
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8baf565f-0d5c-3399-9a8a-e3def9eef184.roa
File: 8baf565f-0d5c-3399-9a8a-e3def9eef184.roa (raw, json)
Hash identifier: P65g2F9VlELQ0pEG59ZI5d6vYFLku2Gam4vjPxhmpnA=
Subject key identifier: E9:F3:BC:9C:30:A0:A5:4A:B0:BB:78:5F:11:AE:01:19:A9:C5:10:A1
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858490CB16DA6DAF3BE8193CB2200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8baf565f-0d5c-3399-9a8a-e3def9eef184.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 212238
IP address blocks: 104.129.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 14:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6d:a6:da:f3:be:81:93:cb:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=c159855f-15bf-4898-8f3d-1e4e85362df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:b4:13:ec:e1:da:94:2a:c4:b1:4e:7d:ab:
b0:8f:38:82:7e:f3:ef:7f:01:20:cd:cc:14:55:47:
df:1c:b4:1f:9e:81:b5:b8:49:c8:40:ca:ee:6c:63:
6b:1f:37:ec:12:c6:e4:06:d7:3f:83:9c:f0:af:41:
66:9e:05:e2:4b:3e:ec:20:b5:0a:e4:a1:5a:82:d6:
64:f8:ab:ec:e4:81:27:a0:5a:28:6e:50:bd:dc:82:
3a:70:1b:78:16:34:5a:f7:f7:ae:b3:bc:55:13:22:
19:77:1d:1b:55:02:18:b7:b3:62:90:ef:00:b8:76:
8c:dd:38:78:df:dc:97:8e:87:6c:1e:26:04:21:21:
6b:31:01:26:9b:f1:73:6e:e9:2e:34:74:71:28:0b:
74:95:87:58:da:21:83:e2:7e:24:0d:39:d3:a4:28:
05:5c:12:ad:48:f8:7f:21:af:48:09:52:e6:dd:3b:
db:6b:92:37:89:1c:a2:95:1b:67:da:8e:f7:2b:d4:
03:39:3f:0c:fc:4a:a0:55:55:0d:15:44:a2:14:3a:
6a:f3:8e:e7:c6:77:38:5d:3c:5a:5b:25:d6:42:b6:
42:7f:df:4d:ba:de:bb:b1:cb:b0:fd:fa:18:9c:8a:
a2:7b:e9:76:d7:b7:47:91:c5:fd:f7:6a:9e:8a:b3:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:BC:9C:30:A0:A5:4A:B0:BB:78:5F:11:AE:01:19:A9:C5:10:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8baf565f-0d5c-3399-9a8a-e3def9eef184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
104.129.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:81:71:8c:9f:7f:9c:13:bf:2f:0e:6b:bf:21:5a:31:d7:df:
97:fb:5c:61:8b:e1:69:9b:fa:cc:c0:e3:90:f8:d7:29:5f:99:
b6:85:77:83:0c:b6:30:9b:71:c8:cc:74:eb:91:96:2b:2c:33:
52:75:d3:26:0b:6e:59:ee:2b:0a:80:cf:4d:73:a1:a5:56:a9:
91:04:88:cf:e2:a5:b6:29:66:4e:16:cb:b5:f6:27:f1:7d:d6:
e0:e7:62:23:7c:57:66:9d:69:d8:8a:5f:52:13:7f:d7:91:40:
95:a7:61:03:09:23:74:58:14:d1:a0:2b:69:d8:aa:0f:f4:5b:
2f:e8:49:46:95:bd:cf:ef:ce:56:bb:9a:6c:64:e9:8b:ad:07:
7a:e1:49:1f:82:d1:0c:fa:da:f1:89:10:83:52:86:74:00:0b:
5b:f0:ab:32:92:8e:f9:47:bc:4d:5b:d2:9e:ca:6c:95:6b:ec:
d8:82:49:e4:73:91:76:8e:9a:d2:f3:3f:0a:e0:23:90:ed:ad:
15:d0:af:23:25:ea:78:c8:80:0a:e7:ff:8f:aa:71:d1:25:76:
72:03:a7:a7:1b:7e:20:75:54:e0:b0:88:a6:be:c5:7f:7d:d7:
b3:85:3f:cc:cc:31:5e:ae:5c:ac:29:dc:1d:e7:0c:e1:e6:e6:
3e:f2:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:18:21 2025 by rpki-client