Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29d6fddc-a4b3-39d6-bd62-5fe1e7b78c62.roa
File: 29d6fddc-a4b3-39d6-bd62-5fe1e7b78c62.roa (raw, json)
Hash identifier: E3hxTIWSk1glkh5gL7dU6sBIG8P9NI1wqbA45nEAkM4=
Subject key identifier: D3:51:01:C6:AC:E4:48:10:02:6A:49:F2:34:68:3B:CA:E0:5E:43:91
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858418BFA716FAFC69BCBB887D980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29d6fddc-a4b3-39d6-bd62-5fe1e7b78c62.roa
Signing time: Wed 12 Apr 2023 12:00:00 +0000
ROA not before: Wed 12 Apr 2023 12:00:00 +0000
ROA not after: Tue 15 Jul 2025 04:00:00 +0000
asID: 36040
IP address blocks: 34.126.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:8b:fa:71:6f:af:c6:9b:cb:b8:87:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 12 12:00:00 2023 GMT
Not After : Jul 15 04:00:00 2025 GMT
Subject: CN=ed717e02-8b59-4899-8ffb-163a8a7b4363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:eb:0d:2c:0d:d7:b4:b5:67:86:bd:60:d1:
b3:81:17:b2:6d:b8:48:b9:fe:03:9d:22:58:07:da:
6b:c2:e6:ac:0a:3d:55:72:b0:8f:97:5f:08:aa:43:
9b:62:83:f6:29:f5:88:6b:57:36:a0:7a:af:c0:4a:
f9:9f:da:72:54:f1:d3:e3:42:da:ad:13:e8:fb:98:
e8:d9:1c:d8:70:0b:95:3a:28:55:e4:ac:cd:bd:2c:
c3:f8:57:d3:c5:e2:62:95:b4:28:99:87:2a:b0:fb:
73:dd:13:d6:c7:2c:47:8b:c3:89:25:2a:8c:7f:3a:
f5:9d:80:00:8e:75:2c:78:aa:3d:4f:7c:91:77:66:
ce:fd:48:8c:6a:b0:e4:92:05:0b:ee:4b:d6:d7:a9:
0d:5b:4a:56:99:8c:74:67:ed:c4:72:73:b3:de:5a:
45:00:ac:6e:6f:fd:0d:b0:59:4e:a0:03:c7:be:56:
99:a9:e4:6b:a0:99:29:e6:e5:bd:70:1f:4e:bf:9a:
d7:c7:78:42:23:1e:1c:91:af:c3:dd:c8:84:69:9c:
78:31:d4:5c:41:5f:f4:ca:3f:3b:d4:ec:bc:98:cb:
9f:70:8a:be:e4:69:98:66:b7:5f:7b:91:27:e9:72:
13:38:8e:e0:e6:81:f8:ec:65:8b:7e:5c:83:94:7b:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:01:C6:AC:E4:48:10:02:6A:49:F2:34:68:3B:CA:E0:5E:43:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29d6fddc-a4b3-39d6-bd62-5fe1e7b78c62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.126.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:52:bf:4d:d2:00:c1:d5:6e:f9:96:ff:16:59:d0:86:f1:a9:
97:fa:6c:95:57:de:e9:d8:55:a9:4c:f1:cd:a0:62:9f:c0:ac:
aa:97:8a:83:c4:a0:e9:cf:9f:1d:6b:85:a1:b9:35:30:b4:1e:
c7:0c:b3:39:99:58:05:59:40:f2:ef:ac:6f:d1:6e:32:85:7d:
ba:e0:77:6a:eb:cf:df:0e:8c:c7:c7:11:fb:68:79:42:a2:7f:
ff:60:8e:ce:2c:f3:85:1f:40:49:7e:38:28:a2:84:a4:36:a6:
21:39:9d:83:57:bd:8d:55:b8:09:3d:ac:7a:4d:59:bd:3f:96:
3b:17:7a:6a:0f:41:a3:33:03:f1:f4:20:74:8b:0b:3c:e5:4a:
7b:6c:29:70:8b:5b:18:b6:f7:da:c2:d1:0c:bc:78:98:08:e1:
a9:83:f3:7f:ef:e1:1c:91:22:49:90:79:ba:74:e4:76:03:6a:
bc:b9:a1:6c:c4:e5:7a:8d:49:6e:59:f3:99:d9:49:be:a4:77:
58:2f:3d:ae:2b:1a:a1:03:cf:2c:b1:43:70:28:a3:69:45:5e:
03:08:5a:94:27:7a:07:61:5f:89:18:55:a6:f2:8f:53:c2:7a:
d6:d7:84:16:9d:f4:81:a7:fe:fd:3a:09:45:cb:42:3c:c5:17:
9b:d1:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:48 2025 by rpki-client