Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea898f19-552c-3fb6-8bcf-bc91ca2cc974.roa
File: ea898f19-552c-3fb6-8bcf-bc91ca2cc974.roa (raw, json)
Hash identifier: Gw4dVdXuOS/mSe+Dr5DiTNMkgrid9lj26+tJmR8emGU=
Subject key identifier: 80:53:81:EF:61:78:CF:37:C7:B1:2B:81:33:BE:E3:61:34:6B:77:8E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849F61D15C65D505DF779269B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea898f19-552c-3fb6-8bcf-bc91ca2cc974.roa
Signing time: Sat 24 May 2025 16:41:17 +0000
ROA not before: Sat 24 May 2025 16:41:17 +0000
ROA not after: Fri 22 Aug 2025 16:41:17 +0000
asID: 213238
IP address blocks: 172.120.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 11:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f6:1d:15:c6:5d:50:5d:f7:79:26:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 24 16:41:17 2025 GMT
Not After : Aug 22 16:41:17 2025 GMT
Subject: CN=3c63cb19-f8c1-41fe-87b2-0ef6432c0015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:35:67:45:21:c6:e6:a8:19:f0:01:2d:6c:50:
aa:c9:87:3d:4a:63:cf:df:22:f6:1b:e3:6c:16:d3:
d7:b6:40:c3:93:69:8a:f4:31:e3:00:ab:65:e2:b1:
bc:47:10:85:f5:06:61:90:4e:6e:0a:29:05:f0:13:
e7:37:96:6c:34:cd:1a:99:8b:ed:b4:ff:68:9b:c9:
dc:e9:7c:d6:4c:fd:03:7f:f2:20:f3:70:2b:95:ce:
10:ac:88:07:99:59:ea:2d:b8:6a:1a:c9:c1:62:db:
dc:5a:8f:9e:3a:5b:c9:ba:19:c2:79:02:31:87:fc:
68:83:81:0f:e5:71:3e:04:47:b5:4a:8e:b5:17:fa:
c5:db:a7:89:ec:be:f6:d8:27:01:29:1e:32:63:a3:
11:5f:1f:66:78:c8:c3:47:e9:81:89:dd:46:af:6b:
58:bf:72:62:a5:14:57:b2:9c:e5:b4:3c:99:5a:1a:
12:a9:35:64:68:9b:5a:02:a3:91:33:2e:4e:20:6b:
b2:d9:1e:d0:ed:88:ce:68:43:ee:af:c6:14:f3:1f:
8c:37:bf:24:21:0f:0c:32:84:34:d4:8f:cf:41:1c:
12:4a:bf:57:36:bd:3e:6b:3c:45:76:d4:84:9d:75:
cc:c6:a2:58:f4:7b:7a:e8:c3:d6:3c:40:b4:ae:72:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:53:81:EF:61:78:CF:37:C7:B1:2B:81:33:BE:E3:61:34:6B:77:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea898f19-552c-3fb6-8bcf-bc91ca2cc974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:89:89:d4:c2:ad:4e:27:c9:a6:23:6b:0b:49:13:24:fa:b3:
b6:51:61:76:05:ea:5b:65:38:1b:41:c1:22:70:29:92:75:aa:
91:c6:7f:1d:1c:6b:f1:33:bc:bf:c5:4d:c3:1f:c5:43:66:41:
30:ab:17:69:8c:b5:b5:72:75:fb:c9:5c:34:2a:c5:55:56:cf:
65:88:df:a6:53:7a:21:b9:54:a0:d2:91:d7:d0:8b:9c:dc:f5:
18:3f:a0:25:91:87:b5:25:92:ed:bd:45:05:c5:c9:63:42:06:
14:d8:c8:54:5f:7a:0a:cd:86:13:6d:7e:21:12:4e:f5:52:6a:
fa:d5:44:64:f8:4f:9c:ca:d1:d2:c2:c9:9f:b2:fe:6b:14:a2:
e8:4e:5f:f0:f2:3d:94:84:88:a4:00:89:13:70:1d:84:dc:05:
8a:fd:ed:d0:6c:b9:39:d2:19:8b:8b:82:41:78:96:2b:21:41:
e0:1b:d0:1c:d1:9c:52:fb:34:f7:09:89:f9:fd:7d:34:32:dd:
71:20:0b:16:48:23:ff:3f:fa:e1:4f:49:8b:3d:7b:33:23:84:
a8:e6:b4:44:3f:dc:b1:df:ce:64:1f:6c:82:7e:37:4b:98:e6:
a3:51:41:53:e0:f0:fd:e7:28:95:fa:c2:d6:a4:86:e2:de:e8:
2c:7c:7b:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn2HRXGXVBd93kmm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUyNDE2NDExN1oXDTI1MDgyMjE2NDExN1owLzEtMCsGA1UEAxMk
M2M2M2NiMTktZjhjMS00MWZlLTg3YjItMGVmNjQzMmMwMDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTVnRSHG5qgZ8AEtbFCqyYc9SmPP3yL2G+Ns
FtPXtkDDk2mK9DHjAKtl4rG8RxCF9QZhkE5uCikF8BPnN5ZsNM0amYvttP9om8nc
6XzWTP0Df/Ig83Arlc4QrIgHmVnqLbhqGsnBYtvcWo+eOlvJuhnCeQIxh/xog4EP
5XE+BEe1So61F/rF26eJ7L722CcBKR4yY6MRXx9meMjDR+mBid1Gr2tYv3JipRRX
spzltDyZWhoSqTVkaJtaAqORMy5OIGuy2R7Q7YjOaEPur8YU8x+MN78kIQ8MMoQ0
1I/PQRwSSr9XNr0+azxFdtSEnXXMxqJY9Ht66MPWPEC0rnI5CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBTge9heM83x7ErgTO+42E0a3eOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWE4OThmMTktNTUyYy0z
ZmI2LThiY2YtYmM5MWNhMmNjOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHh5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqJidTCrU4nyaYjawtJEyT6s7ZRYXYF6ltlOBtBwSJwKZJ1qpHGfx0c
a/EzvL/FTcMfxUNmQTCrF2mMtbVydfvJXDQqxVVWz2WI36ZTeiG5VKDSkdfQi5zc
9Rg/oCWRh7Ulku29RQXFyWNCBhTYyFRfegrNhhNtfiESTvVSavrVRGT4T5zK0dLC
yZ+y/msUouhOX/DyPZSEiKQAiRNwHYTcBYr97dBsuTnSGYuLgkF4lishQeAb0BzR
nFL7NPcJifn9fTQy3XEgCxZII/8/+uFPSYs9ezMjhKjmtEQ/3LHfzmQfbIJ+N0uY
5qNRQVPg8P3nKJX6wtakhuLe6Cx8e6c=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:11:57 2025 by rpki-client