Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ff6961e-df17-3301-8461-a3db4a86ad37.roa
File: 1ff6961e-df17-3301-8461-a3db4a86ad37.roa (raw, json)
Hash identifier: Pm8Vr0GMV07VoNClOQ3RbYPjq17o7oBty/8OrwCdNH4=
Subject key identifier: 2D:7B:5A:A6:D9:FB:3F:CD:80:3F:0D:55:91:47:87:25:B9:B3:47:79
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849B0BDD7031211BD8838EAE200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ff6961e-df17-3301-8461-a3db4a86ad37.roa
Signing time: Tue 29 Apr 2025 20:18:36 +0000
ROA not before: Tue 29 Apr 2025 20:18:36 +0000
ROA not after: Mon 28 Jul 2025 20:18:36 +0000
asID: 19905
IP address blocks: 173.29.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 May 2025 12:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b0:bd:d7:03:12:11:bd:88:38:ea:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 29 20:18:36 2025 GMT
Not After : Jul 28 20:18:36 2025 GMT
Subject: CN=2a59bcb4-22c6-4b46-8dba-8172176a890a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9e:d9:6e:78:9d:00:e2:9e:dd:41:4e:17:ca:
17:ab:33:39:d3:0a:f4:aa:b9:89:cd:50:52:d1:de:
ee:55:36:8a:b8:d2:94:0e:61:a2:41:09:3e:1a:05:
36:ea:50:6f:c6:77:cf:be:00:78:d2:cb:a6:5d:9d:
e2:62:ff:91:ea:2f:fe:57:07:8f:5c:22:2a:ad:cb:
22:d2:1d:02:9d:64:5d:e4:ae:54:c1:64:f4:46:3a:
cd:66:4f:5a:cf:71:cd:6e:7b:0f:00:67:0a:4a:87:
a2:d8:6b:4e:b1:0f:02:f1:df:af:ce:b4:81:b1:a5:
db:5a:48:45:ff:01:42:5c:24:11:b6:fd:cb:3b:7b:
6e:b5:04:5a:05:0a:32:77:1f:55:93:b2:4a:a2:72:
4f:4a:a4:69:5b:c3:97:7e:bb:8c:9c:a5:a8:0f:3e:
ac:8f:1b:34:35:67:4b:9d:98:90:da:e9:1e:db:ba:
0e:37:3f:ba:39:4c:59:0a:88:3d:71:52:ef:bb:51:
93:3f:c5:e4:86:38:1f:05:67:82:fc:3b:cc:93:82:
cf:81:fa:ff:e0:57:5d:bf:37:c4:a2:13:ff:d0:4c:
1f:38:0b:49:36:be:2e:86:3f:91:87:42:53:e5:c6:
09:3e:05:24:5b:66:a3:39:30:cf:ae:97:dd:7a:0c:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:5A:A6:D9:FB:3F:CD:80:3F:0D:55:91:47:87:25:B9:B3:47:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ff6961e-df17-3301-8461-a3db4a86ad37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:3e:b5:32:16:eb:cb:df:33:8f:af:ca:3e:ba:c2:b7:08:c3:
a3:65:82:d0:30:0b:a7:9e:0b:e2:12:43:cd:9f:11:de:76:4a:
37:be:e8:39:3d:2b:32:69:85:61:ab:ce:f4:a5:20:d7:46:ea:
62:84:33:3d:c4:f7:b0:fb:6a:86:f2:1b:1b:0e:32:38:aa:53:
6d:54:67:e8:a2:91:e4:9f:88:e5:36:20:b7:d5:82:06:4d:32:
cf:0f:6f:22:0d:fb:a2:5d:b7:d7:00:25:89:b8:b6:00:68:15:
9d:94:3a:dd:ff:51:47:b9:73:18:1a:54:c8:6b:d8:80:81:5f:
40:c4:f0:4b:d2:f1:29:8b:69:aa:47:f4:20:79:d0:2b:b2:4e:
2f:74:42:3e:8f:47:21:ed:e4:f8:ae:58:a8:dc:40:2c:3a:6d:
7b:ca:c0:9d:18:05:60:ba:b2:47:49:47:dc:b0:e9:90:26:2f:
4c:f0:0d:06:84:69:f7:02:60:f9:3f:64:4b:16:f6:50:45:e3:
00:5e:51:84:95:bb:55:b2:58:32:0e:df:54:92:50:52:53:f3:
e9:c5:37:8a:c8:e0:bc:d6:b2:14:02:0c:c3:7a:f4:79:3b:0b:
9e:d4:7e:c3:b9:7c:3a:2e:c3:b5:3d:00:d8:a3:5e:0d:45:ee:
d2:fc:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:08:04 2025 by rpki-client