Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a67f65a-6229-3474-ac96-c5bc4981e39e.roa
File: 1a67f65a-6229-3474-ac96-c5bc4981e39e.roa (raw, json)
Hash identifier: FjxgdZxIo4RpQXqZdqRepezi7ko8O7JGywu0/Uqui6c=
Subject key identifier: 56:88:90:AA:AF:CE:F3:11:3F:F5:3C:7D:AB:E1:7B:91:8D:14:EF:77
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584971D6EB269BF14A6A661EDB40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a67f65a-6229-3474-ac96-c5bc4981e39e.roa
Signing time: Mon 07 Apr 2025 07:33:12 +0000
ROA not before: Mon 07 Apr 2025 07:33:12 +0000
ROA not after: Sun 06 Jul 2025 07:33:12 +0000
asID: 208485
IP address blocks: 206.123.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 11:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:d6:eb:26:9b:f1:4a:6a:66:1e:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 7 07:33:12 2025 GMT
Not After : Jul 6 07:33:12 2025 GMT
Subject: CN=62ae9a60-2074-42b7-83f6-d7e997bb7cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:cf:71:8b:6a:7e:e4:82:e4:f4:4c:c6:cc:
82:ba:eb:bd:39:f7:3a:3a:65:0b:8f:3d:04:13:82:
6e:0d:e1:24:78:a8:41:47:4e:88:ff:34:78:d6:16:
54:24:23:cd:4b:c6:10:a9:bc:84:59:09:ef:1d:e0:
91:e6:76:97:fa:7b:ea:c2:24:87:e2:b8:1e:bf:10:
eb:de:b8:69:48:8a:9d:fe:c3:c1:be:5d:33:63:f2:
d9:fd:2b:3b:3b:94:1e:aa:23:40:69:a0:52:55:2b:
7b:17:80:23:06:6a:5e:18:3b:62:97:c8:f9:2b:ba:
8f:a2:27:74:3e:ec:97:01:78:6d:73:6c:2a:9a:b3:
d1:65:9f:2b:92:3d:a7:bb:db:87:3c:ee:56:72:16:
45:f1:f1:39:5e:fd:07:b5:3c:6f:87:e9:ac:29:f5:
5c:87:d0:47:28:32:98:b1:a6:83:56:78:1c:66:e4:
7e:7a:ef:1b:4f:12:f9:a9:96:57:42:c4:91:2d:2a:
2e:e9:39:fe:31:80:95:67:82:9f:ec:4b:1b:9b:f3:
0a:ab:0e:1e:5b:2e:5d:3c:99:89:18:b7:a8:1e:0a:
88:fd:17:05:82:e9:8d:49:fb:16:02:eb:74:24:a2:
7c:9b:8b:1d:e7:a4:80:b0:00:a9:1a:ce:85:ec:e0:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:88:90:AA:AF:CE:F3:11:3F:F5:3C:7D:AB:E1:7B:91:8D:14:EF:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a67f65a-6229-3474-ac96-c5bc4981e39e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:75:97:b9:8f:ab:eb:5f:cb:cc:2e:b6:87:e4:3a:a5:90:55:
74:0d:a8:6e:25:09:b2:d0:cd:5c:fa:a4:03:6d:87:d6:af:da:
51:d4:ac:75:b5:95:b6:63:99:8a:14:4b:f8:0d:dc:8c:4c:f2:
8c:fb:41:9f:ab:a7:cd:4e:da:10:91:7c:e8:bc:41:75:3f:9d:
91:96:d2:76:d8:b7:b4:e9:89:a6:36:1b:83:0b:24:dd:fb:c1:
cb:4e:9f:c0:04:69:c7:71:90:cc:46:4d:52:21:7b:26:69:1d:
0a:f7:4a:60:83:b3:bb:58:4c:93:49:e2:de:79:23:81:a2:0b:
18:ed:17:bd:51:48:f6:a5:31:a2:30:39:9e:bc:0e:5c:85:ca:
13:80:58:49:a3:ac:68:92:2e:dd:4c:51:47:f2:de:bb:22:c1:
3f:e7:2c:5f:2b:a5:51:65:15:5f:d4:8b:84:b2:5c:69:f0:58:
c7:c6:e0:13:29:fd:43:34:d3:d0:24:a9:13:e4:14:d3:51:3e:
42:27:d5:3a:ea:e2:7a:93:43:7a:92:9a:9f:ee:41:b9:88:88:
87:ce:03:bf:60:d7:6b:d1:fb:84:2a:37:04:97:f5:83:5c:81:
98:2a:21:84:da:26:52:80:a6:50:c9:97:7d:b5:f8:39:65:62:
bb:94:c1:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElx1usmm/FKamYe20AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDQwNzA3MzMxMloXDTI1MDcwNjA3MzMxMlowLzEtMCsGA1UEAxMk
NjJhZTlhNjAtMjA3NC00MmI3LTgzZjYtZDdlOTk3YmI3Y2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlnPcYtqfuSC5PRMxsyCuuu9Ofc6OmULjz0E
E4JuDeEkeKhBR06I/zR41hZUJCPNS8YQqbyEWQnvHeCR5naX+nvqwiSH4rgevxDr
3rhpSIqd/sPBvl0zY/LZ/Ss7O5QeqiNAaaBSVSt7F4AjBmpeGDtil8j5K7qPoid0
PuyXAXhtc2wqmrPRZZ8rkj2nu9uHPO5WchZF8fE5Xv0HtTxvh+msKfVch9BHKDKY
saaDVngcZuR+eu8bTxL5qZZXQsSRLSou6Tn+MYCVZ4Kf7Esbm/MKqw4eWy5dPJmJ
GLeoHgqI/RcFgumNSfsWAut0JKJ8m4sd56SAsACpGs6F7OAL0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaIkKqvzvMRP/U8favhe5GNFO93MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWE2N2Y2NWEtNjIyOS0z
NDc0LWFjOTYtYzViYzQ5ODFlMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHN1l7mPq+tfy8wutofkOqWQVXQNqG4lCbLQzVz6pANth9av2lHUrHW1
lbZjmYoUS/gN3IxM8oz7QZ+rp81O2hCRfOi8QXU/nZGW0nbYt7TpiaY2G4MLJN37
wctOn8AEacdxkMxGTVIheyZpHQr3SmCDs7tYTJNJ4t55I4GiCxjtF71RSPalMaIw
OZ68DlyFyhOAWEmjrGiSLt1MUUfy3rsiwT/nLF8rpVFlFV/Ui4SyXGnwWMfG4BMp
/UM009AkqRPkFNNRPkIn1Trq4nqTQ3qSmp/uQbmIiIfOA79g12vR+4QqNwSX9YNc
gZgqIYTaJlKAplDJl321+DllYruUwW4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:30:33 2025 by rpki-client