Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d24b942-0114-3705-87df-e9693dce31c8.roa
File: 3d24b942-0114-3705-87df-e9693dce31c8.roa (raw, json)
Hash identifier: DU9wrMjXsLglukYocGAXFlBuciovhDWQPRbRn6tyHhg=
Subject key identifier: 0F:6E:84:56:D8:89:FA:FA:CE:68:B0:C5:24:F2:6B:73:B7:9E:13:EB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584971D6B3CDB4BA9B4B24F03490
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d24b942-0114-3705-87df-e9693dce31c8.roa
Signing time: Mon 07 Apr 2025 07:32:46 +0000
ROA not before: Mon 07 Apr 2025 07:32:46 +0000
ROA not after: Sun 06 Jul 2025 07:32:46 +0000
asID: 208485
IP address blocks: 206.123.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 11:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:d6:b3:cd:b4:ba:9b:4b:24:f0:34:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 7 07:32:46 2025 GMT
Not After : Jul 6 07:32:46 2025 GMT
Subject: CN=9846de2a-cd65-4563-89d8-e449b46b6478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:35:5a:84:38:19:21:e3:6e:f9:5d:8d:24:7f:
57:9a:d7:a5:3e:5c:bc:76:27:da:5c:74:f6:3d:c9:
46:25:d8:e5:b2:06:f7:96:85:57:06:27:79:33:92:
5b:76:fc:2d:f0:76:bd:4d:17:1a:a1:fd:00:bd:68:
f7:ac:b1:02:80:0c:a4:5c:6a:fb:9c:e6:1c:ec:ff:
7c:5a:ec:c9:47:cb:78:bb:d7:a7:61:f8:bc:f1:dd:
53:0e:ca:0d:c1:86:94:3e:c5:d8:e8:67:36:7f:cf:
ae:40:51:00:09:8f:0c:f2:35:8d:be:1f:dc:5d:8e:
58:4c:f1:7c:76:2b:4b:f5:5b:97:44:08:6b:ea:3b:
d2:d1:26:27:67:21:07:7f:de:c2:64:66:8f:9a:8a:
17:57:1f:a3:e9:0f:cb:3b:ec:d8:da:00:15:b5:f6:
98:d3:e2:2e:5c:bc:11:da:88:3d:18:af:e4:ed:7c:
43:b1:b2:66:cc:0c:94:dd:65:41:2f:e6:f8:70:35:
50:1b:63:a6:63:dd:d7:77:d6:6e:9e:ce:35:50:7b:
53:68:db:b2:3a:80:ac:55:ba:a6:f8:5f:ff:04:bf:
78:f7:23:2b:31:d7:78:86:a7:d8:3c:61:b7:78:4b:
cd:9b:38:34:d1:a0:ce:2e:3b:51:2c:51:b2:eb:51:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:84:56:D8:89:FA:FA:CE:68:B0:C5:24:F2:6B:73:B7:9E:13:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d24b942-0114-3705-87df-e9693dce31c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:85:18:de:20:f8:44:70:0d:71:c1:7d:6e:c7:c2:3a:d1:1f:
5e:61:8c:9a:58:db:85:66:4d:70:4c:5e:0f:5f:8f:8e:bc:91:
dc:fc:45:39:6d:6a:5b:c3:f1:b3:8d:54:ac:c1:8f:16:1f:5f:
b2:ed:fd:1b:19:a5:ab:ac:5a:c7:3b:a6:b8:24:1d:18:57:83:
24:c1:cc:76:f2:b6:b8:96:f0:90:d3:82:16:9d:1c:9c:d4:17:
ef:cd:7d:1a:c4:66:d6:46:d2:d4:06:4b:ee:38:e3:4d:e3:eb:
02:b5:97:17:7d:ac:f5:02:37:f1:71:4f:4e:28:bb:51:53:bf:
0e:5f:dc:fd:ea:01:71:32:9d:d4:67:7e:18:9f:53:c2:30:64:
86:32:39:ea:00:a3:d6:ca:d7:01:80:af:41:58:50:d7:75:82:
15:8e:c1:69:45:67:4b:9b:66:1f:87:03:29:63:45:46:83:00:
f8:5c:de:21:b4:39:80:66:e3:2a:fd:4d:ca:13:de:a0:55:39:
5a:25:14:9f:29:61:9a:4d:90:f6:02:71:ee:61:98:b6:f7:74:
21:90:d4:10:70:43:99:f6:b1:58:79:e3:9a:65:80:56:af:ce:
d0:52:f4:b3:1d:01:f5:e9:9e:d5:f0:fd:67:bd:23:79:15:9c:
5a:53:d5:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElx1rPNtLqbSyTwNJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDQwNzA3MzI0NloXDTI1MDcwNjA3MzI0NlowLzEtMCsGA1UEAxMk
OTg0NmRlMmEtY2Q2NS00NTYzLTg5ZDgtZTQ0OWI0NmI2NDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDVahDgZIeNu+V2NJH9XmtelPly8difaXHT2
PclGJdjlsgb3loVXBid5M5Jbdvwt8Ha9TRcaof0AvWj3rLECgAykXGr7nOYc7P98
WuzJR8t4u9enYfi88d1TDsoNwYaUPsXY6Gc2f8+uQFEACY8M8jWNvh/cXY5YTPF8
ditL9VuXRAhr6jvS0SYnZyEHf97CZGaPmooXVx+j6Q/LO+zY2gAVtfaY0+IuXLwR
2og9GK/k7XxDsbJmzAyU3WVBL+b4cDVQG2OmY93Xd9Zuns41UHtTaNuyOoCsVbqm
+F//BL949yMrMdd4hqfYPGG3eEvNmzg00aDOLjtRLFGy61ENnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9uhFbYifr6zmiwxSTya3O3nhPrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2QyNGI5NDItMDExNC0z
NzA1LTg3ZGYtZTk2OTNkY2UzMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+FGN4g+ERwDXHBfW7HwjrRH15hjJpY24VmTXBMXg9fj468kdz8RTlt
alvD8bONVKzBjxYfX7Lt/RsZpausWsc7prgkHRhXgyTBzHbytriW8JDTghadHJzU
F+/NfRrEZtZG0tQGS+44403j6wK1lxd9rPUCN/FxT04ou1FTvw5f3P3qAXEyndRn
fhifU8IwZIYyOeoAo9bK1wGAr0FYUNd1ghWOwWlFZ0ubZh+HAyljRUaDAPhc3iG0
OYBm4yr9TcoT3qBVOVolFJ8pYZpNkPYCce5hmLb3dCGQ1BBwQ5n2sVh545plgFav
ztBS9LMdAfXpntXw/We9I3kVnFpT1e4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:18:00 2025 by rpki-client