Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/8d5e7f98-b3aa-357e-9434-7516218951e0.roa
File: 8d5e7f98-b3aa-357e-9434-7516218951e0.roa (raw, json)
Hash identifier: Er78bzQRSG/gMX3GJi23EDWOMaIQVqA8cfkNAKxkoNs=
Subject key identifier: 55:1D:E4:00:1E:F1:25:92:89:53:C0:68:05:CF:4D:41:43:F4:0B:BD
Certificate issuer: /CN=e5a14f8e-0246-4348-b099-d30bc5afba9f
Certificate serial: 010D0C9F43285848C3EAB89D87CE002295026F00
Authority key identifier: BD:F7:0C:5B:43:16:14:25:87:D8:8E:C3:37:E9:E4:FE:D8:BC:2C:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/8d5e7f98-b3aa-357e-9434-7516218951e0.roa
Signing time: Tue 04 Feb 2025 00:22:27 +0000
ROA not before: Tue 04 Feb 2025 00:22:27 +0000
ROA not after: Sun 04 May 2025 23:22:27 +0000
asID: 6939
IP address blocks: 162.247.142.0/24 maxlen: 24
162.247.143.0/24 maxlen: 24
2605:f980:c001:3001::/64 maxlen: 64
Validation: Failed, certificate revoked on Tue 04 Feb 2025 00:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c3:ea:b8:9d:87:ce:00:22:95:02:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a14f8e-0246-4348-b099-d30bc5afba9f
Validity
Not Before: Feb 4 00:22:27 2025 GMT
Not After : May 4 23:22:27 2025 GMT
Subject: CN=56f5275d-6dd4-4f28-aab3-e2868307dca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:34:78:f4:32:51:0e:e7:ba:03:e9:32:b2:
39:82:94:c3:84:c8:e1:7d:55:6c:86:b0:b0:a6:f9:
73:90:a6:5a:61:55:09:ea:3a:4a:94:5d:41:d4:14:
80:34:d9:8f:56:f9:cf:19:1c:f9:d6:2a:1e:e6:22:
fc:ef:79:15:6f:41:27:06:a6:ef:1a:ea:a0:84:36:
cf:6b:28:a7:dc:79:6c:b1:72:00:4c:d4:a6:96:97:
af:b9:54:a3:41:5f:c2:a6:87:6e:91:bf:c1:d3:b8:
a3:77:9e:89:ef:5c:d4:f2:fb:f9:1a:6a:08:eb:63:
a4:60:05:bb:5c:5e:b4:31:0b:1e:a5:98:d6:9a:ea:
cc:df:e9:2a:d8:69:d3:93:ad:d7:e5:11:81:aa:40:
6d:15:c5:d2:8b:2a:a1:a1:46:81:a8:5b:4f:fb:7a:
62:e5:93:c0:8e:38:79:b6:6d:1f:f6:6c:06:f1:66:
93:c0:44:ff:8f:db:dd:3b:d6:b4:f1:df:3f:0f:22:
84:5f:59:74:33:92:d0:47:5d:dd:0a:fc:e3:22:39:
20:ff:38:49:93:64:9c:ce:01:66:a6:af:20:b2:cd:
71:29:9c:2d:03:de:ae:9e:a8:c0:2b:0c:cc:e3:ad:
ff:2c:d9:a2:d4:8f:ea:96:62:f3:83:e4:e1:46:d8:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1D:E4:00:1E:F1:25:92:89:53:C0:68:05:CF:4D:41:43:F4:0B:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/8d5e7f98-b3aa-357e-9434-7516218951e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/e5a14f8e-0246-4348-b099-d30bc5afba9f.crl
X509v3 Authority Key Identifier:
keyid:BD:F7:0C:5B:43:16:14:25:87:D8:8E:C3:37:E9:E4:FE:D8:BC:2C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.247.142.0/23
IPv6:
2605:f980:c001:3001::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:84:b8:ba:2d:04:0d:6a:a6:ed:43:68:cf:96:aa:51:86:2f:
ea:ad:4b:33:6b:08:32:08:24:68:ab:73:57:9d:7f:d8:9b:01:
a4:4a:63:3f:dd:1f:92:82:9e:3d:da:55:89:e6:69:6d:cb:b1:
ee:bc:af:4f:27:b3:ed:1e:99:f8:4a:9c:b0:05:aa:ee:68:f3:
ea:72:d5:14:3d:3c:d1:63:cd:59:b5:0c:45:57:a6:76:cd:ad:
f7:6a:f6:ab:58:95:68:51:d6:c5:df:80:71:1a:34:9a:3c:82:
9b:04:74:1f:cc:99:0b:95:99:ba:5e:0e:68:6e:c6:e0:a5:82:
35:a6:06:d8:44:5c:51:dd:a6:e0:b0:58:37:02:7a:96:4a:c8:
ac:d5:36:8d:c3:0e:19:53:59:7a:4b:08:84:e1:22:f0:96:71:
6b:ba:df:84:88:44:2f:f4:78:54:d8:db:0d:51:0c:66:7f:c0:
43:b0:b6:2a:3a:7f:23:6f:08:02:0a:44:4e:b7:3e:9c:2a:dd:
e9:43:db:72:f1:6d:d5:50:fb:82:5c:56:ca:3c:e6:b0:7f:96:
db:d7:b6:87:38:d0:57:0a:fc:7c:30:1a:e7:b4:5f:ad:d8:76:
fc:c5:b9:b8:cd:f2:1a:ea:eb:cc:01:b3:0c:28:07:d5:42:b0:
79:c0:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:55 2025 by rpki-client