Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddecb71c-c120-35ed-8ef1-59586d4edfd7.roa
File: ddecb71c-c120-35ed-8ef1-59586d4edfd7.roa (raw, json)
Hash identifier: FJUSz/HtH9Q34aPjp9ImHcgNFbFfivA/XarViOqH6mg=
Subject key identifier: F3:7A:75:BE:22:97:4B:E8:B1:79:9A:34:F2:5E:36:18:6A:93:34:03
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849B3634D546FD62C09FBB80600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddecb71c-c120-35ed-8ef1-59586d4edfd7.roa
Signing time: Wed 30 Apr 2025 19:03:36 +0000
ROA not before: Wed 30 Apr 2025 19:03:36 +0000
ROA not after: Tue 29 Jul 2025 19:03:36 +0000
asID: 19905
IP address blocks: 173.16.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 May 2025 12:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b3:63:4d:54:6f:d6:2c:09:fb:b8:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 30 19:03:36 2025 GMT
Not After : Jul 29 19:03:36 2025 GMT
Subject: CN=f8ebdcce-885b-42e5-9382-45951fd67628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a1:1f:50:87:1b:23:d3:b7:d1:44:dc:40:3d:
90:dc:6f:0a:df:9e:22:5e:a1:dc:32:03:31:f5:81:
00:7f:df:41:08:06:80:c9:73:3d:3e:9c:ea:5e:e6:
01:e3:d2:52:32:8d:26:7f:79:b9:0e:6a:0e:e9:f1:
02:93:f5:59:6e:ce:8f:25:91:aa:81:ff:53:5a:95:
75:25:82:03:ba:12:5d:3f:49:91:7d:6e:a1:a4:d7:
29:d7:04:6f:a4:f6:12:80:01:e8:a3:47:c6:fb:d2:
d4:0d:b3:d4:e6:84:93:85:7f:79:4c:aa:e0:cd:80:
00:e4:bc:ce:e7:d5:c0:f9:dd:49:9d:bf:6b:da:58:
a9:52:d9:77:f3:73:a3:e2:9a:1a:a2:cb:5f:07:81:
52:e8:c1:3f:92:b4:7a:b5:5d:99:b2:b1:ba:bb:19:
2b:9e:7f:0a:1c:6d:88:65:54:08:8f:c7:4f:ba:63:
78:58:0b:de:f3:c6:a3:7c:06:80:c2:3e:6c:c3:1e:
55:15:87:cc:6d:6f:80:e0:ad:f6:89:df:ff:5a:6d:
ac:5f:ee:88:29:f9:a9:a4:d2:30:38:49:e7:7c:d5:
dd:c2:5a:eb:b8:dc:37:ea:1e:e5:13:9e:f5:49:dc:
4c:ce:cb:f5:5d:a2:f8:7a:66:ee:46:31:77:1b:6d:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:75:BE:22:97:4B:E8:B1:79:9A:34:F2:5E:36:18:6A:93:34:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddecb71c-c120-35ed-8ef1-59586d4edfd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:38:ab:b2:0a:4f:bd:59:c0:7b:74:02:32:01:5c:43:b2:cd:
46:19:a7:7a:66:6b:c4:05:0a:87:82:69:c0:be:e4:08:0d:9b:
cf:97:bf:77:1a:d9:31:ca:54:2c:c8:e6:21:3d:0c:6e:1e:42:
39:74:85:0e:a9:30:1f:ca:71:24:dd:d5:ce:b0:d0:cf:1e:12:
d6:dc:e5:85:f7:42:7d:a8:30:61:5a:f3:fb:16:ff:64:ed:0e:
9d:67:29:8d:b9:e7:43:5d:c6:b7:39:91:c3:ea:d2:4c:0f:f3:
88:28:53:4a:1a:37:7f:b1:a0:7a:35:bd:35:4a:40:33:df:ff:
60:1d:88:2f:78:23:0a:0e:85:c9:ca:03:da:a7:8c:6a:75:f8:
64:5d:36:0c:ae:45:32:b0:46:26:a2:0c:bc:f5:5b:f8:37:dd:
12:ad:18:5a:58:4e:3c:ec:32:fe:e2:e1:ac:ab:7d:9b:75:2a:
ea:33:31:dd:5a:b3:83:2c:73:85:ff:7f:72:03:6a:5e:f1:95:
00:bd:bc:95:16:eb:a6:f4:5f:15:06:7f:63:1f:2f:02:88:2d:
25:0d:c1:8e:59:04:de:8a:e3:e8:b9:a1:50:93:a4:f5:33:1d:
56:98:5e:48:b0:75:ee:64:52:5f:3b:a2:b2:d6:30:a7:27:46:
ae:eb:83:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:15 2025 by rpki-client