Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/04e92388-3c10-37b9-8d44-b32e79f3fb8d.roa
File: 04e92388-3c10-37b9-8d44-b32e79f3fb8d.roa (raw, json)
Hash identifier: 53lRaF+WOqMUiZeOUSqgG6Pjv1mbcgUq68Z4M7CHt9U=
Subject key identifier: 10:15:94:CA:F5:60:83:67:2C:35:5D:72:0D:8B:DB:C5:80:CB:63:FF
Certificate issuer: /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial: 010D0C9F43285849780F12674759D15311DE29C0
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/04e92388-3c10-37b9-8d44-b32e79f3fb8d.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 27539
IP address blocks: 2604:a900::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 24 Apr 2025 19:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:12:67:47:59:d1:53:11:de:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=43a91802-8b51-4593-b02a-c3cd5eb0cab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:5e:c5:11:b0:b1:33:bf:36:29:ab:7b:09:
9c:56:e9:87:8a:6b:d6:de:59:5a:80:85:48:dc:64:
bc:46:b2:15:57:e2:d9:c8:4b:6e:a2:f5:e4:fc:fe:
2e:8f:fc:27:2c:04:c0:10:68:be:7a:c5:07:d9:7a:
41:05:e8:97:0e:9c:32:aa:62:81:0c:c7:94:a2:68:
93:34:fc:e6:5d:dc:a3:d3:a1:ae:3c:04:5c:6f:d2:
79:59:8a:a1:cc:5a:1f:6e:4f:3b:64:8b:50:ae:b2:
c5:d6:e1:89:70:8b:ac:ff:38:3b:95:e0:20:03:cb:
f2:d7:7f:bd:13:59:b6:5b:2c:79:ae:75:f0:ce:de:
dc:7d:6b:33:fd:69:75:a4:c5:cc:e6:68:c4:fe:c9:
db:b2:d5:59:63:a7:2f:19:9a:79:ba:c1:ef:79:63:
ec:1c:dc:a2:7f:b5:a6:d6:3f:eb:be:47:d5:c2:6e:
db:39:07:83:0d:ba:a4:19:44:aa:a8:5b:28:5b:11:
0b:77:de:bc:d3:09:d0:00:8a:d9:3f:0f:dc:7c:2c:
e9:8d:bc:e7:94:d5:eb:04:6f:c8:95:c1:05:cb:92:
b2:78:b6:ca:fb:05:51:ce:40:62:c8:c7:63:44:1b:
2f:be:21:f2:c4:6f:e3:49:5d:e2:70:f3:af:d6:7c:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:15:94:CA:F5:60:83:67:2C:35:5D:72:0D:8B:DB:C5:80:CB:63:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/04e92388-3c10-37b9-8d44-b32e79f3fb8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
X509v3 Authority Key Identifier:
keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:a900::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:1d:9b:08:e0:7f:82:ac:d3:f7:29:69:1e:0b:b4:60:71:c9:
12:5d:b0:c0:b6:20:d6:1f:0b:d7:d3:17:a2:e8:fc:fe:23:f3:
1f:eb:26:5a:ec:34:5a:ff:7b:8a:98:2e:0a:95:55:ee:09:19:
4f:9e:b8:4e:d0:75:93:0d:ff:db:5a:ff:83:15:ba:31:9f:3d:
66:b1:82:cc:41:d4:40:48:6f:ee:3d:73:c5:be:81:db:98:7d:
e4:62:2f:b1:58:c9:df:29:c2:33:62:ef:46:37:1a:41:54:9c:
46:f5:51:96:20:09:4d:51:9f:06:6b:7b:8a:83:9c:e2:a2:c0:
07:f2:1c:2f:2b:5f:c2:27:54:a3:f5:f1:cd:0c:ba:97:c2:01:
9f:c8:66:e5:2f:2d:05:1d:dc:b4:2a:85:fa:c5:a1:b6:83:98:
96:21:56:41:a9:61:ca:93:25:ec:a0:5e:3b:d1:ad:a6:42:ea:
f7:48:54:b5:f9:f4:05:16:12:74:6a:7b:1f:84:70:50:4d:4e:
91:f0:6c:5b:3e:0a:d1:bb:8c:e5:3d:e7:24:ec:e0:e1:83:8f:
d4:94:ed:a0:66:ac:0e:f7:59:ca:90:cc:59:24:f5:19:4b:b3:
03:d5:9f:a7:35:a9:82:dc:7e:bb:a4:e5:65:3f:8d:3b:27:9b:
ea:6c:1b:42
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl4DxJnR1nRUxHeKcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk
NDNhOTE4MDItOGI1MS00NTkzLWIwMmEtYzNjZDVlYjBjYWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm1exRGwsTO/NimrewmcVumHimvW3llagIVI
3GS8RrIVV+LZyEtuovXk/P4uj/wnLATAEGi+esUH2XpBBeiXDpwyqmKBDMeUomiT
NPzmXdyj06GuPARcb9J5WYqhzFofbk87ZItQrrLF1uGJcIus/zg7leAgA8vy13+9
E1m2Wyx5rnXwzt7cfWsz/Wl1pMXM5mjE/snbstVZY6cvGZp5usHveWPsHNyif7Wm
1j/rvkfVwm7bOQeDDbqkGUSqqFsoWxELd9680wnQAIrZPw/cfCzpjbznlNXrBG/I
lcEFy5KyeLbK+wVRzkBiyMdjRBsvviHyxG/jSV3icPOv1nzv6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBAVlMr1YINnLDVdcg2L28WAy2P/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvMDRlOTIzODgtM2MxMC0z
N2I5LThkNDQtYjMyZTc5ZjNmYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSpADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCCHZsI4H+CrNP3KWkeC7RgcckSXbDAtiDWHwvX0xei6Pz+I/Mf6yZa
7DRa/3uKmC4KlVXuCRlPnrhO0HWTDf/bWv+DFboxnz1msYLMQdRASG/uPXPFvoHb
mH3kYi+xWMnfKcIzYu9GNxpBVJxG9VGWIAlNUZ8Ga3uKg5ziosAH8hwvK1/CJ1Sj
9fHNDLqXwgGfyGblLy0FHdy0KoX6xaG2g5iWIVZBqWHKkyXsoF470a2mQur3SFS1
+fQFFhJ0ansfhHBQTU6R8GxbPgrRu4zlPeck7ODhg4/UlO2gZqwO91nKkMxZJPUZ
S7MD1Z+nNamC3H67pOVlP407J5vqbBtC
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:03:30 2025 by rpki-client