Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/808addb3-e7a9-3307-8d6e-74fd08f6c7c0.roa
File: 808addb3-e7a9-3307-8d6e-74fd08f6c7c0.roa (raw, json)
Hash identifier: kGblVj2MoGm/bXYSX82GNwJmRHYRbBgZ68nO1Z+pSXU=
Subject key identifier: FF:AE:3E:21:A1:BC:4A:3B:1B:01:31:8A:55:F7:56:19:76:DE:3C:ED
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F43285849A5ECEC69C9E1D1A6FB0E5580
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/808addb3-e7a9-3307-8d6e-74fd08f6c7c0.roa
Signing time: Fri 25 Apr 2025 23:19:34 +0000
ROA not before: Fri 25 Apr 2025 23:19:34 +0000
ROA not after: Thu 24 Jul 2025 23:19:34 +0000
asID: 61317
IP address blocks: 134.202.128.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Apr 2025 13:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:a5:ec:ec:69:c9:e1:d1:a6:fb:0e:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Apr 25 23:19:34 2025 GMT
Not After : Jul 24 23:19:34 2025 GMT
Subject: CN=ec29f762-be30-4f75-91a5-1aca46063eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:d7:32:7b:8f:41:bd:a5:73:14:a8:6a:b8:
bf:44:35:75:31:66:33:0e:2c:34:33:ad:9a:52:ce:
62:a8:d1:b2:23:49:5c:d9:0a:f4:fd:b7:88:88:74:
f7:3a:dd:cf:d6:25:0d:08:2a:a4:76:06:83:33:82:
91:39:6e:e5:e7:d5:5f:4e:f7:16:0f:40:45:4f:4b:
66:76:84:3e:32:71:11:91:60:5d:f2:a0:52:ca:aa:
7f:36:af:be:8b:86:0d:c0:5e:43:49:24:d8:f3:20:
49:28:7a:61:1a:dd:8d:6f:a4:12:0e:2e:71:41:83:
e4:43:09:51:df:a8:01:8b:e2:b9:f7:86:43:96:a1:
41:bd:b8:ce:0b:8c:73:da:fe:6f:cb:f6:73:fa:53:
7f:01:84:22:5f:e5:9a:65:87:f2:64:03:86:13:dd:
41:74:cd:fe:41:6c:d0:61:5f:dd:d1:36:88:b6:5b:
52:79:09:b6:dc:53:b5:f4:b5:d0:70:52:e8:9a:87:
50:20:64:11:14:67:eb:17:6e:36:41:de:ae:08:0a:
a9:50:1a:f6:06:20:d2:3c:d4:1c:b0:a7:51:ef:2c:
67:39:70:8d:a1:b8:bb:c9:d0:53:53:26:89:97:b7:
46:1e:63:89:b0:ac:88:18:84:35:1d:68:ed:b5:f6:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:3E:21:A1:BC:4A:3B:1B:01:31:8A:55:F7:56:19:76:DE:3C:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/808addb3-e7a9-3307-8d6e-74fd08f6c7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e9:a7:cc:8c:d7:f7:82:b4:56:e1:68:ff:62:7c:2a:12:41:
c4:b3:18:74:a4:2f:a9:a8:da:78:d4:8f:dd:6a:99:5e:1a:4e:
20:e6:cf:cf:70:1e:8a:54:b8:fa:b1:1a:7c:62:f1:e8:92:23:
06:65:19:0d:cb:a0:83:e1:01:34:cb:3b:6f:85:e0:bd:eb:f7:
8e:fa:07:8a:df:4e:f3:8f:d2:5f:e4:53:07:63:dd:90:43:03:
4c:99:1d:18:a1:7b:cd:39:c1:9b:3a:5b:48:f0:09:68:9a:23:
a7:cc:66:9f:d4:eb:b5:f6:04:31:fc:92:28:58:23:57:97:b9:
72:4f:ab:dd:43:5f:bd:f7:27:9c:f5:af:c7:82:1d:74:6e:4d:
f7:d6:d4:1b:9e:5b:6b:8b:bc:e2:7c:68:a2:ee:a8:dd:97:11:
5a:af:d4:4a:40:a8:6e:c8:a7:26:9c:5c:96:0b:36:00:7e:6a:
ae:ac:db:09:04:56:75:b7:27:38:6c:42:90:8d:04:e4:af:7c:
0d:a0:b0:6f:90:ec:31:e3:48:34:08:7d:de:58:1b:ce:00:30:
cc:70:c8:2c:d5:d3:1e:27:a4:23:c0:d3:10:f1:16:82:6b:e1:
15:b0:28:e6:79:e4:76:27:e2:ea:7d:0d:d5:47:c9:c6:d6:ae:
14:c7:a6:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEml7OxpyeHRpvsOVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI1MDQyNTIzMTkzNFoXDTI1MDcyNDIzMTkzNFowLzEtMCsGA1UEAxMk
ZWMyOWY3NjItYmUzMC00Zjc1LTkxYTUtMWFjYTQ2MDYzZWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom3XMnuPQb2lcxSoari/RDV1MWYzDiw0M62a
Us5iqNGyI0lc2Qr0/beIiHT3Ot3P1iUNCCqkdgaDM4KROW7l59VfTvcWD0BFT0tm
doQ+MnERkWBd8qBSyqp/Nq++i4YNwF5DSSTY8yBJKHphGt2Nb6QSDi5xQYPkQwlR
36gBi+K594ZDlqFBvbjOC4xz2v5vy/Zz+lN/AYQiX+WaZYfyZAOGE91BdM3+QWzQ
YV/d0TaItltSeQm23FO19LXQcFLomodQIGQRFGfrF242Qd6uCAqpUBr2BiDSPNQc
sKdR7yxnOXCNobi7ydBTUyaJl7dGHmOJsKyIGIQ1HWjttfYg9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+uPiGhvEo7GwExilX3Vhl23jztMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvODA4YWRkYjMtZTdhOS0z
MzA3LThkNmUtNzRmZDA4ZjZjN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAArpp8yM1/eCtFbhaP9ifCoSQcSzGHSkL6mo2njUj91qmV4aTiDmz89w
HopUuPqxGnxi8eiSIwZlGQ3LoIPhATTLO2+F4L3r9476B4rfTvOP0l/kUwdj3ZBD
A0yZHRihe805wZs6W0jwCWiaI6fMZp/U67X2BDH8kihYI1eXuXJPq91DX733J5z1
r8eCHXRuTffW1BueW2uLvOJ8aKLuqN2XEVqv1EpAqG7IpyacXJYLNgB+aq6s2wkE
VnW3JzhsQpCNBOSvfA2gsG+Q7DHjSDQIfd5YG84AMMxwyCzV0x4npCPA0xDxFoJr
4RWwKOZ55HYn4up9DdVHycbWrhTHplw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:14:08 2025 by rpki-client