Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ed2cf06e-0be1-4f41-94c6-fba3b18a21f3/cbfd3b7e-514e-3399-8e3e-4a0acab26f36.roa
File: cbfd3b7e-514e-3399-8e3e-4a0acab26f36.roa (raw, json)
Hash identifier: BDnXo+n9Q/6mcJAJO+OMvuXzIsV9alrnTwk9afOyCkA=
Subject key identifier: 6C:3B:5F:76:AC:95:4B:05:8B:91:FD:E6:C8:8C:FC:DE:4F:20:AC:D2
Certificate issuer: /CN=ed2cf06e-0be1-4f41-94c6-fba3b18a21f3
Certificate serial: 010D0C9F432858497C337183D855CB37B510FF00
Authority key identifier: 09:36:18:3F:2F:84:2C:AB:C9:79:04:C6:70:05:88:66:82:DF:12:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ed2cf06e-0be1-4f41-94c6-fba3b18a21f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ed2cf06e-0be1-4f41-94c6-fba3b18a21f3/cbfd3b7e-514e-3399-8e3e-4a0acab26f36.roa
Signing time: Fri 11 Apr 2025 00:37:43 +0000
ROA not before: Fri 11 Apr 2025 00:37:43 +0000
ROA not after: Thu 10 Jul 2025 00:37:43 +0000
asID: 401646
IP address blocks: 208.83.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 20:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:33:71:83:d8:55:cb:37:b5:10:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed2cf06e-0be1-4f41-94c6-fba3b18a21f3
Validity
Not Before: Apr 11 00:37:43 2025 GMT
Not After : Jul 10 00:37:43 2025 GMT
Subject: CN=0e723360-49ce-4876-91a3-86e6c4aed8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:60:54:bb:79:33:78:13:b4:13:43:e0:60:
0e:b0:c7:09:1c:31:b7:3c:fd:03:51:12:60:35:ea:
4b:64:1f:94:94:9f:7f:df:bc:37:ea:80:51:af:61:
95:30:46:6c:10:dd:16:da:49:ba:40:a4:b0:20:ee:
d0:82:cd:be:bb:63:c1:0e:38:c4:5d:34:43:f6:35:
26:2b:6f:39:e1:1a:f0:2a:91:19:96:1d:15:1a:f7:
8b:50:b0:a5:70:6b:86:c4:3d:26:dd:bd:a1:1b:dc:
2f:b2:3b:e1:c4:fd:79:36:d8:ff:30:b6:6b:4c:eb:
a5:3e:18:9f:9f:f6:20:a4:8c:ab:b1:f7:a1:78:1c:
39:ce:83:91:23:04:45:6c:67:10:23:49:d6:c2:72:
db:af:41:ab:00:41:49:a3:b6:7c:46:fc:65:68:31:
1e:31:b8:ae:d3:8b:32:ac:78:ce:e5:20:db:28:77:
6a:02:c0:1f:38:bf:97:9e:0b:04:f4:00:8d:7b:83:
bc:cd:1b:bd:9c:f6:42:7b:39:d5:de:e2:29:21:16:
66:e8:c5:24:89:ea:86:1d:19:e2:7b:a3:84:ce:a5:
2a:16:24:0c:44:14:10:6b:01:34:47:51:a7:b3:be:
69:ed:8e:97:81:2f:78:ed:74:cb:a5:0a:f3:d6:9e:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3B:5F:76:AC:95:4B:05:8B:91:FD:E6:C8:8C:FC:DE:4F:20:AC:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ed2cf06e-0be1-4f41-94c6-fba3b18a21f3/cbfd3b7e-514e-3399-8e3e-4a0acab26f36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ed2cf06e-0be1-4f41-94c6-fba3b18a21f3/ed2cf06e-0be1-4f41-94c6-fba3b18a21f3.crl
X509v3 Authority Key Identifier:
keyid:09:36:18:3F:2F:84:2C:AB:C9:79:04:C6:70:05:88:66:82:DF:12:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ed2cf06e-0be1-4f41-94c6-fba3b18a21f3.cer
