Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/698f250c-92d1-313c-bf9e-463acd8de79a.roa
File: 698f250c-92d1-313c-bf9e-463acd8de79a.roa (raw, json)
Hash identifier: uI58fY9CmkSBN7e//hnicj0Kqs4Lme1upqKRcoKczuQ=
Subject key identifier: A4:8A:DC:A5:9E:41:C8:F9:F1:B2:F4:51:88:E5:C3:86:2A:8D:5A:54
Certificate issuer: /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial: 010D0C9F432858498C7CA8CF95D652141E1EF860
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/698f250c-92d1-313c-bf9e-463acd8de79a.roa
Signing time: Wed 16 Apr 2025 20:38:10 +0000
ROA not before: Wed 16 Apr 2025 20:38:10 +0000
ROA not after: Tue 15 Jul 2025 20:38:10 +0000
asID: 14618
IP address blocks: 206.219.224.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 15:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8c:7c:a8:cf:95:d6:52:14:1e:1e:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Validity
Not Before: Apr 16 20:38:10 2025 GMT
Not After : Jul 15 20:38:10 2025 GMT
Subject: CN=05f0b612-d265-44ac-b422-ff67d5d65e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:e4:be:7d:86:1f:16:5a:08:4c:ee:f7:53:
b9:2e:26:1c:27:9b:dd:b6:d1:9d:77:86:25:25:a3:
df:7d:87:be:53:44:5e:4e:46:82:7e:01:7b:7b:a4:
aa:6c:e5:9e:c9:68:c1:01:31:b9:96:2b:4a:ab:c2:
d0:c9:f4:33:03:08:83:ed:d8:92:2f:34:d6:3b:81:
db:5a:1d:58:ed:a9:81:22:d3:23:a2:e7:44:09:6e:
69:2e:f1:ba:e1:6f:64:8e:a1:d5:b7:dc:0c:8f:ff:
19:49:1b:10:ee:fe:93:cb:d3:d0:68:c4:90:91:dc:
f1:cc:b1:40:08:81:f9:ef:18:d2:47:b8:9e:8e:5a:
64:80:fd:26:6e:e3:1b:72:3a:dd:f2:ca:9d:5f:a8:
7e:ab:82:59:ac:be:6e:41:d4:2d:9f:d0:5e:f2:f0:
a7:c3:cb:3f:32:a7:52:f2:43:fb:c0:3b:a3:ae:cd:
df:e2:0d:82:1b:de:15:fe:d3:69:f7:87:91:52:b3:
7a:33:1d:91:cb:3e:a9:be:1a:e6:ce:9c:8c:95:40:
5a:06:d8:a2:43:d9:fd:59:d6:70:9f:59:78:ed:f0:
47:83:6b:ee:28:fc:23:40:1b:ab:d3:ce:ff:92:ec:
36:1c:bb:77:b3:66:3e:d6:41:d3:d8:fc:23:14:cc:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:DC:A5:9E:41:C8:F9:F1:B2:F4:51:88:E5:C3:86:2A:8D:5A:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/698f250c-92d1-313c-bf9e-463acd8de79a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
X509v3 Authority Key Identifier:
keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.219.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d4:a3:3f:a6:82:fe:56:d0:fe:84:de:8e:96:2a:7e:e4:d1:
5e:7a:11:0d:58:78:f0:b0:54:b2:64:db:41:06:ef:a7:96:08:
bb:95:de:73:f6:b1:5d:d8:f7:8b:b2:c7:c9:a0:3e:b7:d9:ed:
f2:91:b1:33:b5:33:cb:dc:8f:ff:31:a8:b5:70:23:17:72:46:
80:7a:94:e4:40:83:3f:b6:9f:f1:df:e2:1b:56:e9:ad:5b:e3:
0c:ce:fd:9c:48:3d:b3:91:e5:89:2d:34:d2:d1:e3:96:8c:20:
c3:16:df:71:e8:8d:1d:f9:f9:08:17:ae:46:89:11:83:70:39:
5a:8b:c1:8b:22:38:33:70:ce:9e:33:ae:4e:87:c1:48:10:40:
1f:e6:cd:d1:06:26:fc:48:79:19:f5:a9:62:d5:e7:23:91:37:
0b:98:6e:5b:8f:48:89:72:95:c6:84:3a:0f:7e:07:b5:63:ed:
e4:07:06:18:9b:22:c4:cf:28:32:f5:91:90:52:1c:ca:d0:0d:
9f:22:9c:47:1b:b6:38:cd:74:65:d7:9d:e8:70:a0:ab:46:de:
40:04:32:e7:ac:dc:2e:b6:de:0a:1a:11:23:4f:3c:64:49:6b:
8d:67:d4:98:a2:88:9b:39:8a:ed:b6:cd:a7:14:38:38:46:1c:
d2:3e:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:54 2025 by rpki-client