Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/840a2803-8706-33e8-b4e7-4892cd680cce.roa
File: 840a2803-8706-33e8-b4e7-4892cd680cce.roa (raw, json)
Hash identifier: mabT3ZDAukyMTVHf5B7oj291I3Y+av9xHNBcsMN57SE=
Subject key identifier: 46:DC:6C:7F:73:E9:DC:47:41:94:EB:5D:F9:62:CC:4A:C1:82:39:90
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E887E85A46B79CEB46140
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/840a2803-8706-33e8-b4e7-4892cd680cce.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 198.86.104.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 07 Apr 2025 16:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:88:7e:85:a4:6b:79:ce:b4:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=38381a72-d3bc-4b89-b7fa-a9d452ecdfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:03:37:8d:60:e0:af:00:47:3f:af:f4:16:
09:35:23:d5:b2:b3:e0:67:be:ef:d4:ef:be:3e:b1:
8a:3b:b2:f2:58:e1:43:00:6a:19:6c:9f:4f:09:3c:
b1:7a:ea:5f:52:64:10:fa:82:ec:39:70:be:4c:0b:
68:4a:6d:fa:56:bb:5a:a5:ea:8f:56:61:80:ba:91:
ab:a3:0a:f4:81:f1:48:6a:ab:b4:5e:1e:b0:c2:c0:
aa:49:fa:10:fc:fe:dc:b0:f3:54:04:da:2d:54:9b:
bd:30:e6:d1:d4:45:fc:76:26:a1:07:75:09:e4:a4:
ea:5a:5e:c1:b1:6a:c9:e9:10:02:21:0b:75:19:52:
e0:8d:0d:f4:f8:e3:82:c0:73:72:c8:85:0e:94:46:
e0:1d:4d:df:3a:a5:c1:a6:df:7c:bf:51:a7:53:18:
15:4a:c6:e7:c1:3c:86:7e:6d:de:fc:c8:28:f3:94:
61:63:ad:46:17:60:c3:20:4b:53:f3:37:1d:3e:1c:
f6:af:b4:66:9a:fc:e3:56:30:fa:0a:d1:52:c0:79:
13:33:20:99:0a:74:f7:2e:9a:41:18:ce:af:22:d0:
cd:43:fc:29:bb:62:49:1a:74:8c:48:f9:8a:a7:08:
af:b0:7c:c6:8b:d4:36:7f:3a:a0:1f:22:c3:14:89:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:6C:7F:73:E9:DC:47:41:94:EB:5D:F9:62:CC:4A:C1:82:39:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/840a2803-8706-33e8-b4e7-4892cd680cce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7d:c4:1f:db:83:f9:8e:39:b1:9e:a2:86:30:c7:83:70:79:
0c:da:a8:c9:cf:5c:88:ee:23:b3:c9:d5:17:74:07:8c:82:bd:
b5:1c:86:f5:33:3f:0a:5d:90:4f:f1:0d:47:81:16:07:6c:33:
47:e8:22:1a:b1:04:08:09:60:14:74:70:eb:82:f8:97:01:ba:
e2:1e:cf:28:bd:a4:a5:ce:a7:82:d7:8a:37:1a:69:b8:ed:ca:
a6:35:7b:15:8b:68:f5:58:a7:66:5a:6e:7d:43:5d:b8:b0:de:
7d:02:02:9d:38:27:94:a1:4e:db:18:da:35:40:2a:b7:96:7a:
2d:3d:e5:31:1d:bf:3b:41:e3:c8:71:b0:d5:5f:70:89:32:6a:
a5:d6:7c:8f:d9:52:97:97:4c:94:5f:d7:1c:5b:ce:91:db:0e:
a9:45:ee:b6:47:0c:c7:14:78:e6:de:e7:39:a5:d1:9b:6f:80:
37:e5:61:21:75:55:80:ff:01:f5:ff:de:f3:27:16:a5:09:01:
c6:91:a8:d5:37:a8:06:c6:c3:ce:89:6f:b7:f8:54:d7:42:d4:
2f:e2:b3:2b:8a:c6:c3:fc:da:4b:b4:8e:88:6e:82:2f:c3:7d:
fc:84:39:db:c1:99:34:11:d3:0b:2c:21:e9:dc:f3:79:da:25:
ab:25:ed:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:52 2025 by rpki-client