Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135323837.roa
File: 36392e3136362e3234302e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: xGtYotKgdT3gV8Vyrvtt37N0/WtMe+p9TJTyf9IJ9o8=
Subject key identifier: 31:24:9A:AF:9D:FB:53:BB:59:BF:AD:01:C7:CA:67:05:55:92:98:CF
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 05D60B78C56E5286E88D205E5BA06AA8592D1BB2
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135323837.roa
Signing time: Wed 18 Dec 2024 11:48:20 +0000
ROA not before: Wed 18 Dec 2024 11:43:20 +0000
ROA not after: Wed 17 Dec 2025 11:48:20 +0000
asID: 215287
IP address blocks: 69.166.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d6:0b:78:c5:6e:52:86:e8:8d:20:5e:5b:a0:6a:a8:59:2d:1b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 18 11:43:20 2024 GMT
Not After : Dec 17 11:48:20 2025 GMT
Subject: CN=31249AAF9DFB53BB59BFAD01C7CA6705559298CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:52:0c:65:d2:f8:44:d8:fd:48:fd:a3:4e:
3c:36:c1:8b:d8:11:c3:43:b8:b1:51:ad:da:25:fa:
7e:20:1c:f5:71:47:c9:c4:9b:5a:b8:1c:b5:c8:0d:
b0:71:5d:b7:d0:81:ce:96:6e:49:37:7a:a4:b1:1c:
aa:f1:f9:33:aa:42:ed:0a:2d:48:85:90:65:59:97:
78:54:44:75:53:20:3c:99:26:93:67:6e:12:9e:7e:
3c:c9:1a:27:13:ca:70:ba:7d:82:73:3a:46:35:64:
43:f0:d8:44:e2:81:83:8b:05:b4:7f:6b:42:0e:e2:
18:4a:db:5c:20:c7:c4:4a:c8:47:5a:9c:8b:6e:6b:
ea:ae:f5:13:18:a3:09:84:ce:5e:85:04:12:c6:54:
fa:ea:98:fe:20:ae:cb:0e:ba:43:e3:49:cc:08:4f:
71:43:4f:0b:e3:7e:cd:d5:1a:97:6b:fb:0f:4b:d3:
bf:b6:ef:f7:f3:53:ef:47:d7:75:96:cc:ec:11:fa:
63:eb:bf:3c:d4:88:ce:76:5f:1b:f7:b6:4c:ea:3a:
71:9f:17:08:a4:1a:f3:ba:91:04:36:76:7a:b8:2a:
dc:98:f3:a7:59:a2:d4:72:18:69:4a:1d:96:4c:66:
9d:74:7e:ce:2d:fc:82:a8:9b:6e:0f:97:7b:53:23:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:9A:AF:9D:FB:53:BB:59:BF:AD:01:C7:CA:67:05:55:92:98:CF
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.240.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b5:99:dc:ef:10:04:c4:77:54:31:03:b8:3a:79:d7:50:97:
09:48:4e:d0:28:3b:33:67:25:10:04:be:99:db:8d:ba:c7:90:
94:f8:e8:b1:f9:96:db:49:6f:dd:51:e3:f1:c4:44:a3:d8:d9:
28:d9:84:50:31:1e:bf:70:c7:d7:28:76:cc:d8:9a:00:d2:3c:
9b:40:8b:02:83:4a:ba:c8:70:39:b5:44:c2:37:bd:84:87:a5:
8e:17:06:1b:2a:21:9c:33:3b:5e:6e:b4:1f:b9:d1:d7:61:27:
53:fe:0f:95:6c:ff:22:e3:0f:2a:cb:fa:56:05:c2:c4:73:7e:
87:47:ca:a1:f9:6b:ae:f8:3c:c3:34:29:c4:a0:60:1f:21:78:
4a:0a:03:fd:0f:e9:cf:b2:3c:fa:27:23:0a:0d:7b:4a:7c:4b:
cd:d7:97:33:a0:d4:14:34:0f:37:45:4a:c6:cc:14:c1:45:eb:
26:83:1e:5f:7a:72:b0:e9:22:69:c6:43:72:c3:d3:fa:9f:ab:
5b:70:ed:42:65:a8:7f:95:09:de:58:a9:d6:a2:52:a1:59:a9:
9f:f6:da:15:c9:90:fc:60:91:11:e1:25:c3:72:14:ce:84:6f:
46:b5:06:6a:cd:74:bc:2d:db:68:b9:81:44:e4:c8:02:10:9f:
45:9d:53:85
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUBdYLeMVuUobojSBeW6BqqFktG7IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjQxMjE4MTE0MzIwWhcNMjUxMjE3MTE0ODIw
WjAzMTEwLwYDVQQDEygzMTI0OUFBRjlERkI1M0JCNTlCRkFEMDFDN0NBNjcwNTU1
OTI5OENGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAdSDGXS+ETY
/Uj9o048NsGL2BHDQ7ixUa3aJfp+IBz1cUfJxJtauBy1yA2wcV230IHOlm5JN3qk
sRyq8fkzqkLtCi1IhZBlWZd4VER1UyA8mSaTZ24Snn48yRonE8pwun2CczpGNWRD
8NhE4oGDiwW0f2tCDuIYSttcIMfESshHWpyLbmvqrvUTGKMJhM5ehQQSxlT66pj+
IK7LDrpD40nMCE9xQ08L437N1RqXa/sPS9O/tu/381PvR9d1lszsEfpj67881IjO
dl8b97ZM6jpxnxcIpBrzupEENnZ6uCrcmPOnWaLUchhpSh2WTGaddH7OLfyCqJtu
D5d7UyOJ1QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDEkmq+d+1O7Wb+tAcfKZwVV
kpjPMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzNDMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM1MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARabwMA0GCSqGSIb3DQEB
CwUAA4IBAQBHtZnc7xAExHdUMQO4OnnXUJcJSE7QKDszZyUQBL6Z2426x5CU+Oix
+ZbbSW/dUePxxESj2Nko2YRQMR6/cMfXKHbM2JoA0jybQIsCg0q6yHA5tUTCN72E
h6WOFwYbKiGcMztebrQfudHXYSdT/g+VbP8i4w8qy/pWBcLEc36HR8qh+Wuu+DzD
NCnEoGAfIXhKCgP9D+nPsjz6JyMKDXtKfEvN15czoNQUNA83RUrGzBTBResmgx5f
enKw6SJpxkNyw9P6n6tbcO1CZah/lQneWKnWolKhWamf9toVyZD8YJER4SXDchTO
hG9GtQZqzXS8LdtouYFE5MgCEJ9FnVOF
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:58:39 2025 by rpki-client