Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d41bb4dd-f3d0-3de4-a76d-74a182dd270e.roa
File: d41bb4dd-f3d0-3de4-a76d-74a182dd270e.roa (raw, json)
Hash identifier: 4gxQGkWkTk2tO4drtTbrznOB3+zAB/8Ye4dwFvr8U7c=
Subject key identifier: A8:B7:82:85:A4:C4:31:35:33:F6:C0:8C:00:88:D7:36:E3:42:34:7B
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F43285849DED3A1C95AF301131EE2D300
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d41bb4dd-f3d0-3de4-a76d-74a182dd270e.roa
Signing time: Fri 16 May 2025 08:29:41 +0000
ROA not before: Fri 16 May 2025 08:29:41 +0000
ROA not after: Thu 14 Aug 2025 08:29:41 +0000
asID: 0
IP address blocks: 169.145.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 01:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:de:d3:a1:c9:5a:f3:01:13:1e:e2:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: May 16 08:29:41 2025 GMT
Not After : Aug 14 08:29:41 2025 GMT
Subject: CN=b5b08d70-b650-4b76-8e7d-9440514abd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:83:a9:62:2f:7b:e8:a8:6b:12:26:3a:a5:
dc:96:8b:bd:f2:bd:c9:dc:32:60:78:4e:24:56:c6:
de:5a:8e:54:bf:ed:bf:61:18:d5:73:65:3c:64:dd:
e4:b3:f8:4f:fb:09:fb:04:90:c2:ab:a4:35:1b:1a:
03:37:89:48:84:36:05:f0:6c:7a:3e:fe:28:64:c6:
78:fb:13:fc:46:43:70:2f:ea:81:a5:06:c0:b1:a5:
5e:aa:fc:9e:f5:2d:98:2d:2e:22:03:e9:f9:ff:64:
57:67:0e:a1:58:60:b8:c1:a9:0f:cd:17:b0:bd:93:
70:5b:7a:bc:1a:34:24:bb:7f:6d:64:f9:ff:f5:3e:
88:f4:65:52:a1:a0:a0:b4:fe:82:16:7e:9c:98:bc:
71:9f:dc:0e:fc:b2:92:d7:52:af:3b:f7:51:5d:79:
b5:15:22:4f:a2:e2:e2:2a:6e:7d:eb:63:f6:b0:a7:
dc:dd:b0:89:7a:8f:a4:15:fe:b0:8e:df:05:1f:f0:
01:f4:5f:3c:be:ab:b6:aa:fa:59:19:b8:0f:90:5e:
a4:fe:d1:ad:e6:f4:9e:37:81:a2:b8:d2:38:66:de:
96:7e:a1:84:82:65:27:40:98:f2:1a:5c:16:21:9c:
34:dc:3e:de:50:3a:5f:7c:2d:c6:56:f4:80:db:11:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B7:82:85:A4:C4:31:35:33:F6:C0:8C:00:88:D7:36:E3:42:34:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d41bb4dd-f3d0-3de4-a76d-74a182dd270e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:23:83:fa:69:0b:cc:4c:6f:e2:20:84:04:04:88:d4:33:ad:
ae:11:94:eb:cf:8a:25:73:ae:fc:eb:e3:9c:4f:09:64:cc:88:
45:31:b6:3d:ed:97:94:a7:9b:19:77:3f:da:9c:67:a3:ea:52:
0f:a2:43:9a:17:18:28:55:94:2e:82:7c:11:d9:22:6f:bf:75:
b8:6a:da:3a:d5:4e:51:0b:eb:d4:e5:18:f3:f6:6a:d9:53:e7:
be:71:83:45:fe:9a:25:12:73:ab:9b:1d:41:75:f7:1a:db:e1:
c1:82:c2:2d:2c:30:08:13:18:d0:5d:92:2b:1f:c4:74:bf:46:
27:39:bc:7c:23:65:1d:d5:5b:fd:d2:e5:a3:ae:d4:c2:24:cb:
6e:a2:76:73:50:2c:17:66:a0:7c:2f:58:ab:ee:39:38:e5:a6:
a5:af:70:98:ff:c1:a3:cf:f7:ee:1a:24:be:b1:0a:65:8f:49:
42:f5:2f:54:c8:4c:86:48:09:b4:98:86:46:e4:f9:b5:22:16:
cc:91:3a:85:14:29:07:69:e6:73:3a:a9:8a:f0:03:ee:de:26:
bc:49:90:20:1e:13:1f:70:63:e0:f0:47:4f:50:eb:c4:32:62:
18:96:f5:7e:e5:9e:f0:ad:1d:23:94:68:90:55:22:2f:71:dc:
18:35:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:24:20 2025 by rpki-client