sbgp-ipAddrBlock: critical
IPv4:
208.83.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:8b:4e:71:d8:de:d1:fe:3b:1c:b0:95:5a:d0:cd:35:c8:d4:
d4:22:c2:78:e9:20:8c:6b:f4:17:ae:79:f8:85:54:af:62:7e:
2a:ae:11:c6:8f:a6:10:0a:eb:e0:1c:03:c2:93:46:6c:d8:b6:
c5:2d:22:26:95:a6:2e:89:04:8e:7c:50:71:9a:7b:a2:8f:04:
69:42:52:64:e1:fc:29:52:ba:55:88:8d:1c:ca:ae:6f:0c:b1:
0b:d7:03:6b:33:96:4e:8b:ff:24:66:4a:18:e4:c2:aa:9d:53:
8c:38:2b:d5:88:fc:6e:13:20:d6:bb:3f:cb:50:ae:e8:06:3b:
01:9a:30:cd:92:e0:03:d7:0a:20:4d:ac:f4:a7:95:e8:90:17:
25:4f:9f:c8:ed:e4:75:8b:3b:35:23:07:f4:35:83:53:60:18:
0f:96:c1:ba:cb:1c:0f:26:de:56:e3:0c:db:59:03:6c:cc:3b:
10:d8:c9:4d:e7:37:9d:97:ba:37:d4:90:df:22:97:a9:02:7b:
16:44:42:ac:ab:56:79:fe:73:c3:32:7f:38:80:25:a3:68:f1:
20:fb:e4:73:f7:1d:b1:77:44:5b:b9:a6:b4:fe:c0:ae:5b:a9:
9b:45:f9:2e:7d:14:99:67:64:a6:04:b2:ae:88:61:5a:63:8a:
36:b7:16:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8M3GD2FXLN7UQ/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQyY2YwNmUtMGJlMS00ZjQxLTk0YzYtZmJhM2IxOGEy
MWYzMB4XDTI1MDQxMTAwMzc0M1oXDTI1MDcxMDAwMzc0M1owLzEtMCsGA1UEAxMk
MGU3MjMzNjAtNDljZS00ODc2LTkxYTMtODZlNmM0YWVkOGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NZgVLt5M3gTtBND4GAOsMcJHDG3PP0DURJg
NepLZB+UlJ9/37w36oBRr2GVMEZsEN0W2km6QKSwIO7Qgs2+u2PBDjjEXTRD9jUm
K2854RrwKpEZlh0VGveLULClcGuGxD0m3b2hG9wvsjvhxP15Ntj/MLZrTOulPhif
n/YgpIyrsfeheBw5zoORIwRFbGcQI0nWwnLbr0GrAEFJo7Z8RvxlaDEeMbiu04sy
rHjO5SDbKHdqAsAfOL+XngsE9ACNe4O8zRu9nPZCeznV3uIpIRZm6MUkieqGHRni
e6OEzqUqFiQMRBQQawE0R1Gns75p7Y6XgS947XTLpQrz1p7m1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGw7X3aslUsFi5H95siM/N5PIKzSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lZDJj
ZjA2ZS0wYmUxLTRmNDEtOTRjNi1mYmEzYjE4YTIxZjMvY2JmZDNiN2UtNTE0ZS0z
Mzk5LThlM2UtNGEwYWNhYjI2ZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWQyY2YwNmUtMGJlMS00ZjQxLTk0
YzYtZmJhM2IxOGEyMWYzL2VkMmNmMDZlLTBiZTEtNGY0MS05NGM2LWZiYTNiMThh
MjFmMy5jcmwwHwYDVR0jBBgwFoAUCTYYPy+ELKvJeQTGcAWIZoLfEsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lZDJjZjA2ZS0wYmUxLTRmNDEtOTRjNi1mYmEz
YjE4YTIxZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FNqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOLTnHY3tH+OxywlVrQzTXI1NQiwnjpIIxr9BeuefiFVK9ifiquEcaP
phAK6+AcA8KTRmzYtsUtIiaVpi6JBI58UHGae6KPBGlCUmTh/ClSulWIjRzKrm8M
sQvXA2szlk6L/yRmShjkwqqdU4w4K9WI/G4TINa7P8tQrugGOwGaMM2S4APXCiBN
rPSnleiQFyVPn8jt5HWLOzUjB/Q1g1NgGA+WwbrLHA8m3lbjDNtZA2zMOxDYyU3n
N52XujfUkN8il6kCexZEQqyrVnn+c8MyfziAJaNo8SD75HP3HbF3RFu5prT+wK5b
qZtF+S59FJlnZKYEsq6IYVpjija3FjQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:36:22 2025 by rpki-client