Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbf4ac23-f72c-3e6f-8bba-c9307a4cce00.roa
File: dbf4ac23-f72c-3e6f-8bba-c9307a4cce00.roa (raw, json)
Hash identifier: 7F/JsSHllwAsb5jOPzim5WY7CvFL/L9uFiPY7995mTI=
Subject key identifier: 7D:32:EE:24:BA:DD:DB:22:37:F7:2C:B2:38:DB:15:F5:B4:BB:40:76
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858418718BA15CDF038923428D700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbf4ac23-f72c-3e6f-8bba-c9307a4cce00.roa
Signing time: Tue 11 Apr 2023 12:00:00 +0000
ROA not before: Tue 11 Apr 2023 12:00:00 +0000
ROA not after: Mon 14 Jul 2025 04:00:00 +0000
asID: 36040
IP address blocks: 34.104.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:87:18:ba:15:cd:f0:38:92:34:28:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 11 12:00:00 2023 GMT
Not After : Jul 14 04:00:00 2025 GMT
Subject: CN=d8d6fc35-cf37-40d7-85a7-7398d045b72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:32:97:48:98:0a:a5:08:d9:7f:9b:f9:b2:
13:dc:38:e5:dd:65:8d:e3:7a:b4:8d:c8:af:c0:ae:
f8:b3:8c:ab:d7:8d:e5:25:9c:b7:ec:01:2a:c8:58:
93:74:8e:2a:13:5f:81:71:64:98:e7:a1:49:4d:79:
d7:aa:33:0b:8c:a2:70:c4:64:fb:a3:f5:18:e8:ea:
7c:6f:1d:fc:b5:b9:20:44:b0:d4:6b:f5:a1:6a:57:
40:d8:90:01:97:d7:2a:eb:52:ed:d0:e7:5b:13:9b:
1b:5c:95:a2:b6:ed:67:d6:07:65:62:d9:54:3b:71:
5b:ad:0c:bb:2e:e1:ab:c7:b0:74:05:d0:55:59:e8:
36:9e:8d:59:02:96:69:fb:82:f5:f3:7c:37:fb:8e:
1c:26:97:7a:dd:08:47:d0:3d:1e:c5:9f:54:ca:b4:
75:45:9b:5e:42:74:6c:8c:e8:b0:5e:e1:13:c6:80:
39:5a:20:a7:d1:b7:79:b6:81:7f:f7:97:6b:d2:27:
85:bb:47:ac:3a:d2:17:2e:60:8a:fc:82:e6:ac:58:
fe:58:1c:c9:b7:dd:23:b0:1b:e3:4d:49:a6:37:30:
33:48:ce:98:80:46:19:a6:ee:13:ef:2a:0a:6e:48:
12:3d:a1:5e:5b:c1:18:7e:b4:0e:54:24:22:49:ce:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:EE:24:BA:DD:DB:22:37:F7:2C:B2:38:DB:15:F5:B4:BB:40:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbf4ac23-f72c-3e6f-8bba-c9307a4cce00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:48:17:6d:b1:99:e3:dd:23:f5:e9:5b:55:7a:fb:a4:84:13:
d8:8b:a6:e4:71:1f:11:73:ca:36:9c:76:44:42:7f:c8:26:94:
81:0f:e6:c1:c5:f5:c7:c6:03:ad:0e:ed:b3:00:a7:a6:ed:51:
eb:fa:b2:25:12:27:eb:6b:85:ea:f9:e8:2b:d6:7f:43:9f:e6:
fe:e1:11:14:3c:2d:31:a5:c4:b6:d9:09:c3:2b:08:37:20:a2:
85:3f:c0:69:7a:cf:90:d1:2f:b9:66:44:af:ef:f5:76:c8:05:
2f:7a:0e:37:f5:04:e7:a4:94:4c:45:d4:8d:e3:e4:88:79:8d:
e1:88:68:74:a7:4d:16:86:d0:2b:10:7f:cc:58:16:d2:c9:a3:
ce:9e:1a:6f:3b:8e:11:1e:9f:0d:48:ce:b3:41:95:83:6f:67:
a6:2f:77:13:c5:4e:8c:2a:00:11:08:81:58:ab:dd:30:5d:7d:
27:33:48:a1:d7:31:17:21:b8:7e:7d:22:78:19:e8:a2:8d:b6:
66:9a:23:e6:20:47:e4:f2:02:15:f4:22:3d:1d:0f:e5:da:53:
e4:11:3a:69:a4:c9:4c:c8:b2:aa:f5:a1:96:09:0d:f0:d5:2a:
ea:b9:1d:f2:b4:71:13:0f:b7:ff:37:76:eb:85:dd:aa:46:1f:
7f:94:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:20:48 2025 by rpki-client