Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0afe3708-1e5f-36a3-b69d-fda3cc7987b3.roa
File: 0afe3708-1e5f-36a3-b69d-fda3cc7987b3.roa (raw, json)
Hash identifier: JCqguVAH71BrZJHZd9a2oY0/0e0gpIO06tPEMbPTydU=
Subject key identifier: 5D:5E:7C:03:00:28:21:E0:35:88:8A:94:15:73:14:70:ED:E7:15:A5
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849B3FF2EA8BFE0CED9B72ECA40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0afe3708-1e5f-36a3-b69d-fda3cc7987b3.roa
Signing time: Thu 01 May 2025 00:17:41 +0000
ROA not before: Thu 01 May 2025 00:17:41 +0000
ROA not after: Wed 30 Jul 2025 00:17:41 +0000
asID: 834
IP address blocks: 172.121.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 May 2025 22:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b3:ff:2e:a8:bf:e0:ce:d9:b7:2e:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 1 00:17:41 2025 GMT
Not After : Jul 30 00:17:41 2025 GMT
Subject: CN=8d786a32-9e84-46fa-922b-66a2a80a97f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:3e:bb:59:03:2e:ba:f4:23:4d:32:5d:0a:
d5:bc:2e:08:ce:40:4d:ad:ae:6c:3a:ad:8b:f6:b6:
6d:e0:d0:2f:ba:5a:23:01:c3:45:33:bf:35:5a:fd:
f8:df:39:16:74:41:00:30:5a:e5:01:01:98:2b:e4:
39:5f:5c:7c:10:b1:90:d7:56:fd:af:2b:8b:96:6b:
8b:a9:d3:37:41:d3:da:32:4e:dd:95:44:1f:eb:be:
78:52:5b:bd:5d:9e:1d:e3:f5:36:90:2e:50:62:ea:
45:cf:37:6e:11:d1:fc:f8:b9:de:35:23:5b:7a:47:
87:03:bb:a4:6e:4e:aa:36:2a:f0:70:2b:2a:01:0d:
f0:11:5e:3d:f7:c9:f0:84:44:d8:63:c5:69:3c:be:
65:3e:5c:75:53:e7:70:39:ca:b0:35:62:b5:5e:12:
97:58:74:c9:e2:36:ae:74:93:26:21:ea:0e:d7:08:
04:85:73:3a:0f:0e:3e:b1:87:a2:d7:47:2e:84:c5:
be:70:7e:46:44:b3:19:3a:3a:66:0a:8b:e2:d4:b0:
67:45:8f:7e:48:08:5b:a4:7f:a4:23:4c:c3:52:47:
be:d8:b9:a7:d7:c3:dd:a1:26:46:5c:3a:4c:c1:85:
18:0d:f2:1b:ae:a3:e8:4c:4b:69:5c:49:ae:09:f9:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5E:7C:03:00:28:21:E0:35:88:8A:94:15:73:14:70:ED:E7:15:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0afe3708-1e5f-36a3-b69d-fda3cc7987b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.121.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ef:4b:93:22:8d:50:d7:32:6d:00:ec:fa:1c:51:e7:21:cb:
48:b3:84:4f:5c:60:3a:ee:ae:f6:62:f4:37:56:9b:62:42:c0:
f9:7b:17:6c:77:67:bf:ff:c5:06:04:40:a6:c3:90:45:89:9b:
21:38:e4:9c:70:9b:13:79:a8:04:35:03:fc:24:d1:3c:22:42:
32:b2:f5:62:6a:0a:54:c6:b3:23:7c:7e:a2:09:bf:b7:a6:0d:
5e:a9:eb:16:f2:35:61:54:69:d9:9a:51:2d:90:ce:75:f9:ec:
18:80:74:4c:f0:df:d7:5e:af:e7:71:9f:ff:cf:e7:f3:63:84:
df:cb:42:7f:dc:d4:5e:c5:69:33:66:2e:fc:7c:6f:6d:b2:11:
1b:fa:d4:fe:b1:21:cd:eb:a4:79:d5:3e:ec:c4:dc:57:db:2b:
29:75:d9:cc:1b:97:b4:f6:7e:cd:c3:73:f3:a0:87:96:16:53:
02:a6:98:5a:2c:1b:fb:1f:4f:e7:f5:ba:ba:ba:82:9b:29:8a:
86:a7:8d:63:b6:7f:8d:dd:b6:0b:6f:f3:76:88:6f:42:b2:07:
2b:0f:31:b4:de:be:a2:8a:68:63:ad:ee:e6:4d:f4:cb:6c:58:
92:9a:f4:0a:09:13:f1:93:a3:09:d5:9f:7c:ca:69:82:b7:b3:
a9:f1:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:08:46 2025 by rpki-client