Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/42b4953a-1a7a-34ae-b5ea-656744d4eab5.roa
File: 42b4953a-1a7a-34ae-b5ea-656744d4eab5.roa (raw, json)
Hash identifier: 83aOcA9aE5bc6609vTanaVbaHKVc+oHMxNE1TTYirX4=
Subject key identifier: 2C:26:26:47:D1:90:CE:BB:2A:D2:6D:E3:74:DB:30:5B:1C:EB:9D:AC
Certificate issuer: /CN=f7cd42e0-760c-4a8e-a7a9-074b638e2eb3
Certificate serial: 010D0C9F43285848A84E39F8C2165817D91BF3A4
Authority key identifier: D0:D2:E6:F9:77:29:A5:F6:34:8E:29:40:D7:09:EA:66:EC:E5:8E:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/42b4953a-1a7a-34ae-b5ea-656744d4eab5.roa
Signing time: Sat 25 Jan 2025 03:00:18 +0000
ROA not before: Sat 25 Jan 2025 03:00:18 +0000
ROA not after: Fri 25 Apr 2025 02:00:18 +0000
asID: 6939
IP address blocks: 96.9.98.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 29 Jan 2025 02:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:4e:39:f8:c2:16:58:17:d9:1b:f3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cd42e0-760c-4a8e-a7a9-074b638e2eb3
Validity
Not Before: Jan 25 03:00:18 2025 GMT
Not After : Apr 25 02:00:18 2025 GMT
Subject: CN=eb0f4480-cb4e-4066-a9da-76dbacf84f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:2c:9e:a8:b6:3a:33:79:c6:7f:41:17:0b:
3f:6c:e7:d8:9a:b3:12:5b:9d:18:8c:bc:d2:1c:06:
5b:08:4a:5c:15:3e:c7:3c:a3:ac:eb:4b:75:09:01:
33:a3:aa:d8:88:f0:55:2e:73:e1:f3:9c:49:2f:51:
8c:16:58:3c:65:b5:93:db:51:a3:88:37:0d:94:8b:
bd:15:0d:8d:9d:81:5f:52:8d:6c:8f:5d:a2:80:04:
07:6d:1e:91:c5:34:51:dc:b8:dc:ba:4a:df:a3:07:
cd:68:4c:86:7b:81:b7:83:87:5e:61:95:35:86:fd:
b8:88:2e:fa:28:80:07:99:aa:c5:3f:d1:73:36:44:
9d:ce:4c:eb:fe:44:ea:c7:38:c7:69:ea:19:cf:f0:
3b:e1:65:25:b6:fd:e8:3b:e7:8c:e0:53:b3:0d:b0:
92:2c:54:d3:d8:fa:35:e3:d8:f6:76:bd:a0:a2:66:
d9:3d:de:97:83:79:75:d1:f5:44:b0:18:67:2c:36:
9f:5a:da:7b:34:5f:af:dd:a6:7f:17:08:b9:41:21:
38:7b:65:99:01:62:48:4f:b1:9d:41:07:74:dd:b2:
2d:53:20:55:89:18:57:a0:37:6a:0d:6c:dc:fd:ef:
97:71:b2:74:81:fc:4b:25:a2:3f:44:c4:42:f1:03:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:26:47:D1:90:CE:BB:2A:D2:6D:E3:74:DB:30:5B:1C:EB:9D:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/42b4953a-1a7a-34ae-b5ea-656744d4eab5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.crl
X509v3 Authority Key Identifier:
keyid:D0:D2:E6:F9:77:29:A5:F6:34:8E:29:40:D7:09:EA:66:EC:E5:8E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer
sbgp-ipAddrBlock: critical
IPv4:
96.9.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:85:bd:ea:38:54:68:66:10:fe:09:27:46:69:76:a2:1d:d6:
bb:52:f0:da:53:88:b4:19:2a:4e:43:d4:2a:6d:0c:1c:9f:0e:
12:e6:0b:e9:8f:cc:f4:6f:c2:66:0c:e8:0c:96:d4:cc:20:bc:
7f:e0:b9:13:74:ee:1e:43:f6:6d:cf:ec:9d:51:fc:0d:0f:b7:
42:f7:aa:ee:48:f2:5a:62:f7:05:46:78:9a:38:72:66:08:6f:
16:30:1c:74:b2:38:49:a2:5d:1f:7a:43:8c:27:23:98:84:d1:
75:0b:48:fa:3b:6b:45:27:b4:31:28:d3:81:7a:e3:23:5e:ad:
8d:21:3f:b5:4c:ac:89:4d:ef:84:1b:eb:eb:d3:98:db:c7:c5:
7e:e7:9f:4a:e3:4a:71:81:0b:27:58:63:53:4c:bc:d8:04:d9:
c4:03:b9:84:55:47:b1:b0:de:ea:23:e6:99:b3:0c:e0:25:ce:
7f:7f:99:b8:75:6c:3c:df:ba:f2:67:24:9c:2a:7a:c2:aa:7e:
a7:cc:3c:26:51:c2:ca:c6:60:0a:14:dd:92:0a:f8:9e:5d:bd:
8b:02:bf:85:6f:89:4e:b1:51:fc:0a:b9:07:47:ba:e3:1c:de:
af:41:81:91:d2:71:9d:bb:15:9f:bd:44:8f:62:14:e2:a5:d8:
27:44:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:17:22 2025 by rpki-client