Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/b5f89945-27d0-3871-a676-50b0b3a572ee.roa
File: b5f89945-27d0-3871-a676-50b0b3a572ee.roa (raw, json)
Hash identifier: 6ninDI/fBlP7Ffx4GYhlcVy/mbQPg6P2wCgRPlF75wI=
Subject key identifier: C0:87:B8:4E:1E:B1:B3:BE:6C:73:1C:1F:50:0F:D4:1F:B8:1C:D3:27
Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e
Certificate serial: 010D0C9F4328584104D35801333300BEEF930E80
Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/b5f89945-27d0-3871-a676-50b0b3a572ee.roa
Signing time: Wed 22 Feb 2023 14:38:56 +0000
ROA not before: Wed 22 Feb 2023 14:38:56 +0000
ROA not after: Tue 27 May 2025 04:00:00 +0000
asID: 11758
IP address blocks: 204.29.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 16:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:04:d3:58:01:33:33:00:be:ef:93:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e
Validity
Not Before: Feb 22 14:38:56 2023 GMT
Not After : May 27 04:00:00 2025 GMT
Subject: CN=d72a2b4e-6624-444f-8e41-8114a1c5086c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6d:a3:05:fc:08:17:45:1d:2f:c5:15:7d:96:
6b:7e:b6:3b:45:1f:63:b1:05:4a:86:1b:27:79:92:
63:14:76:e4:16:01:57:8d:e7:46:e0:9a:79:50:b1:
8c:b9:5f:01:1c:16:9f:71:2f:c9:0d:7d:3b:36:65:
f4:be:36:fc:70:d9:e0:04:47:b6:eb:aa:81:5f:bb:
2f:ad:c9:0a:67:12:e5:c3:b1:65:d6:d3:90:b7:56:
e0:28:86:dc:bd:c6:85:df:23:b1:36:4a:ba:02:4c:
a9:f8:43:e8:44:43:da:b7:43:15:d6:df:4f:52:b7:
c8:4c:6f:a8:c2:87:fb:6a:76:50:49:80:a5:a2:af:
38:e5:6a:94:49:f3:69:70:da:aa:c2:02:51:30:58:
d2:1c:eb:7e:a0:09:cf:57:5b:19:ed:f0:b2:cd:03:
98:36:65:a1:64:53:43:cb:64:08:4d:e4:cc:96:47:
d3:a0:5a:04:9b:08:f6:d6:1a:a3:f1:a7:ad:80:ff:
1b:75:9c:4c:ab:55:b4:ea:04:72:30:1d:33:0b:90:
6c:5f:e1:32:c4:a6:e6:b2:bc:e9:cf:6a:2a:fc:b8:
20:1e:15:a8:2c:c1:15:c3:f0:89:be:3e:3e:28:d6:
18:70:06:d0:4d:40:22:d8:fd:3c:c5:3c:6c:8a:4d:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:87:B8:4E:1E:B1:B3:BE:6C:73:1C:1F:50:0F:D4:1F:B8:1C:D3:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/b5f89945-27d0-3871-a676-50b0b3a572ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl
X509v3 Authority Key Identifier:
keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.29.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:be:ea:2a:00:7d:58:1d:c1:e9:bd:47:85:46:63:a5:7b:fc:
cd:4c:eb:a3:ce:d0:c9:dc:c7:7c:a1:74:eb:f3:3b:d3:5e:7a:
b9:1b:93:f2:93:f4:0d:2f:33:1c:46:c9:cf:7d:c9:f8:4c:25:
e4:5b:a6:9a:16:78:54:55:3a:35:2b:36:2b:20:65:3e:25:b1:
29:78:ab:11:e8:bc:77:f2:72:61:22:ef:88:3a:10:8d:10:12:
51:58:a0:9a:86:4b:24:f4:be:d1:c9:d1:4f:eb:6c:19:cd:d3:
cc:18:27:7d:70:4c:84:90:f7:31:f0:7d:78:6a:57:ea:d0:b2:
e1:68:1c:58:ff:ee:18:33:20:71:21:17:e7:5a:62:18:a0:44:
66:2d:cd:35:68:60:48:ba:69:44:96:ec:f6:58:da:6f:7b:53:
c2:9c:f8:7d:ed:23:13:04:ef:9a:a4:a7:02:29:88:80:10:4e:
ba:1b:09:f8:3d:e8:f0:30:74:4a:1d:05:2d:da:91:e7:16:a4:
08:bc:82:5d:39:aa:b4:b8:0a:6f:00:ff:00:d3:6d:24:f8:23:
96:47:d6:ac:cc:a6:43:9f:97:07:98:43:63:e9:4f:89:99:b0:
ef:9f:7a:8c:3c:5d:70:15:bd:33:e9:8f:65:90:bd:c1:86:61:
8d:66:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:40:46 2025 by rpki-client