Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/11380c55-52c9-3128-ac4f-1abdc9f612ff.roa
File: 11380c55-52c9-3128-ac4f-1abdc9f612ff.roa (raw, json)
Hash identifier: /CbcczrF1cKj5xFt4przhJ0aaFVjgntEzN7dqnGceZ0=
Subject key identifier: 6D:45:77:00:5D:DF:3D:BA:FE:79:FD:34:19:84:86:10:0F:37:0B:66
Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial: 010D0C9F432858489BA0B576005870C871CEAA00
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/11380c55-52c9-3128-ac4f-1abdc9f612ff.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 26658
IP address blocks: 172.87.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 31 Mar 2025 08:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b5:76:00:58:70:c8:71:ce:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=39faada6-a2d1-47ab-b95a-d00144274594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:dd:9f:53:e6:83:89:15:64:06:3a:b2:b2:
a3:85:52:ed:74:12:9e:61:cc:f1:eb:1d:d7:63:5b:
19:44:82:f5:2f:bf:a2:f1:a4:cf:16:04:d8:58:fe:
8c:82:6d:02:0b:a1:47:a5:57:16:cc:8c:07:2f:bf:
72:d4:94:c5:eb:9c:b7:32:b4:a9:cf:97:c0:b8:ce:
2a:fd:60:0c:f1:1a:39:6c:97:d6:d8:f5:18:02:56:
a0:4b:94:d1:1c:28:cb:c0:6a:18:95:bc:fe:d4:98:
17:22:20:2e:7b:28:70:6b:8d:cc:9e:e5:47:c1:e4:
ee:c9:bf:16:11:2b:88:23:b0:7b:80:24:40:dd:de:
d7:dd:ff:c0:74:f9:c6:3d:8a:18:ed:39:14:1b:cd:
43:6f:2e:5a:e5:cc:b7:da:d4:f3:97:0a:7b:f2:42:
38:c4:45:e0:58:aa:83:c5:df:8d:c0:74:fd:f1:10:
30:cf:f1:50:53:31:9b:39:20:be:6f:82:f3:aa:41:
3a:42:8c:52:71:9e:ef:e2:a8:65:d0:c2:84:fa:3a:
83:7b:a3:87:bd:ae:82:b0:0f:83:a6:34:39:26:ab:
37:da:b7:fb:dc:6f:21:2d:74:9c:39:e4:88:12:a4:
cf:06:2a:56:97:3e:3b:78:06:b9:65:69:02:91:b1:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:77:00:5D:DF:3D:BA:FE:79:FD:34:19:84:86:10:0F:37:0B:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/11380c55-52c9-3128-ac4f-1abdc9f612ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
X509v3 Authority Key Identifier:
keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.87.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:41:f3:c7:4e:38:4e:54:89:37:0d:9f:ef:f5:70:6f:d1:8d:
77:17:d9:e2:fe:74:7a:2a:e7:af:ad:a9:5f:97:ba:b4:ed:04:
f9:ae:ea:7d:97:c2:e2:ac:6e:38:59:2a:49:49:d0:4e:19:74:
18:ba:d1:ff:d4:44:ec:85:e0:b9:e7:c2:f3:ab:d7:e4:24:2e:
65:01:41:89:05:f5:18:da:0a:60:29:31:95:c1:55:9c:4b:b2:
d6:69:11:c6:a8:f2:e4:18:a1:4c:ba:6b:67:e3:da:23:18:cf:
5a:ee:d8:ff:d5:18:31:a6:a2:d7:d6:f0:2c:ae:17:72:55:6f:
ea:7c:a1:3b:6f:f4:63:ff:82:94:8f:4f:85:9f:c8:e2:af:36:
b2:b4:89:56:a3:d5:3b:e0:3d:ab:1b:90:22:c2:80:80:7c:bc:
d1:6e:e1:f9:ef:b9:8e:96:98:a3:45:df:f5:ff:e8:09:a5:35:
a5:ec:f4:1e:fb:e2:e5:ee:c9:0f:05:7c:86:de:2d:17:b2:8a:
f2:e7:08:cc:7f:b2:f8:69:71:f8:d8:f4:88:10:09:9f:94:d6:
20:c0:cc:00:68:33:40:b6:72:59:d8:7b:54:ee:cd:83:45:b3:
88:87:79:1c:44:b0:97:d0:3e:c9:c5:60:bb:f8:59:4c:26:50:
8a:29:79:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLV2AFhwyHHOqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0
YTZkMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
MzlmYWFkYTYtYTJkMS00N2FiLWI5NWEtZDAwMTQ0Mjc0NTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibTdn1Pmg4kVZAY6srKjhVLtdBKeYczx6x3X
Y1sZRIL1L7+i8aTPFgTYWP6Mgm0CC6FHpVcWzIwHL79y1JTF65y3MrSpz5fAuM4q
/WAM8Ro5bJfW2PUYAlagS5TRHCjLwGoYlbz+1JgXIiAueyhwa43MnuVHweTuyb8W
ESuII7B7gCRA3d7X3f/AdPnGPYoY7TkUG81Dby5a5cy32tTzlwp78kI4xEXgWKqD
xd+NwHT98RAwz/FQUzGbOSC+b4LzqkE6QoxScZ7v4qhl0MKE+jqDe6OHva6CsA+D
pjQ5Jqs32rf73G8hLXScOeSIEqTPBipWlz47eAa5ZWkCkbGykwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1FdwBd3z26/nn9NBmEhhAPNwtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5
YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMTEzODBjNTUtNTJjOS0z
MTI4LWFjNGYtMWFiZGM5ZjYxMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj
ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2
NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3
MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrFfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1B88dOOE5UiTcNn+/1cG/RjXcX2eL+dHoq56+tqV+XurTtBPmu6n2X
wuKsbjhZKklJ0E4ZdBi60f/UROyF4LnnwvOr1+QkLmUBQYkF9RjaCmApMZXBVZxL
stZpEcao8uQYoUy6a2fj2iMYz1ru2P/VGDGmotfW8CyuF3JVb+p8oTtv9GP/gpSP
T4WfyOKvNrK0iVaj1TvgPasbkCLCgIB8vNFu4fnvuY6WmKNF3/X/6AmlNaXs9B77
4uXuyQ8FfIbeLReyivLnCMx/svhpcfjY9IgQCZ+U1iDAzABoM0C2clnYe1TuzYNF
s4iHeRxEsJfQPsnFYLv4WUwmUIopeVw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:05 2025 by rpki-client