Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e06e43df-7f93-34f8-aefc-9ac760e598e3.roa
File: e06e43df-7f93-34f8-aefc-9ac760e598e3.roa (raw, json)
Hash identifier: rD5ApuJo62MHL3Pv3+asXUo5pFVBzVpZTlzKMA0ZKII=
Subject key identifier: 15:8E:F1:20:78:89:83:65:91:66:F1:78:32:86:9A:EA:73:B5:44:4E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584985D71E193EC0EFB6FD6BA480
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e06e43df-7f93-34f8-aefc-9ac760e598e3.roa
Signing time: Mon 14 Apr 2025 11:29:46 +0000
ROA not before: Mon 14 Apr 2025 11:29:46 +0000
ROA not after: Sun 13 Jul 2025 11:29:46 +0000
asID: 36352
IP address blocks: 206.123.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 13:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:85:d7:1e:19:3e:c0:ef:b6:fd:6b:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 14 11:29:46 2025 GMT
Not After : Jul 13 11:29:46 2025 GMT
Subject: CN=7f081a6e-6a59-46e8-ac8b-7c81fd9395b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:d8:2d:55:d9:2b:c5:3c:88:f5:41:4b:3e:
81:ad:75:27:64:f0:a0:dc:98:56:36:77:20:d7:90:
3a:55:7c:24:a5:97:fa:6a:58:26:df:30:e8:75:8e:
de:a4:05:92:a1:d0:10:77:78:e9:29:73:3b:b3:b5:
aa:fe:bb:b0:7b:aa:ac:5d:f8:7d:c8:23:5b:58:e7:
2b:da:ad:a8:08:5e:ec:ff:bd:88:5b:d8:ea:c3:e2:
38:e3:0c:9d:f7:cc:7f:1d:d8:1e:52:e4:9f:61:63:
c4:d0:b3:bf:11:84:50:24:72:45:00:d1:38:5f:51:
f7:71:29:74:64:2a:8c:9c:8a:41:03:14:f2:80:0b:
8e:19:65:fe:ac:96:11:25:6f:71:51:f3:b6:9f:96:
51:c1:b1:6c:c7:3b:71:b6:3e:cf:6c:75:85:79:bc:
bc:d6:74:c4:9b:09:62:af:55:bc:2c:6c:01:d6:4c:
d5:bc:84:c6:7f:cf:07:3d:fc:b3:16:1c:90:3c:69:
c0:39:35:ee:d4:04:61:87:21:e5:f4:8f:3b:cf:f4:
b1:ba:13:79:9e:42:ec:5b:c3:28:32:0f:a9:78:4a:
74:6a:03:3a:57:d9:54:df:65:d7:ef:a0:d3:25:e1:
45:a1:d9:43:04:8f:99:1f:11:6f:7e:4e:5e:b3:23:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:F1:20:78:89:83:65:91:66:F1:78:32:86:9A:EA:73:B5:44:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e06e43df-7f93-34f8-aefc-9ac760e598e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:28:8a:ab:e8:3a:ec:41:fe:bb:e2:92:c2:1b:e1:97:a5:28:
2c:0d:b9:76:ce:87:e5:ff:35:46:ae:dd:d5:1d:66:4f:1a:34:
d5:27:a6:67:34:60:e1:b0:7d:3a:0c:6d:42:3f:f2:c5:dd:56:
ae:7f:c0:96:eb:b4:0a:79:d4:6d:4d:5b:33:a8:9f:e3:76:57:
ff:0e:f1:5f:5e:bb:c7:56:5b:59:9a:2c:b8:76:b5:e0:6a:df:
a4:be:fa:77:2a:bc:56:bc:47:8a:cc:b1:aa:2c:b1:9b:2b:10:
c3:c3:e3:81:1e:cd:9e:13:99:65:38:75:37:75:db:69:fa:37:
3b:d5:07:40:d4:7a:d2:8b:56:6f:16:95:16:34:57:94:b5:2b:
55:d1:03:a7:b2:85:44:00:7e:39:1c:2e:96:2b:95:43:03:ad:
00:0b:6b:0f:03:79:30:2d:4a:3f:c6:23:8e:c9:4e:f9:63:04:
9e:a3:4b:07:30:4f:60:27:42:a7:6a:11:5b:d6:f7:fd:03:cd:
db:d9:f6:2b:26:f3:61:95:be:d9:66:d8:6f:9f:25:77:b2:96:
8f:67:5e:ab:ea:c5:34:d1:78:bf:58:b5:2b:da:6e:44:99:95:
6c:bf:b0:2d:65:c6:60:4c:52:58:93:b8:0e:8c:34:ea:bb:0b:
d5:a4:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:05:01 2025 by rpki-client