Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b838a63-291c-3021-8af3-d6cc411f0f95.roa
File: 0b838a63-291c-3021-8af3-d6cc411f0f95.roa (raw, json)
Hash identifier: uQaXtTO0Vxu6gfnGGRHUBwDGnoXLVKfCwFZTxiN5SZ8=
Subject key identifier: 4E:6A:45:CF:B4:98:A3:D5:3A:3B:37:BD:8E:A4:2C:68:CB:2B:2D:E5
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849DAA588F513378242E5564C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b838a63-291c-3021-8af3-d6cc411f0f95.roa
Signing time: Wed 14 May 2025 20:33:35 +0000
ROA not before: Wed 14 May 2025 20:33:35 +0000
ROA not after: Tue 12 Aug 2025 20:33:35 +0000
asID: 19905
IP address blocks: 173.20.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 May 2025 13:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:da:a5:88:f5:13:37:82:42:e5:56:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 14 20:33:35 2025 GMT
Not After : Aug 12 20:33:35 2025 GMT
Subject: CN=1624d3c1-0303-4bcb-9428-6830d3f1e535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5e:e6:d5:b4:62:57:61:1a:7c:4f:e7:04:c9:
bf:8c:c5:5e:e4:ef:04:dd:8a:79:e4:c1:41:4d:b2:
49:1d:53:cb:20:ed:0e:70:bc:de:0b:6e:6e:63:85:
0c:e1:a3:9a:e2:48:67:83:07:22:e4:fa:1b:1b:1c:
57:3e:2e:ab:bb:57:f7:6f:67:b5:28:4a:de:62:e2:
73:20:f7:2f:cd:c9:5a:eb:70:78:8c:52:f7:5e:1b:
67:38:54:4b:50:d8:e0:13:89:64:fc:22:9d:3c:21:
19:24:79:d6:c6:65:e0:68:77:cf:4c:97:14:92:2d:
11:ba:ef:bb:7d:be:11:c3:6b:6f:2c:56:f9:4c:57:
3f:ab:f7:be:b7:0c:d2:ee:6a:4a:72:cd:d5:82:b5:
02:05:46:29:d7:77:2a:65:d0:17:1b:ee:f7:76:93:
2c:84:4f:9a:03:93:d5:52:36:ff:f4:22:84:ee:de:
71:62:88:3c:d5:35:26:d6:8d:b0:0f:0b:ef:a2:1f:
71:03:55:77:94:f7:e0:4b:00:37:ec:33:89:d6:6a:
89:5e:09:d1:c8:f2:2a:36:1d:fd:ea:fb:3e:b2:b2:
06:56:fc:53:b5:a2:5c:9c:c2:a4:4b:36:e8:03:bc:
5a:02:34:27:b0:f1:81:11:cb:70:db:ff:2e:fd:c9:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:45:CF:B4:98:A3:D5:3A:3B:37:BD:8E:A4:2C:68:CB:2B:2D:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b838a63-291c-3021-8af3-d6cc411f0f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:4a:d6:60:fb:dd:50:c2:cd:8f:01:25:13:18:86:9e:1a:ca:
f6:e7:2c:c7:c6:d4:d4:61:10:f7:17:6e:dc:9b:45:68:41:33:
22:69:25:57:d0:f5:30:12:61:d4:5b:02:b9:b8:c2:d6:ec:51:
3c:5e:f7:68:15:e5:d7:40:7f:b5:f9:ee:d8:d3:25:d0:df:79:
74:92:4c:f6:3a:87:1b:b9:5e:df:54:8d:2a:5b:a0:87:8f:09:
40:56:f3:0f:25:63:d6:aa:c7:99:cb:c5:ee:cd:40:04:8c:70:
30:30:5d:81:49:6b:4a:72:e7:09:42:15:ac:2c:91:8d:42:0c:
9b:dd:7f:dd:e7:fa:c9:0d:f6:90:f3:5c:6b:8c:53:11:f0:b5:
b9:ed:6a:88:85:b7:38:11:11:2c:bb:06:d9:40:02:8b:84:ce:
58:e4:dd:5c:29:c6:11:04:f2:60:5b:26:2f:6f:65:24:fe:f9:
e6:04:41:ec:00:36:1d:75:d1:d0:25:8f:ec:6f:a1:aa:83:12:
8a:e4:28:84:96:06:a7:c0:b7:48:ee:2e:85:ba:a4:ca:b0:5d:
10:85:f0:ab:bd:b2:b8:ff:c0:6a:e0:51:0d:6a:1f:33:2f:e2:
7a:ab:5d:ee:27:dc:0c:09:79:92:60:c2:e0:f8:6a:b6:36:7e:
2f:da:3b:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnapYj1EzeCQuVWTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDUxNDIwMzMzNVoXDTI1MDgxMjIwMzMzNVowLzEtMCsGA1UEAxMk
MTYyNGQzYzEtMDMwMy00YmNiLTk0MjgtNjgzMGQzZjFlNTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg17m1bRiV2EafE/nBMm/jMVe5O8E3Yp55MFB
TbJJHVPLIO0OcLzeC25uY4UM4aOa4khngwci5PobGxxXPi6ru1f3b2e1KEreYuJz
IPcvzcla63B4jFL3XhtnOFRLUNjgE4lk/CKdPCEZJHnWxmXgaHfPTJcUki0Ruu+7
fb4Rw2tvLFb5TFc/q/e+twzS7mpKcs3VgrUCBUYp13cqZdAXG+73dpMshE+aA5PV
Ujb/9CKE7t5xYog81TUm1o2wDwvvoh9xA1V3lPfgSwA37DOJ1mqJXgnRyPIqNh39
6vs+srIGVvxTtaJcnMKkSzboA7xaAjQnsPGBEctw2/8u/ckulwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5qRc+0mKPVOjs3vY6kLGjLKy3lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGI4MzhhNjMtMjkxYy0z
MDIxLThhZjMtZDZjYzQxMWYwZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtK1mD73VDCzY8BJRMYhp4ayvbnLMfG1NRhEPcXbtybRWhBMyJpJVfQ
9TASYdRbArm4wtbsUTxe92gV5ddAf7X57tjTJdDfeXSSTPY6hxu5Xt9UjSpboIeP
CUBW8w8lY9aqx5nLxe7NQASMcDAwXYFJa0py5wlCFawskY1CDJvdf93n+skN9pDz
XGuMUxHwtbntaoiFtzgRESy7BtlAAouEzljk3VwpxhEE8mBbJi9vZST++eYEQewA
Nh110dAlj+xvoaqDEorkKISWBqfAt0juLoW6pMqwXRCF8Ku9srj/wGrgUQ1qHzMv
4nqrXe4n3AwJeZJgwuD4arY2fi/aO+8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:04 2025 by rpki-client