Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/c4f231c7-dad2-3f5e-8540-ab3ee66d4053.roa
File: c4f231c7-dad2-3f5e-8540-ab3ee66d4053.roa (raw, json)
Hash identifier: kKgiLl6wt57fLEtcsAkbkgVq/TjmdwWKPe67JcfLgc4=
Subject key identifier: 01:E4:0F:EE:AC:33:49:BE:46:D9:84:81:15:69:8B:88:0C:A0:A1:3C
Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial: 010D0C9F432858498E94E70D1299D9015008B680
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/c4f231c7-dad2-3f5e-8540-ab3ee66d4053.roa
Signing time: Thu 17 Apr 2025 14:38:38 +0000
ROA not before: Thu 17 Apr 2025 14:38:38 +0000
ROA not after: Wed 16 Jul 2025 14:38:38 +0000
asID: 400636
IP address blocks: 104.167.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 02:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8e:94:e7:0d:12:99:d9:01:50:08:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Validity
Not Before: Apr 17 14:38:38 2025 GMT
Not After : Jul 16 14:38:38 2025 GMT
Subject: CN=b243c220-4374-46cb-8cf9-ff70a6080bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:01:53:2b:65:fc:b9:0b:fa:5f:ae:8f:0c:
07:28:d1:fc:29:ca:10:b8:e5:fb:a1:86:d4:41:6d:
7c:7d:cc:a0:c2:aa:44:35:30:a1:b5:0f:33:d7:8c:
93:ed:bd:cf:62:d4:93:1c:14:b3:98:b3:bd:e1:ae:
3c:a7:5c:e1:dc:d7:a8:90:b7:56:66:3a:05:1d:f8:
83:fc:36:36:e3:af:5d:aa:02:ba:d1:19:02:01:1c:
92:e6:dc:03:b1:60:68:14:36:be:8a:6a:89:f3:c4:
b2:cf:e7:26:4f:36:6f:db:3c:53:e7:86:14:4b:9c:
57:d9:0f:1b:32:33:b8:50:b2:ea:26:bd:bc:e5:15:
39:65:95:c3:01:05:0d:35:86:2a:b6:68:aa:8d:b8:
ca:53:d8:20:9e:8c:9e:d5:a2:8a:98:ea:34:81:97:
fb:50:b8:55:54:bb:01:c4:8c:da:be:26:f5:59:90:
16:89:4d:ea:6a:9b:62:ec:5d:4c:49:bb:5d:47:07:
80:1b:01:46:52:12:7c:c6:24:87:ff:56:65:ad:04:
25:e4:22:ea:ee:ef:c8:8d:54:64:4c:06:89:31:78:
e3:bf:3a:17:15:82:06:21:9d:dc:4a:95:b2:b5:e8:
e7:07:36:9d:02:dd:44:e7:25:92:7a:ae:f7:60:ea:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:0F:EE:AC:33:49:BE:46:D9:84:81:15:69:8B:88:0C:A0:A1:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/c4f231c7-dad2-3f5e-8540-ab3ee66d4053.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
X509v3 Authority Key Identifier:
keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:f5:59:4a:b2:f4:78:2f:e8:c9:89:04:64:75:a1:12:2f:98:
2a:ca:a0:54:19:d0:1c:c7:2f:88:f2:b9:fd:53:31:44:c0:ee:
47:20:49:36:e6:d0:ac:e0:7d:aa:d7:91:44:8e:5d:41:a0:c3:
ba:a2:dc:39:e5:4f:ae:10:51:4f:93:fd:2e:07:ea:2d:0f:62:
fd:e3:69:8c:51:fa:cd:24:59:e3:94:a5:bb:0d:72:1f:6d:86:
71:33:57:ae:0a:7b:fa:84:1c:ea:66:93:f7:16:c7:78:dc:66:
a0:d6:94:55:ac:ab:b9:5f:f5:d1:75:43:79:c3:b2:f3:70:e3:
36:e2:06:30:a5:bb:09:c6:fa:45:4c:51:d3:b9:83:a4:24:b1:
13:04:08:33:f8:6c:43:f3:c5:b9:d5:67:81:5e:46:2e:2e:61:
10:67:5e:db:eb:81:6d:67:07:78:2b:1b:6f:2b:32:01:9a:e2:
4c:d3:ca:66:f8:21:15:2a:e9:71:d3:36:1f:2c:cd:84:89:04:
91:70:5f:d9:b8:a5:fb:24:b1:71:12:88:73:d0:e3:3d:1d:d8:
0e:92:6b:aa:df:d0:cb:64:75:31:07:a5:cb:63:f6:fb:c3:e8:
77:be:8b:46:f3:d6:4f:51:10:c3:c1:27:98:0d:a7:72:56:23:
2b:3e:d0:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOlOcNEpnZAVAItoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI1MDQxNzE0MzgzOFoXDTI1MDcxNjE0MzgzOFowLzEtMCsGA1UEAxMk
YjI0M2MyMjAtNDM3NC00NmNiLThjZjktZmY3MGE2MDgwYmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkIBUytl/LkL+l+ujwwHKNH8KcoQuOX7oYbU
QW18fcygwqpENTChtQ8z14yT7b3PYtSTHBSzmLO94a48p1zh3NeokLdWZjoFHfiD
/DY2469dqgK60RkCARyS5twDsWBoFDa+imqJ88Syz+cmTzZv2zxT54YUS5xX2Q8b
MjO4ULLqJr285RU5ZZXDAQUNNYYqtmiqjbjKU9ggnoye1aKKmOo0gZf7ULhVVLsB
xIzavib1WZAWiU3qapti7F1MSbtdRweAGwFGUhJ8xiSH/1ZlrQQl5CLq7u/IjVRk
TAaJMXjjvzoXFYIGIZ3cSpWytejnBzadAt1E5yWSeq73YOoVUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHkD+6sM0m+RtmEgRVpi4gMoKE8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvYzRmMjMxYzctZGFkMi0z
ZjVlLTg1NDAtYWIzZWU2NmQ0MDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHz1WUqy9Hgv6MmJBGR1oRIvmCrKoFQZ0BzHL4jyuf1TMUTA7kcgSTbm
0KzgfarXkUSOXUGgw7qi3DnlT64QUU+T/S4H6i0PYv3jaYxR+s0kWeOUpbsNch9t
hnEzV64Ke/qEHOpmk/cWx3jcZqDWlFWsq7lf9dF1Q3nDsvNw4zbiBjCluwnG+kVM
UdO5g6QksRMECDP4bEPzxbnVZ4FeRi4uYRBnXtvrgW1nB3grG28rMgGa4kzTymb4
IRUq6XHTNh8szYSJBJFwX9m4pfsksXESiHPQ4z0d2A6Sa6rf0MtkdTEHpctj9vvD
6He+i0bz1k9REMPBJ5gNp3JWIys+0Ew=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:43 2025 by rpki-client