Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5af3f9d9-c7aa-30f4-9e2c-0137879bbdb0.roa
File: 5af3f9d9-c7aa-30f4-9e2c-0137879bbdb0.roa (raw, json)
Hash identifier: pxjdIjHhG7uqHxcpJMEg6lcR+jkEu34816aZp5WFFP8=
Subject key identifier: 4E:49:38:4F:5B:39:ED:17:CB:53:F5:3B:F9:D9:F7:9B:98:31:60:C0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848900C46BC8B1C3698027CFFC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5af3f9d9-c7aa-30f4-9e2c-0137879bbdb0.roa
Signing time: Thu 16 Jan 2025 10:28:01 +0000
ROA not before: Thu 16 Jan 2025 10:28:01 +0000
ROA not after: Wed 16 Apr 2025 09:28:01 +0000
asID: 36530
IP address blocks: 104.243.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 08:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:0c:46:bc:8b:1c:36:98:02:7c:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 16 10:28:01 2025 GMT
Not After : Apr 16 09:28:01 2025 GMT
Subject: CN=9094f0f2-56f9-4477-885b-840b7b7a2538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:0b:1e:8f:20:04:59:39:90:8b:46:80:79:
ce:f1:9e:56:34:27:e6:5d:0c:78:68:22:8b:01:a6:
f4:86:6d:a8:2c:93:ad:fd:de:41:e8:d2:ca:36:6d:
d9:22:b6:8c:bd:ea:fe:ef:a3:ca:9f:ed:38:d6:9c:
d3:95:5c:00:f0:76:43:91:80:f3:59:87:ad:00:be:
06:44:44:bf:89:4d:c0:70:ab:4d:18:8c:7c:1e:1c:
56:fb:32:ad:97:67:47:f3:b9:98:23:bf:a1:de:35:
54:16:f8:06:16:fe:6d:e6:35:6c:ff:dd:74:cd:c9:
ca:9d:b8:11:b7:fd:ec:44:cd:78:8f:a0:77:e1:a4:
3d:f2:0d:8b:2a:fe:ac:dd:92:ee:e3:7b:c8:a1:b8:
49:fe:15:a3:89:ca:e1:e2:00:d5:84:8d:33:9f:67:
bd:96:c9:cb:d0:60:fd:e4:61:e5:77:da:39:b4:ab:
70:16:c5:19:02:d2:10:01:c1:72:3c:4f:45:79:79:
75:bc:da:7d:02:8e:4a:70:84:da:7d:16:6b:7c:dd:
b7:79:b3:c9:cd:8b:2d:7b:3c:55:64:3d:ad:f2:1f:
9b:0a:85:47:60:7d:2e:bb:6b:9a:5d:5a:85:a0:ee:
c1:b7:82:be:a9:83:21:a0:60:d3:15:e0:ca:5d:b0:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:49:38:4F:5B:39:ED:17:CB:53:F5:3B:F9:D9:F7:9B:98:31:60:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5af3f9d9-c7aa-30f4-9e2c-0137879bbdb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:fa:33:99:a3:d4:25:b0:5c:56:92:69:c9:03:20:47:23:b1:
c7:0c:38:ac:18:5c:a6:ae:79:71:21:80:2c:19:8e:ed:e7:fc:
e5:5b:e3:83:88:bb:7a:f5:3a:38:be:97:ff:b3:df:c3:c6:97:
18:33:a7:24:41:d3:84:56:d4:e7:c0:d8:0e:74:bf:50:2e:a4:
fc:15:bb:8c:76:ed:ed:b8:6f:65:e5:c5:49:52:d6:2c:dc:8c:
6a:67:4d:db:5a:37:f6:b1:6a:9c:0a:6a:16:5b:40:0d:5b:35:
59:32:f6:31:2c:d1:78:b1:19:db:9d:3a:d2:3f:ad:be:92:39:
5b:c9:2f:08:9e:db:0a:76:9c:e5:de:8b:8b:60:9a:0f:84:b4:
cf:f3:98:d9:09:6f:15:75:44:70:68:03:4c:53:02:3b:da:e2:
d1:ce:7e:22:2c:ec:69:9f:ef:43:d0:50:71:51:fd:6d:54:9e:
8f:23:70:bf:99:95:6b:ea:33:7c:8a:83:c9:7d:c5:99:7b:f9:
12:53:de:bf:1d:02:39:a2:97:aa:f9:40:0b:3c:ec:10:78:4d:
c8:7c:1e:53:db:6c:ae:5e:48:14:84:8d:b4:1c:36:06:7e:2c:
0d:54:1e:eb:06:54:f2:0e:5e:7d:c0:df:78:51:61:a2:31:54:
ba:59:0c:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQDEa8ixw2mAJ8/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDExNjEwMjgwMVoXDTI1MDQxNjA5MjgwMVowLzEtMCsGA1UEAxMk
OTA5NGYwZjItNTZmOS00NDc3LTg4NWItODQwYjdiN2EyNTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z8LHo8gBFk5kItGgHnO8Z5WNCfmXQx4aCKL
Aab0hm2oLJOt/d5B6NLKNm3ZIraMver+76PKn+041pzTlVwA8HZDkYDzWYetAL4G
RES/iU3AcKtNGIx8HhxW+zKtl2dH87mYI7+h3jVUFvgGFv5t5jVs/910zcnKnbgR
t/3sRM14j6B34aQ98g2LKv6s3ZLu43vIobhJ/hWjicrh4gDVhI0zn2e9lsnL0GD9
5GHld9o5tKtwFsUZAtIQAcFyPE9FeXl1vNp9Ao5KcITafRZrfN23ebPJzYstezxV
ZD2t8h+bCoVHYH0uu2uaXVqFoO7Bt4K+qYMhoGDTFeDKXbBDdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5JOE9bOe0Xy1P1O/nZ95uYMWDAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWFmM2Y5ZDktYzdhYS0z
MGY0LTllMmMtMDEzNzg3OWJiZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFH6M5mj1CWwXFaSackDIEcjsccMOKwYXKaueXEhgCwZju3n/OVb44OI
u3r1Oji+l/+z38PGlxgzpyRB04RW1OfA2A50v1AupPwVu4x27e24b2XlxUlS1izc
jGpnTdtaN/axapwKahZbQA1bNVky9jEs0XixGdudOtI/rb6SOVvJLwie2wp2nOXe
i4tgmg+EtM/zmNkJbxV1RHBoA0xTAjva4tHOfiIs7Gmf70PQUHFR/W1Uno8jcL+Z
lWvqM3yKg8l9xZl7+RJT3r8dAjmil6r5QAs87BB4Tch8HlPbbK5eSBSEjbQcNgZ+
LA1UHusGVPIOXn3A33hRYaIxVLpZDEQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:48 2025 by rpki-client