Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/24cadfb3-b75e-33d9-a2b6-0122dd0e932a.roa
File: 24cadfb3-b75e-33d9-a2b6-0122dd0e932a.roa (raw, json)
Hash identifier: vqZ1hKBCeslDl1nBLa5y2BioZHAvst+gQJh2oC43xyU=
Subject key identifier: E7:E5:56:61:6D:FB:A5:97:A4:E7:B1:C0:F5:7A:33:0E:A0:4C:84:3D
Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial: 010D0C9F43285848C8BB8B1FD18EC57A06EA2280
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/24cadfb3-b75e-33d9-a2b6-0122dd0e932a.roa
Signing time: Wed 05 Feb 2025 17:46:26 +0000
ROA not before: Wed 05 Feb 2025 17:46:26 +0000
ROA not after: Tue 06 May 2025 16:46:26 +0000
asID: 21928
IP address blocks: 204.235.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Feb 2025 18:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:bb:8b:1f:d1:8e:c5:7a:06:ea:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Validity
Not Before: Feb 5 17:46:26 2025 GMT
Not After : May 6 16:46:26 2025 GMT
Subject: CN=04d911d7-9344-4b7d-b805-3b0944613470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:92:e7:4c:fd:13:48:9e:b2:90:ca:53:9d:
93:b2:f9:90:da:20:29:40:ec:d9:1e:b9:cb:c1:25:
7b:b6:83:a1:2b:56:84:cd:d7:c5:91:f7:81:fa:86:
b3:fb:93:ab:56:86:33:81:bb:57:4b:2d:e0:c7:10:
37:14:dc:b9:24:6a:b6:8c:03:69:f7:d1:85:5a:f7:
8b:ab:88:4b:e5:85:66:ed:79:48:ac:2a:ce:04:ca:
11:c4:79:65:b6:9e:f5:53:4c:e2:2b:90:ad:14:24:
32:f5:a7:1f:44:0c:93:68:20:14:c7:53:b5:76:89:
f1:a5:ae:80:5a:8f:cd:7d:a2:c5:5f:60:84:32:08:
fc:7b:63:c9:79:8e:cf:5f:70:e7:52:1f:96:e6:35:
4e:a9:c2:94:28:42:c8:e1:fc:99:52:99:46:e3:c3:
fd:df:58:d0:c9:10:10:2d:f3:1e:65:70:d0:fe:4e:
53:53:06:d6:c6:6f:ba:9f:49:4b:15:77:ac:2d:23:
dd:4d:5b:e0:f1:0b:2d:42:2c:a3:7d:11:af:d9:7c:
b8:da:1e:02:b6:78:d6:95:f7:82:90:5d:60:0a:7d:
58:2f:5b:14:61:ff:cf:3f:88:c7:c8:d8:69:88:34:
ee:3d:5e:49:ed:47:73:b0:e4:93:50:54:18:8a:87:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:56:61:6D:FB:A5:97:A4:E7:B1:C0:F5:7A:33:0E:A0:4C:84:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/24cadfb3-b75e-33d9-a2b6-0122dd0e932a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
X509v3 Authority Key Identifier:
keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:95:30:e9:77:36:eb:5b:f8:45:98:97:80:40:ea:40:2d:3c:
a9:c5:d2:f6:c1:2f:1c:e6:1f:71:9d:a8:06:5d:84:81:85:38:
d1:cf:53:1a:b3:b5:99:a6:39:a1:f9:ce:dc:c3:59:c0:39:08:
0d:53:b0:2e:7a:bd:8f:51:2e:97:2f:77:de:09:1b:e9:4f:96:
de:df:5d:50:ec:42:e7:bc:e2:9d:18:2a:1b:59:07:2c:0f:ef:
f2:ed:a4:b9:b2:cf:72:a7:87:8b:20:f3:af:f1:64:db:d0:60:
96:60:17:bc:fc:ff:61:0d:c1:1a:a3:28:81:c1:43:44:73:0f:
9c:aa:09:af:2d:eb:06:11:1f:b1:8e:77:ec:a9:1b:09:65:85:
0a:5f:45:a5:fe:ce:fa:93:8e:e2:ff:96:e5:b6:69:54:09:2a:
36:28:4b:ef:33:e8:26:26:c7:1f:f6:0a:b3:c2:e4:e6:0d:ea:
c6:03:ce:44:3f:ab:7b:ee:bf:64:2d:76:b0:2c:4e:02:0c:54:
68:24:53:2d:ef:15:ff:1a:6d:7d:99:f7:05:94:17:59:1a:1d:
08:07:62:31:bd:67:7d:60:60:04:00:73:e6:0a:3f:90:b4:cc:
02:cb:9c:0e:7d:eb:30:d5:e6:12:7f:37:71:ca:84:9b:1c:f4:
42:b0:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:04:12 2025 by rpki-client