Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cc146ea9-36ea-3386-938c-75954c4282d0.roa
File: cc146ea9-36ea-3386-938c-75954c4282d0.roa (raw, json)
Hash identifier: VGwiWSSVbxwv4OI6tcs1vi7WNJYd/aahC0UgBOO2HM8=
Subject key identifier: FD:F2:5F:9F:62:25:1F:B4:DE:B1:F5:E5:52:A9:6C:36:0A:9D:58:75
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584971D5C97DAFA9418733EDADE0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cc146ea9-36ea-3386-938c-75954c4282d0.roa
Signing time: Mon 07 Apr 2025 07:30:55 +0000
ROA not before: Mon 07 Apr 2025 07:30:55 +0000
ROA not after: Sun 06 Jul 2025 07:30:55 +0000
asID: 208485
IP address blocks: 104.37.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 11:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:d5:c9:7d:af:a9:41:87:33:ed:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 7 07:30:55 2025 GMT
Not After : Jul 6 07:30:55 2025 GMT
Subject: CN=f8452c70-c0a3-4f05-b196-f7569cb7c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:ed:3b:41:4e:bf:cf:ba:b3:cb:c5:4b:88:
a1:4b:58:2a:cf:75:1d:3e:12:50:32:98:2e:c5:47:
d1:8a:02:d0:49:aa:4b:54:a5:fc:a1:4a:38:44:f0:
27:30:a1:b2:fb:f1:84:f9:62:6f:bd:52:0c:9b:3e:
35:86:d0:c0:b6:bd:8d:5c:14:da:2d:1c:f7:2d:7a:
3b:d0:c8:73:02:76:68:94:97:c8:d1:71:d5:9f:ba:
c3:ae:de:27:a4:5a:15:62:ee:1e:5a:14:06:a6:08:
86:b2:57:ec:be:f9:d4:a3:7f:46:af:ae:71:61:b1:
c4:41:36:35:ef:58:dc:b2:cc:31:d5:14:81:f9:68:
4f:b1:99:10:ab:0f:b5:14:f3:f3:fb:fc:c0:b5:07:
31:99:b8:89:8f:37:83:d5:ff:48:47:07:93:67:1c:
52:43:d6:dc:32:7e:3a:6a:9f:7b:29:df:04:72:40:
fa:6e:3f:5d:04:a0:d2:9e:61:39:44:41:25:d3:ab:
81:83:a2:d5:8c:1b:f0:4f:09:d5:91:43:62:e8:06:
41:76:b6:1c:22:55:bf:33:62:40:1d:10:01:c7:78:
b5:d2:f5:56:6b:4b:cf:d0:49:85:f6:54:f9:bf:f3:
01:4b:8a:e8:42:b8:d6:e3:42:ee:56:e8:e0:c3:e8:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F2:5F:9F:62:25:1F:B4:DE:B1:F5:E5:52:A9:6C:36:0A:9D:58:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cc146ea9-36ea-3386-938c-75954c4282d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:3f:6b:f2:68:44:e3:6b:07:63:a9:80:97:33:6c:ec:4c:61:
05:58:94:25:42:cc:48:40:01:bb:9e:eb:d8:8a:e8:66:42:0e:
ad:a9:a6:a2:4f:c6:d7:2b:e4:fe:36:b9:b7:28:f1:8c:0c:4e:
73:35:c8:89:6c:10:04:8e:e7:eb:86:8f:94:e9:9e:94:dd:b3:
00:3c:44:78:a7:61:a0:bb:c3:ce:99:c5:09:35:6b:d7:96:56:
40:7c:48:dd:d6:a3:1f:0e:8b:94:b2:a5:d0:51:c5:5c:a7:d7:
0d:5f:63:bc:fe:65:8c:6b:cd:62:7e:c3:51:02:18:2a:24:7e:
34:fd:1d:1c:53:73:7b:88:b2:ea:4e:5b:1e:05:4d:48:ea:a6:
ad:e5:3e:c7:58:13:a0:e0:3f:43:a1:0c:dd:8c:50:05:90:af:
2d:b9:f7:04:4e:b8:7a:1a:85:2b:78:e1:48:7f:8f:bb:2d:db:
e7:bb:7d:2f:1f:f9:0d:2f:58:de:b5:69:ed:ed:9c:19:a1:61:
0b:04:4d:7e:b2:9b:cf:b9:b0:74:a6:8a:83:1f:8c:78:d4:03:
d8:6f:35:c5:f2:0b:1c:06:ca:96:16:7d:09:88:2a:d4:f9:cb:
e6:01:94:30:90:b0:cd:4b:d0:54:cc:40:98:0e:b0:d4:5c:48:
4f:8d:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:15:58 2025 by rpki-client