Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57e1cbf8-ec3e-3cd4-bca0-72899c4517b3.roa
File: 57e1cbf8-ec3e-3cd4-bca0-72899c4517b3.roa (raw, json)
Hash identifier: SRhD5Rs6/KlGsvGIxxEsmqiLh2+7gRozU6uNsVBGJ88=
Subject key identifier: F4:33:5C:78:96:1A:95:28:86:E5:91:B1:40:D3:A7:C6:85:3C:8C:4B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584909E69BFAF95582CE5D228F78
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57e1cbf8-ec3e-3cd4-bca0-72899c4517b3.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.68.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 12 Mar 2025 18:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:9b:fa:f9:55:82:ce:5d:22:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=5c08cde1-1efa-4e80-baf2-979f73c9c175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:49:1c:72:f9:06:34:ec:9e:c1:83:aa:4f:
cd:49:16:30:56:80:00:da:42:76:51:ca:d2:27:e9:
25:28:95:61:15:b7:89:bd:5e:fb:e4:88:c1:cb:0e:
a0:27:c0:3c:26:50:b3:55:c2:e5:d2:37:09:b2:07:
0a:13:bd:75:e0:5d:16:aa:e7:46:ef:d8:4e:39:75:
5a:4d:4d:b6:95:15:76:be:7a:24:2d:7f:ef:54:48:
12:d6:ab:c0:00:a3:48:95:06:02:8d:34:4e:d7:6f:
cc:66:66:cd:fa:64:4b:57:16:f8:0e:5c:09:b8:f3:
17:98:12:04:e6:e4:a4:02:cb:7f:21:4c:a5:4d:de:
1f:54:17:dc:6a:ce:b5:52:89:6a:3f:39:bc:b3:ed:
43:10:93:35:b0:e4:30:be:d6:8d:62:b5:16:c0:94:
97:11:32:a4:56:00:29:23:19:60:9b:56:20:6c:43:
cf:42:14:ef:e1:05:2f:ac:b2:4b:02:af:f3:9f:11:
2d:ef:a8:94:2c:c3:17:12:b2:c9:37:fe:86:51:5e:
e9:ee:d0:8f:48:f7:03:7f:43:c4:eb:cf:30:aa:28:
00:42:1b:f6:d9:8f:3b:79:14:d0:73:ef:0d:84:22:
8d:91:4e:21:8e:5d:1d:3a:ca:5c:4b:63:68:6b:87:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:5C:78:96:1A:95:28:86:E5:91:B1:40:D3:A7:C6:85:3C:8C:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57e1cbf8-ec3e-3cd4-bca0-72899c4517b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9a:55:db:19:bf:8a:63:fc:ba:2c:92:29:28:1f:05:e1:ad:
fb:2a:10:c4:58:60:aa:11:d0:5d:39:fc:ed:2c:f6:c5:d8:9a:
26:b6:f4:e5:5d:d5:b1:45:5f:ee:77:be:4e:3c:63:a9:d7:32:
c6:d8:b7:b7:37:62:eb:c2:5d:86:22:0a:61:60:cd:3d:2b:fa:
34:6c:16:b4:48:b6:b1:7f:af:cb:e0:a0:8c:8f:2a:da:2b:1b:
71:6a:13:e1:b3:d5:14:b3:c8:0e:4a:c2:9e:9c:60:9c:78:84:
8e:55:78:f8:ae:e4:71:ce:fc:36:04:00:d4:be:20:ed:32:ca:
77:70:2f:d5:7b:54:d2:03:96:53:2e:99:84:d2:8b:af:6f:a3:
b2:35:6d:66:69:33:d6:58:e0:53:c3:40:76:90:73:c9:43:0d:
44:21:46:d3:6b:c9:72:e2:c8:b6:21:b4:39:32:55:57:35:32:
34:e3:87:4a:c0:94:01:fe:49:39:3b:d9:01:18:a8:8e:df:40:
5d:5d:d2:ba:d3:5a:bc:cb:25:3c:ca:43:e9:cd:f3:f8:e0:ec:
cb:ad:a0:dc:fd:6b:a1:58:0a:ef:81:b2:71:17:5e:74:8a:cc:
e1:47:36:c4:90:55:cf:d2:37:cb:fc:73:f9:58:04:e5:b8:87:
74:5a:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:19:32 2025 by rpki-client