Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a82a1f0f-8a75-3987-8b07-8530e6cc5868.roa
File: a82a1f0f-8a75-3987-8b07-8530e6cc5868.roa (raw, json)
Hash identifier: 8hDtKG+YOP7YRYDdunnhfO9PPnESQ48pJLA41z7KUYI=
Subject key identifier: DD:80:A1:15:94:A4:61:B7:D7:63:8A:71:F8:18:F0:B1:CD:41:E4:81
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584A018C839079FE53F291E46380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a82a1f0f-8a75-3987-8b07-8530e6cc5868.roa
Signing time: Wed 28 May 2025 18:59:41 +0000
ROA not before: Wed 28 May 2025 18:59:41 +0000
ROA not after: Tue 26 Aug 2025 18:59:41 +0000
asID: 19905
IP address blocks: 173.23.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 02 Jun 2025 12:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:01:8c:83:90:79:fe:53:f2:91:e4:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 28 18:59:41 2025 GMT
Not After : Aug 26 18:59:41 2025 GMT
Subject: CN=7c459e36-d56c-4c05-a59e-3adeb4ca6947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:83:bc:f4:74:b1:f9:47:28:0f:c7:01:3d:
44:b1:12:33:ce:6e:8b:49:ca:12:01:34:fc:1d:69:
e6:fc:fd:77:fa:fc:8c:14:27:3f:cc:e7:81:7d:bf:
07:6a:1c:f8:44:3b:d1:36:56:1b:8a:a7:23:0b:9d:
5d:47:1b:8a:b1:c3:60:18:d0:ce:7f:85:39:ff:b2:
4f:49:4c:07:61:ff:c1:10:58:36:4e:02:a0:27:77:
1a:48:7c:a5:29:84:79:be:45:34:b9:30:4a:d2:bd:
20:33:f7:f0:0a:e6:c5:be:71:6f:63:8c:ea:0a:1b:
f5:e9:88:a9:22:a3:7a:86:95:8a:28:05:00:74:6b:
01:6c:e7:b5:ec:ac:02:c6:20:ad:3f:57:b1:53:5c:
5a:cc:5c:21:42:ba:33:c8:10:96:b6:a6:5a:e8:a1:
74:d2:b4:87:3e:5c:33:db:3c:ff:09:08:71:a5:b3:
46:b5:fb:3f:bb:e3:90:05:e8:0a:dc:2a:ee:d3:9c:
ff:49:c1:e0:ab:3e:18:66:e5:cc:90:04:42:cf:eb:
d2:53:9f:d7:43:f4:5b:91:e1:4a:04:1d:54:5c:15:
ca:cb:85:e6:1d:c8:58:2a:38:07:7c:21:56:e4:6a:
61:4a:66:74:3d:14:5b:3c:2a:f4:ef:9f:c3:19:07:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:80:A1:15:94:A4:61:B7:D7:63:8A:71:F8:18:F0:B1:CD:41:E4:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a82a1f0f-8a75-3987-8b07-8530e6cc5868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ea:1f:eb:c1:81:1a:37:6e:a5:6c:5a:1b:f0:fc:43:69:5b:
f8:98:fb:56:2b:09:35:46:c9:e0:cd:06:78:f9:00:59:85:5c:
5c:b6:1c:a1:c6:13:48:98:8c:cb:4f:12:90:fe:8e:cc:8f:03:
24:11:e0:fe:00:55:0f:55:0b:27:d6:8e:ff:cd:a7:f0:19:fb:
cb:ac:0e:92:b1:44:03:c1:1e:44:58:35:03:0c:db:5a:89:17:
51:a9:36:a7:b8:a5:8b:ee:7a:96:12:52:1a:7c:25:ff:ed:3c:
40:b1:1d:c9:a4:16:71:43:1a:bb:96:59:3e:12:7d:61:a8:02:
cb:e4:10:71:3c:8f:7e:2c:f5:8d:ce:5f:8a:42:d1:14:2d:cb:
6b:ba:4d:7e:15:39:f2:e6:b6:8b:a9:d8:ca:6d:7a:4f:31:20:
20:f3:81:05:05:c7:c2:d9:3c:cb:43:89:a1:0f:84:f4:3b:b5:
27:e3:8b:56:5d:3d:44:60:70:5a:e5:1a:78:bb:4b:30:d7:e6:
8d:c3:cb:52:7b:33:55:12:33:5b:92:0d:dc:33:4c:85:3f:58:
22:4f:51:87:00:4c:72:9f:6a:b3:8a:ab:b2:e2:1f:cc:31:c6:
56:ac:f3:5c:e0:1b:e7:06:c8:53:28:9a:a2:d8:25:22:87:f7:
fc:41:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:46:12 2025 by rpki-client