Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa
File: 4012b844-3a80-373b-baff-3b6f69fb7a28.roa (raw, json)
Hash identifier: 4GFfYuOaSZsu31wXGu0CsQV4C9p+Ly9yYLyvgmjcTpI=
Subject key identifier: 24:C0:D0:78:9D:54:0D:FF:94:5F:B4:E6:FD:99:44:07:52:BE:3B:55
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849A4BA2EA5FD70BBE277D97F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa
Signing time: Fri 25 Apr 2025 13:01:00 +0000
ROA not before: Fri 25 Apr 2025 13:01:00 +0000
ROA not after: Thu 24 Jul 2025 13:01:00 +0000
asID: 30036
IP address blocks: 173.20.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 May 2025 12:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:a4:ba:2e:a5:fd:70:bb:e2:77:d9:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 25 13:01:00 2025 GMT
Not After : Jul 24 13:01:00 2025 GMT
Subject: CN=6b0d3d22-1ac7-4996-a1e5-5fce456a1086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:12:5b:af:33:72:04:e4:cf:78:02:6d:75:
5c:a5:e2:42:9f:7b:2f:f9:34:01:33:59:d2:db:98:
16:4a:74:78:a3:95:48:a6:ae:ca:49:9b:62:ec:30:
ec:69:cf:21:de:a1:28:2d:d5:89:7e:e1:c0:89:80:
4c:79:6e:ba:68:a5:a4:f4:0a:6c:61:53:f0:94:ba:
74:44:b9:4d:4c:3e:b2:75:fb:48:1f:a8:94:33:96:
3a:33:1e:51:8c:81:49:f7:14:eb:4f:44:4b:4a:24:
5a:cc:95:20:c2:53:c8:da:33:ea:dd:c1:10:3e:f5:
d6:83:47:b1:ac:d3:3e:ca:c4:04:e7:c5:fb:38:cd:
60:49:a3:f1:4c:ff:8b:7f:5a:a3:e3:38:57:b8:2e:
69:e1:c1:48:be:5c:c8:7d:5b:fb:03:7c:3d:80:f9:
4e:52:50:c2:23:aa:ba:89:55:05:81:e8:e6:d0:7d:
40:0e:7b:37:cf:91:f0:73:28:8d:44:21:77:e9:bf:
58:e1:2f:82:51:0f:c3:11:47:02:98:ac:c5:9c:06:
86:60:c3:81:cf:f0:51:70:a7:6c:e9:80:55:35:23:
ea:41:33:f9:92:5e:e6:e1:b5:8f:c3:b8:41:5c:54:
ab:c5:70:29:62:69:59:c2:4c:ae:b7:7e:df:71:76:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C0:D0:78:9D:54:0D:FF:94:5F:B4:E6:FD:99:44:07:52:BE:3B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4012b844-3a80-373b-baff-3b6f69fb7a28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:a2:00:6b:74:78:1e:7a:fa:26:60:22:33:53:14:fb:f1:88:
9c:fb:f2:7c:7c:3c:5f:d9:81:b6:ef:70:c2:ab:ad:db:53:30:
67:78:52:a3:42:61:6e:62:4a:8f:7d:e9:a2:b5:99:d8:b2:1a:
6f:45:67:a1:33:73:33:b0:e4:2b:96:12:b3:49:a2:43:28:1e:
12:87:11:91:7d:11:44:ed:26:1f:60:43:19:4f:6d:7e:89:bc:
c8:c1:93:63:55:06:98:89:20:a0:ad:5c:09:08:dd:db:db:12:
98:f2:ec:00:ff:9b:d3:a6:f0:96:f9:d0:cc:17:a3:b6:06:52:
ef:3e:ea:19:12:17:aa:80:45:d6:c2:17:d7:1c:93:4b:6e:3a:
dc:e5:51:67:73:38:7e:6c:07:94:16:c4:d4:d4:4b:8c:86:a6:
5e:f4:be:21:dd:c5:c6:8e:7a:b9:f9:55:fe:05:a7:92:4d:0f:
09:c3:39:5b:3b:e2:64:37:c1:1b:be:10:7a:4a:db:70:69:6f:
be:9d:82:87:7d:7f:33:fc:65:e6:b2:49:c9:27:66:40:73:03:
09:63:f5:0d:b2:4e:e9:d3:cd:b6:a7:57:b2:00:3a:3b:f6:f0:
4b:6e:d6:9f:3f:83:06:d6:4c:42:6f:07:68:0e:ab:ee:4f:b2:
98:e2:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:52:05 2025 by rpki-client