Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/93d19a2f-3ba9-3beb-af63-6bbdb41e1029.roa
File: 93d19a2f-3ba9-3beb-af63-6bbdb41e1029.roa (raw, json)
Hash identifier: 2VQlxdRLElKCllHJr1XCsApDDjKw0A8xwrZ8mbsSwJA=
Subject key identifier: C5:E0:8D:D5:45:34:8D:D6:ED:AB:B6:0C:07:FD:75:E8:0B:D1:EB:A2
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285849D1D1EF99EA6FD3893E70F540
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/93d19a2f-3ba9-3beb-af63-6bbdb41e1029.roa
Signing time: Sun 11 May 2025 16:40:46 +0000
ROA not before: Sun 11 May 2025 16:40:46 +0000
ROA not after: Sat 09 Aug 2025 16:40:46 +0000
asID: 834
IP address blocks: 209.178.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 11:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d1:d1:ef:99:ea:6f:d3:89:3e:70:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: May 11 16:40:46 2025 GMT
Not After : Aug 9 16:40:46 2025 GMT
Subject: CN=f1ff3b98-19dd-4b14-ac55-365f0c87b1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:3a:e3:24:63:03:33:60:71:e0:96:c4:f3:
34:3f:e4:58:f6:99:c8:15:66:06:70:a4:ca:4e:96:
b1:0f:6c:94:09:89:9e:8a:28:00:51:77:56:7e:2f:
d3:85:64:86:bb:bf:d0:8e:89:00:0d:42:e0:34:0a:
2d:9b:43:25:65:5b:d2:d0:17:b8:bf:52:fa:3c:28:
03:b2:49:0e:b9:07:02:b7:da:c1:49:ea:68:f1:d7:
4e:a9:a0:80:b2:5d:d6:8b:34:cc:4f:3c:d5:78:e0:
d8:de:bc:7b:c5:f9:ac:32:4f:c7:69:b9:67:51:7d:
1c:73:ff:39:82:99:de:3c:8f:be:13:49:56:e0:9e:
7b:dd:cf:7a:8a:05:ff:9a:aa:ee:55:a6:00:15:1c:
02:17:0f:a1:fa:22:aa:15:9d:55:87:d6:af:ff:6f:
ff:28:92:76:a1:18:23:00:32:93:df:cf:03:71:3c:
4f:4c:53:b0:f7:a2:92:2a:68:4b:6e:d6:77:9e:42:
d4:25:96:c8:1a:0e:45:34:b9:12:78:bd:fa:7a:0b:
e2:72:88:e3:dd:09:b7:59:5f:af:85:5a:7c:d6:d7:
44:4d:1b:23:50:83:a3:64:5c:33:84:29:16:1d:03:
34:d9:a3:47:dd:fc:1d:bb:31:d3:d6:39:97:f2:65:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E0:8D:D5:45:34:8D:D6:ED:AB:B6:0C:07:FD:75:E8:0B:D1:EB:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/93d19a2f-3ba9-3beb-af63-6bbdb41e1029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:63:c0:25:44:09:0d:2d:72:08:c7:77:d7:5f:41:9b:88:fc:
d0:9e:31:7b:c0:8c:16:ae:62:6f:54:78:d7:51:f7:63:06:35:
34:91:5b:42:48:9e:b6:9b:f4:d1:57:c3:8f:9a:ec:0b:50:e7:
02:ec:14:9c:85:5f:b4:81:12:5f:fd:97:73:cb:16:e6:20:18:
3d:df:20:44:43:b1:61:93:7c:dc:0c:7c:19:ef:d2:2f:6e:92:
23:57:16:e8:16:7c:d7:64:91:4a:2d:08:a4:d6:23:2d:63:a7:
c2:12:55:8c:46:d7:45:41:0d:f0:09:c8:fa:a9:b9:14:ab:0d:
4a:78:d8:f6:52:ad:11:5b:35:ad:99:93:1b:7d:55:19:7c:83:
48:a8:14:08:9b:49:b7:b2:5f:10:83:2d:0a:da:34:fa:1f:bb:
e7:f3:19:8b:3c:24:79:6a:44:a5:08:91:19:0a:49:7c:bb:a4:
3a:01:c2:98:22:8e:fc:f5:bc:b7:15:d5:4b:f4:4c:9a:15:f8:
f3:c5:51:8f:1b:72:57:03:61:c0:7c:ce:70:ba:29:d6:50:ae:
a6:56:7a:29:4f:53:56:eb:41:6a:da:2e:d2:cc:6a:50:bd:04:
61:33:61:61:55:6b:ef:cf:5d:a6:e9:32:a3:4d:05:fd:1e:2c:
95:db:35:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnR0e+Z6m/TiT5w9UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI1MDUxMTE2NDA0NloXDTI1MDgwOTE2NDA0NlowLzEtMCsGA1UEAxMk
ZjFmZjNiOTgtMTlkZC00YjE0LWFjNTUtMzY1ZjBjODdiMWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIY64yRjAzNgceCWxPM0P+RY9pnIFWYGcKTK
TpaxD2yUCYmeiigAUXdWfi/ThWSGu7/QjokADULgNAotm0MlZVvS0Be4v1L6PCgD
skkOuQcCt9rBSepo8ddOqaCAsl3WizTMTzzVeODY3rx7xfmsMk/HablnUX0cc/85
gpnePI++E0lW4J573c96igX/mqruVaYAFRwCFw+h+iKqFZ1Vh9av/2//KJJ2oRgj
ADKT388DcTxPTFOw96KSKmhLbtZ3nkLUJZbIGg5FNLkSeL36egvicojj3Qm3WV+v
hVp81tdETRsjUIOjZFwzhCkWHQM02aNH3fwduzHT1jmX8mUciwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXgjdVFNI3W7au2DAf9degL0euiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvOTNkMTlhMmYtM2JhOS0z
YmViLWFmNjMtNmJiZGI0MWUxMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANjwCVECQ0tcgjHd9dfQZuI/NCeMXvAjBauYm9UeNdR92MGNTSRW0JI
nrab9NFXw4+a7AtQ5wLsFJyFX7SBEl/9l3PLFuYgGD3fIERDsWGTfNwMfBnv0i9u
kiNXFugWfNdkkUotCKTWIy1jp8ISVYxG10VBDfAJyPqpuRSrDUp42PZSrRFbNa2Z
kxt9VRl8g0ioFAibSbeyXxCDLQraNPofu+fzGYs8JHlqRKUIkRkKSXy7pDoBwpgi
jvz1vLcV1Uv0TJoV+PPFUY8bclcDYcB8znC6KdZQrqZWeilPU1brQWraLtLMalC9
BGEzYWFVa+/PXabpMqNNBf0eLJXbNdo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:25:56 2025 by rpki-client