Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4bdcc037-5e8d-3816-aadd-fb4ed07614c2.roa
File: 4bdcc037-5e8d-3816-aadd-fb4ed07614c2.roa (raw, json)
Hash identifier: 7Z5u7pK6djEzmb9LgyLTVrtm+FcGAfaq7Ea/frIovN0=
Subject key identifier: D8:E8:75:14:7B:D2:80:49:E1:C1:41:C7:E1:E1:DF:EA:33:A3:B5:7C
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F43285849ED596658BE88FD21E17F6E80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4bdcc037-5e8d-3816-aadd-fb4ed07614c2.roa
Signing time: Wed 21 May 2025 13:20:32 +0000
ROA not before: Wed 21 May 2025 13:20:32 +0000
ROA not after: Tue 19 Aug 2025 13:20:32 +0000
asID: 3254
IP address blocks: 173.44.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 07:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ed:59:66:58:be:88:fd:21:e1:7f:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: May 21 13:20:32 2025 GMT
Not After : Aug 19 13:20:32 2025 GMT
Subject: CN=739c0f77-1e0c-47e8-a044-44961096f739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:9d:a8:4b:9e:c5:90:c7:6f:05:f6:a4:d3:
bf:74:75:6a:c3:4c:5a:78:25:d6:0f:e5:75:83:4c:
62:f8:35:b0:22:43:6b:b3:08:ba:59:4c:ee:1f:74:
27:dd:06:82:8e:59:7f:ea:a7:2d:5d:b2:e9:c4:55:
8b:c0:e0:55:0e:fe:3f:de:24:1c:70:ef:a8:7b:6d:
bb:53:a1:ae:eb:27:bc:50:c6:26:d0:2d:1e:25:da:
ed:84:8a:d2:57:6d:46:ef:00:f4:8e:d2:ed:52:d6:
3e:7f:3b:bb:41:d3:95:dd:15:f3:6c:8b:3f:2c:75:
5d:25:e5:82:b0:c4:14:25:d9:f5:9f:ce:88:38:8b:
7e:49:db:b6:71:52:b4:94:64:f3:35:87:79:5f:de:
f9:e7:93:87:c7:c4:38:61:b2:0c:b1:6f:18:63:5e:
45:af:40:94:51:b4:f2:c6:7e:4d:50:3a:fc:56:00:
15:a2:e1:5b:fb:76:2f:ad:37:50:f5:73:40:c8:0f:
8d:93:f7:ef:02:50:31:e3:44:8a:65:57:94:fe:87:
98:e3:dd:29:98:04:45:34:29:8c:93:35:9f:7b:ed:
94:f3:f4:97:77:60:3a:c3:0a:0f:9c:d3:15:07:c8:
3a:e3:d7:23:86:0e:73:46:80:b9:9f:cf:83:ee:5c:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E8:75:14:7B:D2:80:49:E1:C1:41:C7:E1:E1:DF:EA:33:A3:B5:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4bdcc037-5e8d-3816-aadd-fb4ed07614c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.44.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:67:be:9c:ec:83:c0:9d:02:9f:0a:e3:86:6c:00:65:67:05:
31:3c:cf:5c:4e:1b:03:1a:6a:68:f6:47:8f:85:02:d5:eb:44:
87:cc:d2:44:f6:8b:67:e4:d5:d1:df:17:96:5b:42:55:78:d6:
7f:0e:6e:08:bb:5d:55:80:69:93:33:34:7b:2d:13:ed:f9:18:
f1:14:ec:37:f6:95:8d:7b:36:85:5a:90:99:8a:3d:2b:c9:ff:
ff:0b:eb:01:ff:93:5c:d1:7f:80:d4:b0:a8:1f:9a:41:c9:c7:
11:6c:e1:3a:1c:74:95:e9:70:00:77:86:3d:80:54:75:8b:d0:
16:1d:d4:ce:15:dc:6f:b7:d9:4c:2a:06:c5:54:1c:8b:ae:2d:
95:39:f1:e9:29:6d:51:e5:66:11:de:15:a5:cd:dc:ea:ed:bf:
18:6f:3e:04:91:c7:ab:8b:3b:a4:93:b5:cb:d1:82:79:15:1b:
db:1a:fe:28:6c:a9:84:cf:5e:f2:ad:ec:c5:66:bb:69:52:ba:
cf:87:66:2e:5d:26:64:2b:17:e1:cc:aa:ad:68:3b:78:96:15:
cc:17:27:99:64:fe:d0:00:fc:d1:82:39:a5:b8:17:b4:63:bc:
db:08:6d:7b:8b:42:7e:70:ab:ac:ee:61:2c:d3:2d:ad:36:25:
4b:b1:58:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:10:29 2025 by rpki-client