Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b711bed9-0cd1-3fc6-a48f-eefd4b6f8fc7.roa
File: b711bed9-0cd1-3fc6-a48f-eefd4b6f8fc7.roa (raw, json)
Hash identifier: 5+aeXoIm7hGEcaJmZG5Lq9tL0F9HdmjC29HmibzhTh4=
Subject key identifier: A1:35:81:F1:A2:5D:2E:BC:97:A6:05:31:F6:D9:81:99:BC:5E:3C:57
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285849E7BA5F57B414B4A39E5FC7C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b711bed9-0cd1-3fc6-a48f-eefd4b6f8fc7.roa
Signing time: Mon 19 May 2025 13:01:01 +0000
ROA not before: Mon 19 May 2025 13:01:01 +0000
ROA not after: Sun 17 Aug 2025 13:01:01 +0000
asID: 54600
IP address blocks: 104.233.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 06 Jun 2025 13:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:e7:ba:5f:57:b4:14:b4:a3:9e:5f:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: May 19 13:01:01 2025 GMT
Not After : Aug 17 13:01:01 2025 GMT
Subject: CN=3fd4db09-1106-457f-9fc6-c363f8ecc9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:60:22:e3:e6:f1:b5:71:4a:58:15:3a:2c:
ed:d4:96:d2:16:5c:5f:7b:cc:ff:d6:f2:a8:fe:47:
38:39:93:49:88:59:a9:7e:cb:5d:4e:8f:ee:88:e7:
70:78:3a:ac:92:03:6a:b2:01:e4:01:6b:30:33:78:
bb:98:97:b2:d0:7d:1c:2e:93:ed:f4:9d:73:e1:13:
2d:a7:fc:d1:46:34:05:3b:41:6c:17:ac:e8:63:3d:
b3:38:55:fb:8a:05:19:58:df:8d:85:d1:8a:2a:f3:
13:dd:3e:fc:4a:d4:6a:47:8d:ae:cf:16:28:23:49:
b8:92:54:5a:c0:64:4e:e5:c4:bb:c2:bb:0c:a2:66:
42:8e:d9:5b:9c:1c:5f:00:fd:c7:5b:76:37:db:38:
8d:f1:38:58:88:db:b5:2a:11:8e:3f:7a:22:2e:dc:
db:5f:af:57:cb:2e:89:c9:77:e2:ce:e8:73:cd:50:
2f:95:5d:b9:bb:da:cc:20:43:a4:8a:84:7a:9c:a2:
63:17:34:d1:c7:9f:34:8c:0c:95:ce:97:f8:b0:7d:
93:d8:85:32:20:9b:7f:68:fa:fd:7f:0e:93:7f:74:
13:29:ef:6f:6a:ff:01:02:b4:ab:a9:58:61:74:59:
b3:5f:3e:b2:d5:da:7e:fe:a5:05:5a:13:7e:20:9e:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:81:F1:A2:5D:2E:BC:97:A6:05:31:F6:D9:81:99:BC:5E:3C:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b711bed9-0cd1-3fc6-a48f-eefd4b6f8fc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.233.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:4b:8e:a3:83:fd:44:8d:33:ca:0e:bb:c6:33:80:dc:e2:7f:
bb:84:77:30:f6:28:0a:0c:2f:e5:36:ef:47:ce:5c:55:f5:4c:
a2:03:22:2d:41:d5:16:76:54:8b:37:c3:17:77:3d:d5:a2:a3:
95:0d:a6:78:2b:fb:f7:25:90:34:43:bb:56:c4:1a:d8:ba:dd:
45:4c:f6:51:95:07:3d:39:a8:a4:cd:3b:17:c2:4d:97:65:46:
2f:fc:a4:50:be:06:eb:cf:d1:07:bc:fb:7d:66:44:f9:2e:73:
b2:13:6b:33:8f:af:cd:b3:d3:23:18:fd:16:10:3d:f4:da:dd:
71:e0:d0:fe:e4:97:5f:6e:50:d7:6e:3c:68:13:84:f3:a1:c3:
6e:55:5b:d6:9a:91:df:a2:b2:86:34:79:b1:93:3e:7c:9d:0f:
43:c3:6e:a7:12:c0:fe:ec:2d:0d:8a:38:e8:f8:4f:5a:12:ce:
aa:bf:f6:1d:f0:ef:e2:12:4a:0e:7e:b2:0f:ef:b8:78:e8:65:
9b:ba:54:ec:05:48:e0:2a:2b:21:4a:21:b8:d1:a7:5f:f2:1e:
fe:d5:e4:33:b8:d3:f5:a9:4f:99:5f:b1:a9:22:22:21:2f:7b:
9e:3c:d6:dd:5c:48:e1:50:5c:d1:45:9e:25:1d:4f:fa:82:18:
b3:9b:9c:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnul9XtBS0o55fx8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
M2ZkNGRiMDktMTEwNi00NTdmLTlmYzYtYzM2M2Y4ZWNjOWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw1gIuPm8bVxSlgVOizt1JbSFlxfe8z/1vKo
/kc4OZNJiFmpfstdTo/uiOdweDqskgNqsgHkAWswM3i7mJey0H0cLpPt9J1z4RMt
p/zRRjQFO0FsF6zoYz2zOFX7igUZWN+NhdGKKvMT3T78StRqR42uzxYoI0m4klRa
wGRO5cS7wrsMomZCjtlbnBxfAP3HW3Y32ziN8ThYiNu1KhGOP3oiLtzbX69Xyy6J
yXfizuhzzVAvlV25u9rMIEOkioR6nKJjFzTRx580jAyVzpf4sH2T2IUyIJt/aPr9
fw6Tf3QTKe9vav8BArSrqVhhdFmzXz6y1dp+/qUFWhN+IJ4DbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKE1gfGiXS68l6YFMfbZgZm8XjxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYjcxMWJlZDktMGNkMS0z
ZmM2LWE0OGYtZWVmZDRiNmY4ZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOmaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABLjqOD/USNM8oOu8YzgNzif7uEdzD2KAoML+U270fOXFX1TKIDIi1B
1RZ2VIs3wxd3PdWio5UNpngr+/clkDRDu1bEGti63UVM9lGVBz05qKTNOxfCTZdl
Ri/8pFC+BuvP0Qe8+31mRPkuc7ITazOPr82z0yMY/RYQPfTa3XHg0P7kl19uUNdu
PGgThPOhw25VW9aakd+isoY0ebGTPnydD0PDbqcSwP7sLQ2KOOj4T1oSzqq/9h3w
7+ISSg5+sg/vuHjoZZu6VOwFSOAqKyFKIbjRp1/yHv7V5DO40/WpT5lfsakiIiEv
e5481t1cSOFQXNFFniUdT/qCGLObnEA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:44:54 2025 by rpki-client