Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa
File: d91bf0e9-627a-31e7-9857-da9afc43a642.roa (raw, json)
Hash identifier: E4N0dGQOkirp/JJiSfWzKl7nJ7iRQXBjTCCS7IN3evQ=
Subject key identifier: D9:AB:53:57:02:60:6D:61:DF:55:7D:E6:13:BC:12:9C:89:A3:4E:8C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849B57A33CB98546AD14915D880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa
Signing time: Thu 01 May 2025 13:00:58 +0000
ROA not before: Thu 01 May 2025 13:00:58 +0000
ROA not after: Wed 30 Jul 2025 13:00:58 +0000
asID: 204957
IP address blocks: 172.120.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 16:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:7a:33:cb:98:54:6a:d1:49:15:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 1 13:00:58 2025 GMT
Not After : Jul 30 13:00:58 2025 GMT
Subject: CN=2bf13e70-0376-49bb-8fde-ad14bc0473e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:80:a8:22:21:88:18:63:de:4f:d6:6f:98:
66:0f:0b:8b:ea:a8:6f:d7:a6:45:c0:dd:c9:f9:24:
09:e3:d0:95:ca:34:56:d8:a7:18:de:7a:56:0a:ba:
c4:82:a2:21:87:00:db:b8:6e:6f:4a:58:3a:1f:8b:
45:3b:e9:1c:92:a0:b4:09:94:45:30:68:45:5a:9e:
e3:6c:6d:5a:bb:d4:d4:2d:11:ee:73:9b:e8:4a:6d:
26:43:5e:43:18:4b:01:b2:42:43:d5:46:fb:21:3e:
35:9c:6d:e7:c9:c0:27:3a:27:4b:63:ff:65:d8:dc:
aa:d0:18:9a:90:45:43:6a:0a:2d:6b:f8:d2:57:70:
a3:35:ac:ce:14:76:17:90:44:b1:b6:b6:26:83:8e:
80:b9:a3:e7:5b:0f:14:75:69:1a:fa:6e:59:58:7e:
f1:ef:05:62:06:d5:87:01:16:7d:0f:3b:c4:d7:13:
32:75:df:8e:79:84:2f:e2:1f:f9:a4:96:98:70:97:
65:a9:2f:f2:07:50:8e:b2:b0:ae:c2:e0:4a:2e:ee:
4e:01:cb:06:d2:ce:dd:22:53:94:3f:ad:82:8a:b1:
e9:38:f0:c5:be:f9:8f:2b:4b:7d:b1:d9:48:65:8a:
f4:50:ac:d6:bb:b8:1a:f5:bf:3b:8e:c3:9c:3c:49:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:53:57:02:60:6D:61:DF:55:7D:E6:13:BC:12:9C:89:A3:4E:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d91bf0e9-627a-31e7-9857-da9afc43a642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:65:88:e9:b0:fb:f4:2a:91:53:0b:43:f3:14:ea:2e:87:67:
00:04:bd:3c:63:1c:08:01:3c:22:7a:01:c8:8a:07:f6:e6:a7:
81:60:f0:74:1a:0d:8b:9f:ed:6e:a1:91:91:c4:16:be:c7:ba:
ce:db:15:35:16:c8:3d:74:36:96:bb:10:1d:a0:56:03:2f:09:
ef:7e:f4:09:83:1f:b4:4a:a8:6e:9e:6e:3f:6c:0c:e5:af:d5:
88:c4:bd:48:e0:67:dd:96:20:06:14:82:8e:80:6c:d7:a8:07:
d6:15:1b:91:f0:4c:83:43:0a:b7:f2:6a:a7:a4:7f:14:71:aa:
a8:71:50:f9:0a:db:81:e8:c7:7a:95:dd:15:8f:3e:35:fd:60:
2a:ca:5c:aa:8b:01:91:a8:17:8f:65:da:e0:31:f5:78:4e:25:
d6:72:7f:93:27:34:01:17:c9:08:77:76:40:d8:05:a1:3b:6e:
35:ef:20:b5:3e:96:99:75:9d:d0:3a:f3:98:3c:71:69:20:94:
5a:ad:d8:cf:6e:66:e3:e8:c8:c9:a8:93:4a:a8:c9:41:1d:90:
c6:bf:91:a3:03:a6:71:96:48:79:46:6e:17:f5:c3:ee:37:89:
0f:70:95:cd:cf:39:20:1f:23:e1:bb:c6:f0:96:c9:4a:3c:63:
90:1f:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:55:56 2025 by rpki-client