Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03fddab3-912d-3156-978a-a3831e41357b.roa
File: 03fddab3-912d-3156-978a-a3831e41357b.roa (raw, json)
Hash identifier: hnEV4THAs3RFoJjCnhqyEHQVq4yxNbsSlzFMIpqDQOQ=
Subject key identifier: 6D:58:E8:04:1D:32:68:F3:BA:B2:8B:3E:97:47:DD:8A:E8:14:AB:AB
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849B3DA67B53CAD1B9374DE5400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03fddab3-912d-3156-978a-a3831e41357b.roa
Signing time: Wed 30 Apr 2025 23:03:35 +0000
ROA not before: Wed 30 Apr 2025 23:03:35 +0000
ROA not after: Tue 29 Jul 2025 23:03:35 +0000
asID: 19905
IP address blocks: 173.22.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 20 May 2025 11:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b3:da:67:b5:3c:ad:1b:93:74:de:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 30 23:03:35 2025 GMT
Not After : Jul 29 23:03:35 2025 GMT
Subject: CN=49c7977b-5bfa-4759-b085-21f218231ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:7a:9a:f6:81:b5:aa:ca:6b:13:72:6b:7a:
57:d5:d6:57:42:52:63:2f:a7:39:25:dc:7b:c2:ec:
57:48:0d:32:4f:33:04:23:60:ab:2b:97:86:d9:ea:
1b:c8:b9:36:da:b1:6e:ae:3e:c5:32:81:f8:ee:a9:
29:92:68:45:ee:a3:3d:92:31:03:4e:8d:38:fb:cf:
97:06:34:30:83:d3:c8:8a:be:60:0c:83:33:d5:9e:
23:93:20:8a:ca:60:a0:06:57:3f:a2:7f:12:ec:1a:
74:da:d0:df:4a:22:0a:39:b3:05:21:34:91:bf:1e:
77:3e:4f:19:c0:31:ce:44:b3:42:4f:b3:0b:04:20:
2a:2e:20:98:2b:25:af:04:a6:cb:3b:d3:1f:56:25:
94:d9:80:d8:42:eb:a9:5a:75:e4:8e:73:2c:3b:88:
ac:e9:72:46:d0:75:ea:c2:20:0d:83:cf:05:9a:b1:
06:39:76:b8:97:47:9e:b8:e1:37:e6:1b:8b:0e:e7:
74:dc:a1:9d:8e:0f:63:11:30:35:b7:58:66:bb:16:
16:42:b6:5c:e7:b0:da:e2:c1:ac:85:02:6b:ba:0f:
e0:3f:41:9c:d7:d1:5e:9e:ce:b7:3b:1c:73:53:a0:
06:c4:64:ba:38:82:25:37:55:32:43:83:12:a5:61:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:E8:04:1D:32:68:F3:BA:B2:8B:3E:97:47:DD:8A:E8:14:AB:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03fddab3-912d-3156-978a-a3831e41357b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:6c:e5:4b:c4:bc:d4:73:07:98:07:3f:45:42:43:e5:09:15:
05:37:50:53:e2:54:95:87:78:44:dc:00:74:e6:83:c2:a0:ed:
aa:20:27:f8:6e:e6:f6:31:fc:4a:23:8b:2b:24:96:4e:ef:33:
cc:ff:27:0d:7c:f6:65:dd:bb:86:90:fe:a3:64:49:b9:7c:af:
6c:be:b2:a5:cb:98:7f:b8:60:08:0b:1b:93:25:ad:4d:ab:4a:
4b:20:57:cc:3c:44:00:6a:d0:33:60:46:8f:c3:62:05:7c:41:
ab:43:d0:04:e3:c5:53:2c:a2:f8:41:e6:8a:1a:13:e9:a5:f1:
06:58:57:bb:b6:98:45:1b:21:47:e4:5e:62:f1:05:b2:a7:a9:
86:38:4b:86:83:4d:c5:35:8b:61:93:3a:3d:3a:b9:8b:2f:0c:
68:16:d2:65:f1:df:f3:b1:b6:86:09:19:08:6c:56:da:40:ea:
86:ef:d8:07:a2:a3:74:33:b9:20:e8:66:e1:35:d2:ac:d6:8c:
d5:5e:b6:a9:d8:cb:7d:64:ea:7f:02:5b:d5:2e:3f:36:82:41:
6f:d4:8d:7f:0a:f8:03:94:3a:6c:b7:6b:08:26:f6:06:e5:66:
ef:c5:ae:a6:3c:67:96:5f:b6:1c:1d:26:38:dd:ad:cf:1d:22:
15:9e:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:31 2025 by rpki-client