Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa
File: 9e76a303-95a7-3d3b-a141-5197331f408a.roa (raw, json)
Hash identifier: 0VikrvNplxUeNAL35EcIh5GDZUcbgSM5JU+b+PkjqgQ=
Subject key identifier: CE:FC:14:14:50:9B:8A:87:A3:91:9F:E6:29:DE:08:6A:C2:59:15:E6
Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Certificate serial: 010D0C9F432858498769BA06DA044CE0748165E0
Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa
Signing time: Tue 15 Apr 2025 01:00:47 +0000
ROA not before: Tue 15 Apr 2025 01:00:47 +0000
ROA not after: Mon 14 Jul 2025 01:00:47 +0000
asID: 54686
IP address blocks: 23.128.124.0/24 maxlen: 24
2602:f9a0::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Jun 2025 19:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:87:69:ba:06:da:04:4c:e0:74:81:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Validity
Not Before: Apr 15 01:00:47 2025 GMT
Not After : Jul 14 01:00:47 2025 GMT
Subject: CN=e8ad6805-58f6-4622-9602-ab812f86b519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:d9:28:c9:ae:bf:e4:59:a0:13:59:37:2e:
6a:ee:ca:44:1b:8d:ba:65:e3:38:00:c1:01:de:ad:
15:d2:a2:52:55:e3:23:70:df:06:9d:21:12:8c:77:
9b:83:2c:19:08:3c:4a:88:fa:90:8b:ca:cc:0c:5b:
c7:9b:e1:b4:66:c8:85:03:ea:47:ed:bc:d8:17:f2:
70:a3:c6:f7:85:ac:e6:4a:b2:fe:7f:06:9a:15:e9:
74:4c:91:40:cd:d6:62:34:14:e6:f9:24:79:02:93:
d9:09:19:ce:ed:18:f8:59:ff:9e:44:00:a0:91:b8:
2b:68:f4:eb:b7:0f:11:4b:6a:b9:1d:2d:dd:10:90:
4c:98:23:18:d5:06:2a:ec:ab:05:39:b1:cc:a0:1b:
ef:ea:d1:47:c5:f7:51:12:56:db:b9:a2:6d:b5:52:
92:63:1d:8d:e7:81:0e:25:bb:98:f6:c4:9c:b1:0a:
f5:45:1b:59:39:54:9d:29:b2:84:09:4e:47:8b:0e:
02:84:97:01:c5:f3:38:d4:24:ff:35:6c:67:96:72:
a0:fb:6b:48:68:73:18:59:a0:45:ce:14:28:8e:dd:
73:bd:74:b5:59:d9:5d:6b:55:45:36:b2:2f:03:2b:
19:cd:87:03:57:d6:04:16:5b:6b:75:4b:d3:18:c3:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:14:14:50:9B:8A:87:A3:91:9F:E6:29:DE:08:6A:C2:59:15:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl
X509v3 Authority Key Identifier:
keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.124.0/24
IPv6:
2602:f9a0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:64:37:5d:f9:9c:70:e2:4a:b1:3c:16:ba:a1:1c:8c:44:3f:
14:20:18:82:09:b6:f1:1f:c4:db:6e:4d:dc:b4:8f:1d:5d:92:
19:98:93:70:cf:23:bb:0a:04:26:27:86:3f:33:55:90:9f:3b:
8c:5f:55:0b:94:34:60:cd:d7:70:d2:76:27:fa:8a:a1:52:36:
a3:0c:29:60:65:6e:e8:ff:1a:ed:eb:7c:05:74:be:7c:ba:fa:
da:30:bf:b2:5d:8c:f1:ab:9f:82:95:e2:54:8f:75:93:af:52:
8e:90:cf:bd:53:68:fe:e7:69:69:32:e5:8d:dd:8c:6f:75:0f:
d8:74:6a:7d:d5:db:38:00:fb:d6:38:22:46:b9:96:9d:19:ae:
5e:fc:a7:71:de:d7:f2:c3:5b:ea:c8:b1:12:ce:91:79:bf:dc:
b9:4b:6b:bf:47:2d:31:f1:64:68:03:f2:1a:e3:d1:34:ee:6a:
49:28:59:00:d2:da:dd:9c:00:da:e7:48:d4:45:6b:2b:d7:26:
0d:d6:57:8a:28:fc:6c:f5:f6:59:38:71:d0:60:ed:2f:ae:04:
28:f7:35:4a:47:98:b0:96:f6:3d:2b:d3:86:1c:b5:c6:bd:1d:
1b:cb:d5:63:10:27:9e:c9:72:7a:c4:e5:80:54:80:25:61:92:
2c:b0:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:16:19 2025 by rpki-client