Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/3f7c7d92-236b-3540-971b-b0767cad79b1.roa
File: 3f7c7d92-236b-3540-971b-b0767cad79b1.roa (raw, json)
Hash identifier: 2dZzblYVsyWyhmghFwQ4hJfh+nBG3zbgF7A20IYe8JQ=
Subject key identifier: 99:9E:4D:0E:04:09:89:37:99:40:E3:34:E8:7D:78:EC:7A:3F:CC:43
Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801
Certificate serial: 010D0C9F43285849B07550D8964788B6EBB35200
Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/3f7c7d92-236b-3540-971b-b0767cad79b1.roa
Signing time: Tue 29 Apr 2025 17:52:28 +0000
ROA not before: Tue 29 Apr 2025 17:52:28 +0000
ROA not after: Mon 28 Jul 2025 17:52:28 +0000
asID: 397423
IP address blocks: 65.75.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 13:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b0:75:50:d8:96:47:88:b6:eb:b3:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801
Validity
Not Before: Apr 29 17:52:28 2025 GMT
Not After : Jul 28 17:52:28 2025 GMT
Subject: CN=a94ae7b3-782b-4669-844b-f16af6246bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:3e:84:e2:bd:90:11:45:cc:e6:fd:01:2f:
27:76:95:7e:35:6b:cb:e6:f5:2b:ed:c7:90:d3:89:
ec:53:51:1c:bb:1e:f8:0d:a9:47:13:39:17:7b:9b:
40:4a:03:1f:66:f7:40:1d:36:68:d8:56:25:5e:5b:
28:80:cd:62:74:8c:1b:bf:3d:13:af:c9:d5:ac:b1:
27:bc:7e:0d:7d:05:3f:d9:76:95:71:4f:e7:77:51:
13:56:ce:a4:4e:5a:96:6a:83:2d:6d:af:b5:cf:af:
9a:ce:08:e6:48:f3:04:03:a5:ab:2f:a2:1e:c5:5a:
d1:d1:da:15:a9:65:70:c0:f8:88:91:04:9f:2d:f1:
4e:22:b5:18:08:01:fd:4d:66:a8:15:39:ea:12:b1:
65:cf:3d:3c:0b:ad:46:b1:05:d2:d8:eb:7c:cf:c4:
99:74:49:5e:cf:17:25:fe:9b:4e:9d:61:a6:3d:49:
13:fe:5b:75:23:92:96:6a:cf:86:32:3f:29:53:3e:
13:40:84:1f:5c:64:28:00:27:4f:4a:b2:3c:d6:58:
eb:f0:2d:fa:8a:19:53:fe:b4:bc:9b:be:6f:ee:e4:
e7:ac:47:2b:c7:7f:fd:d7:f6:ea:7d:56:e1:97:2b:
ec:8b:c0:6e:5f:03:8f:06:3d:0a:ec:04:02:5d:ef:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:4D:0E:04:09:89:37:99:40:E3:34:E8:7D:78:EC:7A:3F:CC:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/3f7c7d92-236b-3540-971b-b0767cad79b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl
X509v3 Authority Key Identifier:
keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
sbgp-ipAddrBlock: critical
IPv4:
65.75.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:03:09:21:c9:f5:70:57:f7:b4:4e:e0:26:d7:15:96:bb:0a:
01:79:23:66:08:77:94:a1:a7:a1:36:e5:9a:dd:db:72:a3:f6:
80:57:f4:3d:55:9e:ef:d6:5b:84:83:9a:4f:94:bb:8b:11:ff:
82:21:ea:da:a2:e9:aa:df:df:60:cb:1f:a9:39:71:2e:dc:32:
96:4b:5e:ed:9e:ec:c2:90:f6:8a:bb:6e:8a:aa:7d:9e:fc:4d:
7d:dc:4e:c8:54:0d:00:b2:37:2d:0b:b0:bd:ee:06:2a:32:67:
56:3a:af:4e:a5:52:7b:ff:60:2b:82:09:f0:63:fd:0d:16:3b:
c2:7e:43:7e:c0:85:7e:80:b0:e4:b0:17:a8:df:70:5f:0a:d7:
e6:3c:1b:c9:88:34:d4:0f:66:18:67:e1:52:6e:c3:ed:28:5b:
44:b6:01:54:1f:4d:79:f4:a6:18:8f:52:d1:86:59:6d:db:4a:
3d:43:4a:d6:79:87:83:03:70:2e:19:b0:60:2e:f0:8f:0a:de:
9d:e4:ff:55:d0:57:01:b6:c4:e1:56:09:fb:3d:fe:5d:42:80:
fc:20:a9:b0:1e:35:cf:5d:ab:c1:fc:b7:72:ab:c6:01:54:03:
13:3d:d8:31:b1:6c:e4:24:11:ce:19:b2:6e:9a:b0:57:a5:b1:
76:7d:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:22:59 2025 by rpki-client