:e4:dc:70:f7:f3:fe:3e:a8:78:44:17:48:c1:4a:
8f:b1:d2:38:18:4b:f5:ca:e1:0c:55:fb:c5:ad:7b:
ac:86:92:e8:01:96:d6:81:e8:23:ec:ad:78:7e:06:
1e:44:ac:b7:d5:c9:52:62:dd:43:40:d6:26:10:15:
b5:c8:23:12:02:be:47:ab:c1:58:b0:0a:d6:4b:0e:
c9:91:f7:ae:f0:d4:de:93:78:98:c2:c1:c7:c1:28:
b7:a7:91:23:cd:73:c9:a2:85:32:c1:43:48:b1:56:
6f:e4:f9:71:b9:15:62:f4:50:61:ba:35:83:87:25:
3d:13:57:75:5f:60:ee:a9:1b:ce:a2:1a:3c:ea:55:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:06:76:52:44:F6:7E:49:F8:EE:D7:27:55:B1:72:0B:F6:47:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/a9b1e396-2b7d-301f-b3c9-443b4aed5b8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.crl
X509v3 Authority Key Identifier:
keyid:CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:09:f1:af:1c:ea:52:e0:25:d4:75:82:80:db:79:d8:53:5c:
08:6a:d3:06:d3:75:58:aa:61:88:c9:4f:53:c7:37:03:cc:c9:
7e:c3:6e:f4:23:42:37:33:ea:3e:1b:26:65:8d:7d:f4:72:b4:
b9:fd:1b:ba:66:a8:ac:da:ba:c8:ea:d9:3f:a5:66:5f:26:e6:
d2:fd:76:1b:32:09:25:73:b9:80:74:b8:1a:89:d0:20:a1:d4:
24:83:d2:19:10:f7:e8:12:6b:7a:07:a0:8b:df:56:04:30:35:
22:95:e6:40:46:cf:01:de:91:25:0a:a3:0d:b5:38:e2:ba:c0:
42:de:9b:1a:0d:a5:9d:1c:2b:cf:c0:2d:f0:37:41:b4:3b:0f:
08:1a:3a:1b:cf:18:d4:27:db:cc:3a:fc:22:ed:c1:12:bd:5a:
60:39:cc:72:c3:5c:8b:df:0c:fe:df:0d:48:99:e9:18:45:ba:
6c:89:0b:b6:53:2d:9b:4f:5b:16:5f:b5:77:53:b4:00:75:e8:
5d:f3:ee:85:65:84:a5:55:7d:05:1d:08:be:1c:21:63:6e:cc:
81:8c:aa:e9:2d:be:6f:9d:63:0e:ee:80:08:88:90:3c:c6:8f:
0e:f0:57:cd:4c:4e:21:95:af:f0:fb:70:e5:3d:cc:94:32:ca:
63:30:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:31:17 2025 by rpki-client