Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3b83e691-795d-3f65-9523-eaf8bb55619e.roa
File: 3b83e691-795d-3f65-9523-eaf8bb55619e.roa (raw, json)
Hash identifier: kIgpOgeY6kqoTUcz+w0ZxMy1aC5BRDK8vr9JWCHOqRQ=
Subject key identifier: 36:22:C0:DD:01:36:51:C2:4C:89:81:6C:A9:A9:10:BB:26:82:0A:5A
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABCF92530086ADE1B7280
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3b83e691-795d-3f65-9523-eaf8bb55619e.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 208.53.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 15:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bc:f9:25:30:08:6a:de:1b:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=25bcc864-229d-4741-98c8-8fb2a990df14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:f5:87:71:41:d7:f2:ea:c1:e5:09:29:7d:
aa:53:71:6c:14:1e:c2:07:38:5f:a0:78:4f:1e:d2:
f4:af:a1:dc:f1:15:55:1c:18:e1:9d:b9:59:a8:f7:
07:39:2c:22:c3:36:6e:d4:2f:04:e4:bd:81:b3:e1:
5c:27:be:ee:2f:97:a3:a3:8f:72:b7:42:69:f0:f6:
65:af:12:91:cb:85:92:75:a0:3a:ba:95:89:d2:cb:
ea:ad:42:a7:23:06:95:76:ea:2f:53:ce:4f:f2:01:
d4:2e:8f:4e:30:68:dd:ff:6a:10:88:21:20:9a:fa:
fd:12:3f:4f:01:a3:c4:68:97:14:ad:b0:a8:9b:86:
29:89:80:9f:d4:7f:37:3a:26:f9:c8:6d:97:b8:49:
a1:e9:3b:f9:fb:ae:0c:fc:5b:80:ed:ed:95:f9:df:
09:b7:99:e5:16:2c:cd:41:63:7c:c7:51:2f:57:3e:
2d:73:8c:f0:e5:74:64:e4:2f:56:1b:68:e5:77:d8:
10:b2:d8:5b:08:b3:13:2d:bd:54:4a:08:4d:10:a6:
2c:22:73:0f:fe:a1:4e:77:2d:33:4e:f7:fe:07:b6:
09:b5:9b:60:2f:c2:db:aa:49:95:6b:1a:6c:66:92:
47:9e:c3:58:8f:da:5b:b2:8e:43:6c:26:b7:a9:61:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:C0:DD:01:36:51:C2:4C:89:81:6C:A9:A9:10:BB:26:82:0A:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3b83e691-795d-3f65-9523-eaf8bb55619e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:8f:3a:8d:4c:1f:eb:05:4e:87:be:fc:20:0b:72:5d:5c:7a:
b2:63:a0:ac:7e:a9:6b:2d:fb:a3:8b:dc:17:63:c4:59:90:a8:
62:8e:67:80:5b:d5:41:3c:c1:2f:1c:dc:e2:f0:99:81:20:a7:
81:bb:37:04:c8:2a:45:6a:9b:97:95:f2:f4:53:91:64:15:fb:
45:0b:0a:08:1d:90:bb:bb:b2:5e:ed:ff:ad:79:04:cc:d1:fa:
7e:9a:36:c0:f6:60:54:bc:47:cd:33:81:9f:3f:21:4e:cd:f9:
d9:b3:7d:5a:22:2d:06:73:94:07:98:df:e0:37:e4:7b:92:17:
3d:7c:52:35:ba:f8:97:7f:13:69:d0:b9:7f:f2:a5:77:0b:ae:
d0:2f:57:60:00:65:8d:91:dc:85:73:10:14:52:6a:68:9a:15:
74:ca:92:1a:f9:d2:78:5e:91:9a:a5:80:86:64:fd:9e:cf:6b:
0d:b2:21:a3:80:95:2d:b7:06:02:ce:a0:53:85:47:08:57:2b:
9d:2a:2e:36:d8:ab:cf:e5:19:51:00:5b:68:0c:89:7a:2f:5d:
6f:e8:f3:c9:9a:83:cc:09:1e:0b:c4:a1:c3:59:be:01:f7:30:
ee:48:04:4e:13:33:e1:1d:f6:fb:33:cc:bb:28:13:81:bc:ca:
65:c8:bb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:05 2025 by rpki-client