Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/20fe1212-ceac-34d6-abbc-fc5ea0bade8b.roa
File: 20fe1212-ceac-34d6-abbc-fc5ea0bade8b.roa (raw, json)
Hash identifier: +LmP/iEm5FkfqgCwamGfe9nC6wmuF5acBSffIYBlOHI=
Subject key identifier: 86:9D:09:81:30:D7:77:C7:B3:16:01:88:78:4D:64:CB:CE:D2:61:C0
Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb
Certificate serial: 010D0C9F43285849BDDA19BDB94AA0E6488339C0
Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/20fe1212-ceac-34d6-abbc-fc5ea0bade8b.roa
Signing time: Sun 04 May 2025 13:01:00 +0000
ROA not before: Sun 04 May 2025 13:01:00 +0000
ROA not after: Sat 02 Aug 2025 13:01:00 +0000
asID: 19684
IP address blocks: 23.174.152.0/24 maxlen: 24
23.174.153.0/24 maxlen: 24
162.254.224.0/21 maxlen: 24
2607:9540::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 May 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:bd:da:19:bd:b9:4a:a0:e6:48:83:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb
Validity
Not Before: May 4 13:01:00 2025 GMT
Not After : Aug 2 13:01:00 2025 GMT
Subject: CN=06241478-3e70-4f30-9177-52f4e5f8f628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:60:3b:07:01:bc:c8:eb:5e:3d:11:51:fb:
3d:d5:95:dd:90:8a:ae:db:cb:39:95:d0:cd:9a:93:
79:b5:7f:f7:c1:d1:a2:2d:e8:0c:2f:cd:e7:75:be:
f1:40:e2:c1:f0:2e:8d:f4:bd:08:64:e0:fa:34:ea:
3d:b2:79:04:8a:22:bd:fe:81:30:7e:d7:f2:c1:e7:
e9:d7:fb:bd:76:3c:88:18:bc:0f:65:08:e1:15:25:
25:eb:21:f6:4b:9e:a8:dd:b8:6b:8f:d5:dc:a2:a3:
d2:cc:26:41:09:6a:5d:3d:c8:d8:ba:6a:23:2a:96:
97:3a:54:4a:f4:0b:f8:a1:84:8b:4f:c1:72:76:15:
94:b6:fb:97:7b:df:d1:20:3a:e2:34:2b:77:d1:3a:
2e:93:f3:e8:24:df:d9:c9:dc:fa:c3:ee:0f:01:b9:
17:0e:7b:d1:7c:ba:62:b2:e7:60:64:a4:9f:0f:db:
9c:8e:f7:e6:ef:58:02:ff:54:48:c9:af:44:bb:bb:
84:87:1a:53:59:7f:8b:e8:2f:c9:6c:54:f0:f8:42:
b0:2a:54:29:2d:72:9a:35:a3:ad:59:76:f0:58:ad:
60:16:c3:e0:21:db:a5:4e:5c:e1:d6:8c:08:05:f0:
a8:7b:b9:14:80:46:df:f0:b8:a3:30:39:c8:db:b9:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:09:81:30:D7:77:C7:B3:16:01:88:78:4D:64:CB:CE:D2:61:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/20fe1212-ceac-34d6-abbc-fc5ea0bade8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl
X509v3 Authority Key Identifier:
keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.152.0/23
162.254.224.0/21
IPv6:
2607:9540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:74:bb:57:2f:84:be:31:5f:2b:b3:0e:c2:38:f1:ed:4f:ad:
74:23:a5:7d:27:23:13:ce:a7:f4:b5:4a:a3:a4:3f:78:21:6d:
1d:ee:91:91:a3:ff:1b:83:6e:0c:19:67:54:a1:c1:cd:49:5c:
e4:ef:28:b8:3d:0d:a6:0e:05:84:61:a4:9a:9b:e2:3e:4d:76:
b4:58:8d:63:7e:98:20:6d:9a:a6:fa:6a:de:31:64:eb:45:72:
bc:44:a3:6e:cd:23:b1:f9:84:14:90:c8:c0:1b:20:23:21:ba:
21:4a:9d:8f:f6:b8:cb:f6:20:dc:85:41:27:39:6a:83:d0:5e:
15:96:ce:6a:34:90:2b:a1:53:f5:e6:9b:a9:bb:95:fd:95:2d:
ba:b3:fa:5f:93:58:ac:9f:5c:55:b1:b6:0e:83:45:23:34:ad:
da:a5:77:f0:01:26:a6:22:fc:29:1c:04:3d:c3:e1:37:26:9e:
29:ac:8b:49:65:29:e1:da:26:b6:31:4d:6c:20:74:d6:49:63:
5e:cb:cd:7f:64:3e:1a:9a:30:c4:3e:aa:83:58:3d:c7:81:34:
04:ed:ea:a4:1f:6c:75:47:7c:1b:8e:0b:64:67:ce:32:08:20:
aa:66:f9:46:27:7a:02:18:bc:4e:15:83:c5:cc:9d:42:2c:dd:
3b:cd:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:00 2025 by rpki-client