Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/0e9704e5-af01-30c9-8c13-9f14a6971ef2.roa
File: 0e9704e5-af01-30c9-8c13-9f14a6971ef2.roa (raw, json)
Hash identifier: mUWcCm3WLpILjRn3MTtbJK0t/ehkwUEtFixMIwa/DYA=
Subject key identifier: 51:65:24:AB:F8:4B:51:0D:13:93:14:C5:04:FD:88:EC:8B:F4:5C:87
Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b
Certificate serial: 010D0C9F43285849C39F9DFB199B70F615456400
Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/0e9704e5-af01-30c9-8c13-9f14a6971ef2.roa
Signing time: Tue 06 May 2025 14:38:04 +0000
ROA not before: Tue 06 May 2025 14:38:04 +0000
ROA not after: Mon 04 Aug 2025 14:38:04 +0000
asID: 7050
IP address blocks: 129.89.0.0/16 maxlen: 16
192.107.47.0/24 maxlen: 24
192.107.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c3:9f:9d:fb:19:9b:70:f6:15:45:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b
Validity
Not Before: May 6 14:38:04 2025 GMT
Not After : Aug 4 14:38:04 2025 GMT
Subject: CN=39bd034b-fa29-462d-b678-3bff53d7d50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:8c:50:27:11:af:9b:9a:c0:48:06:62:ee:
e1:8e:c6:b0:8c:cd:91:13:9a:69:31:dc:6d:7a:f7:
b8:85:03:f8:81:59:f9:4d:ca:45:53:1f:b8:6f:83:
92:c3:d6:38:ce:22:23:96:e9:e6:81:96:a8:b8:83:
36:38:45:1a:f4:d5:e2:68:72:7e:ec:50:ec:87:a4:
2e:53:89:04:a8:bd:cf:4e:f4:93:7b:ad:0e:8e:7f:
b6:e8:c5:e5:56:d3:37:fd:d2:0c:26:b7:12:27:7a:
6a:8d:8d:3a:91:df:e4:11:77:33:79:24:0c:b5:49:
1d:f7:34:85:81:e0:43:3a:1b:3d:ca:8b:8b:c8:a3:
a3:bb:37:50:7c:1d:71:15:49:aa:09:34:89:34:b1:
03:d2:e9:93:7f:9f:c9:96:8f:5c:1b:70:1c:b0:28:
f4:c7:3d:cf:a0:4f:d7:a0:49:69:e6:02:a0:d7:30:
fb:47:07:62:7a:83:f0:7c:f6:09:fc:1f:46:9b:05:
7e:30:44:96:23:af:71:8e:93:fe:96:b5:74:bb:58:
26:bd:64:39:50:bd:49:4f:e0:f9:34:15:da:1e:0a:
ed:56:e4:62:e6:36:e5:56:9f:62:34:70:91:9a:74:
2c:d8:c3:71:43:96:da:d8:67:1c:93:82:6d:5d:35:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:24:AB:F8:4B:51:0D:13:93:14:C5:04:FD:88:EC:8B:F4:5C:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/0e9704e5-af01-30c9-8c13-9f14a6971ef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl
X509v3 Authority Key Identifier:
keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer
sbgp-ipAddrBlock: critical
IPv4:
129.89.0.0/16
192.107.47.0/24
192.107.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:9a:5f:a9:be:43:11:40:bd:17:18:49:66:3c:16:e0:9f:f1:
41:2d:6a:bc:e3:15:0e:38:b8:3c:9b:4d:a0:26:a5:0d:b3:4b:
dd:2d:5f:83:39:8f:75:4c:1a:c3:01:16:43:4c:50:39:d6:3d:
ea:c0:39:38:2b:3b:19:c8:dd:ab:5a:16:f6:41:68:a6:c7:7d:
a7:64:9e:43:ff:4a:dc:43:9c:f0:24:16:63:42:70:ca:9a:d7:
27:d2:10:a1:f0:fa:a9:df:96:43:1e:a8:90:71:80:a3:d7:42:
46:42:d0:9d:06:cf:a6:e9:00:5c:23:fa:24:54:26:db:4a:76:
a8:ea:e3:37:cd:da:84:9c:90:56:d1:10:e8:7b:07:da:c8:82:
bc:0c:62:13:de:8e:22:e2:51:ef:15:f8:e8:26:7c:a9:6d:f8:
50:cb:50:54:e1:a9:d8:cc:96:88:a3:e5:df:2f:c7:84:ae:39:
cf:63:c3:ee:d3:a4:7d:c6:69:9d:70:41:1a:e3:74:85:16:78:
ef:70:96:04:ce:4b:de:87:18:d3:f1:f7:bb:0b:5a:21:58:d1:
bd:bf:b2:78:be:fd:67:84:4f:c2:5a:1b:91:66:f9:2d:ca:d8:
94:fc:24:08:c6:d5:7a:e4:74:97:ad:e1:d6:72:0f:16:76:1e:
43:77:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:05:03 2025 by rpki-client