Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c198ecd4-c817-38cd-beca-3d190b96b9b2.roa
File: c198ecd4-c817-38cd-beca-3d190b96b9b2.roa (raw, json)
Hash identifier: XCUuvKzgnDpPu0xdxjuQAKMcGp1nMdCua6VHKa80pLw=
Subject key identifier: D2:60:96:84:A6:00:E4:8B:E3:94:19:D6:68:60:3A:9D:BA:CA:67:83
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F43285849C90293E808F076886EE2A000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c198ecd4-c817-38cd-beca-3d190b96b9b2.roa
Signing time: Thu 08 May 2025 12:56:30 +0000
ROA not before: Thu 08 May 2025 12:56:30 +0000
ROA not after: Wed 06 Aug 2025 12:56:30 +0000
asID: 215595
IP address blocks: 170.130.96.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 17:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c9:02:93:e8:08:f0:76:88:6e:e2:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: May 8 12:56:30 2025 GMT
Not After : Aug 6 12:56:30 2025 GMT
Subject: CN=6a04faa7-2bca-4dc7-8fde-d77e28c5d033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:28:1c:d7:d2:a0:a1:82:a6:ce:32:fb:12:
39:fb:36:cd:06:4f:d4:6d:10:69:e2:43:cb:4d:ba:
a7:2f:7e:49:bd:a7:7f:6e:4d:51:f9:e5:b7:fc:38:
fb:fb:c2:d2:3d:46:17:6c:99:bd:38:0f:ae:42:d2:
5f:de:38:2f:9a:18:54:ba:75:a7:d9:8d:a3:3c:b3:
11:d1:9c:9e:5f:9f:8c:96:33:a4:5b:9f:50:d6:3c:
51:58:30:be:53:ef:43:4a:70:14:e8:ea:02:e2:be:
30:f8:0b:d0:f3:b4:85:c7:bb:f5:99:68:90:2e:6e:
de:e2:9d:6b:73:e1:46:54:d8:cd:6d:34:cd:64:c5:
36:ef:4e:56:b6:18:1f:77:fc:ff:81:ae:5b:a0:33:
66:7d:6c:e1:6e:4f:55:11:54:49:2e:79:40:95:51:
0a:f0:cf:ef:de:9a:80:3f:40:34:48:f1:dd:e1:90:
1f:60:6f:6f:9c:dc:65:14:47:76:2a:b0:b9:6b:8a:
9e:bb:48:8a:4c:83:b6:68:08:73:ce:67:a4:a4:f9:
83:db:d3:ce:19:d4:22:e0:0c:3e:e1:85:44:59:4a:
d6:77:1f:70:9f:b7:54:d5:4d:e9:63:c3:37:27:ad:
08:ad:ce:67:43:c4:bf:06:c6:85:4b:07:f2:b6:54:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:96:84:A6:00:E4:8B:E3:94:19:D6:68:60:3A:9D:BA:CA:67:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c198ecd4-c817-38cd-beca-3d190b96b9b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
170.130.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:f1:be:b6:ad:0d:e2:53:d6:59:c6:4e:78:fc:ab:c0:8c:b1:
35:51:f5:6a:41:a4:8d:e9:17:80:c7:bc:22:42:57:2f:5a:b0:
80:34:15:91:03:5d:fb:22:3e:8e:1c:8b:2f:e5:00:02:6b:88:
32:27:90:55:a9:85:76:d0:fe:49:10:ce:bc:c7:f3:0b:95:c1:
e1:4e:61:d5:78:9f:b7:03:5e:76:6f:ab:26:f4:79:3e:e8:9d:
1d:d3:a7:c0:18:64:5d:e8:76:58:4c:6b:3a:43:da:42:ad:ee:
a1:2c:03:72:7e:29:d3:20:fa:e1:8c:85:b9:80:66:be:c0:15:
57:8c:07:99:2b:96:6d:d3:2b:93:99:4d:f0:3d:8b:52:a0:63:
aa:14:8a:e9:be:10:c5:74:24:4f:66:0a:aa:15:15:ae:ac:80:
31:f3:e4:e4:df:cd:2f:8d:18:f6:92:d8:0c:f7:b4:aa:a9:74:
3a:61:bd:e3:c9:1d:ef:a9:95:1b:58:8c:f6:b7:ba:79:28:7d:
37:bb:cf:a9:55:db:21:d5:22:59:7f:ca:28:6b:88:dc:91:10:
aa:07:27:b2:67:56:b4:59:37:15:07:76:b4:a4:5f:e3:4b:fa:
b7:9c:09:7b:0e:c6:e0:f6:ba:51:8c:2b:3f:c8:a2:29:c3:e4:
53:36:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:47:16 2025 by rpki-client