Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f604379e-6f48-3522-9f2c-199518f99f28.roa
File: f604379e-6f48-3522-9f2c-199518f99f28.roa (raw, json)
Hash identifier: JJVKiqNUHm2sutg7q+K1gxKg1x4kti47QGXt0B/9vUU=
Subject key identifier: 52:A9:B3:3E:8C:63:06:E9:06:89:31:10:B8:06:67:71:9C:3F:08:EA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858489DCA6867C9AE76D3C2E89B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f604379e-6f48-3522-9f2c-199518f99f28.roa
Signing time: Tue 21 Jan 2025 08:36:37 +0000
ROA not before: Tue 21 Jan 2025 08:36:37 +0000
ROA not after: Mon 21 Apr 2025 07:36:37 +0000
asID: 396982
IP address blocks: 208.76.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 22:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:ca:68:67:c9:ae:76:d3:c2:e8:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 21 08:36:37 2025 GMT
Not After : Apr 21 07:36:37 2025 GMT
Subject: CN=43324a33-b27c-4160-a29e-6acb74331cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:92:9e:71:af:8c:c7:bf:b4:ec:74:b9:d8:
bb:51:80:29:cf:fc:3c:68:3b:e5:e1:a8:9e:dc:2b:
ca:2e:a1:9e:74:78:2f:b1:19:5c:5f:50:01:b9:7a:
15:46:6f:d9:ec:69:63:1e:51:d8:75:f4:4e:3f:a0:
8a:fe:6a:4a:66:2d:2b:43:77:1f:c0:98:54:64:90:
96:c1:59:ae:d7:96:6f:94:ad:d0:e0:7d:56:10:be:
6b:c8:ee:64:ff:4b:2d:9c:dc:20:47:9c:44:c3:e3:
f8:90:8b:02:b5:c8:91:a6:48:8c:1a:eb:f3:8b:86:
1d:d7:66:f8:00:fe:92:d2:fd:c3:f4:aa:b3:d7:f3:
f7:e4:26:d4:54:1f:a1:27:5a:b8:9a:cb:83:c9:12:
e4:91:5a:ed:25:db:07:e1:fe:6d:f2:89:66:1d:cb:
ba:bb:ad:a8:f1:fb:03:ac:a3:e8:6f:ce:7d:79:72:
b5:c9:b4:86:00:af:e7:09:ae:a5:70:ce:ac:87:8b:
5f:ec:9d:0f:42:d3:80:87:e1:6b:db:eb:30:c9:47:
3c:5d:c9:a8:bc:d3:77:d0:83:0c:c1:6c:f9:f9:69:
88:7a:d6:ce:5d:8d:54:09:3a:09:32:51:f1:76:6a:
a2:f4:69:c7:f0:31:4e:5f:6b:ab:70:b1:cb:01:ed:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:B3:3E:8C:63:06:E9:06:89:31:10:B8:06:67:71:9C:3F:08:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f604379e-6f48-3522-9f2c-199518f99f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ed:d4:5e:12:a1:9c:9e:d0:20:9c:65:7a:29:a6:dd:58:7b:
11:37:4e:1b:f8:44:cb:5e:13:17:3d:83:bc:d7:25:20:c5:f7:
cc:51:90:ac:59:a5:aa:48:f8:44:4f:60:ab:4d:fa:00:36:e6:
7d:2a:94:e3:94:2d:71:7f:af:92:66:de:7e:ac:2d:39:8a:c9:
36:e1:0e:28:92:46:67:45:7a:e0:b5:e2:19:7d:b4:2b:eb:12:
e8:dd:a6:93:31:f9:ee:0d:e0:76:c8:56:3f:47:5a:be:26:e9:
60:71:c0:b4:35:4c:25:d0:fc:73:78:59:f6:ed:4c:e4:3d:1b:
ac:2d:37:57:cb:61:43:34:6f:1b:ef:89:bc:6e:22:3d:b1:03:
14:45:2f:64:30:a0:38:b5:06:18:b6:4f:7c:39:5d:f5:f5:c8:
f3:22:31:39:ef:91:e5:ad:f0:55:76:85:92:bb:f1:b1:74:8c:
fe:e0:19:ee:86:fe:29:76:11:d6:ec:eb:d5:68:98:13:4f:2b:
f6:98:b4:eb:03:d1:2a:b8:20:71:f2:78:10:7f:54:32:fb:a0:
e2:73:b0:82:0b:80:39:4e:45:4b:79:da:71:b9:dd:71:5f:d8:
6b:08:dd:57:23:b8:06:4c:24:17:ae:d1:e6:74:90:1c:24:da:
64:b8:04:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidymhnya5208LomwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDEyMTA4MzYzN1oXDTI1MDQyMTA3MzYzN1owLzEtMCsGA1UEAxMk
NDMzMjRhMzMtYjI3Yy00MTYwLWEyOWUtNmFjYjc0MzMxY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TaSnnGvjMe/tOx0udi7UYApz/w8aDvl4aie
3CvKLqGedHgvsRlcX1ABuXoVRm/Z7GljHlHYdfROP6CK/mpKZi0rQ3cfwJhUZJCW
wVmu15ZvlK3Q4H1WEL5ryO5k/0stnNwgR5xEw+P4kIsCtciRpkiMGuvzi4Yd12b4
AP6S0v3D9Kqz1/P35CbUVB+hJ1q4msuDyRLkkVrtJdsH4f5t8olmHcu6u62o8fsD
rKPob859eXK1ybSGAK/nCa6lcM6sh4tf7J0PQtOAh+Fr2+swyUc8XcmovNN30IMM
wWz5+WmIetbOXY1UCToJMlHxdmqi9GnH8DFOX2urcLHLAe3cXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKpsz6MYwbpBokxELgGZ3GcPwjqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjYwNDM3OWUtNmY0OC0z
NTIyLTlmMmMtMTk5NTE4Zjk5ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTt1F4SoZye0CCcZXoppt1YexE3Thv4RMteExc9g7zXJSDF98xRkKxZ
papI+ERPYKtN+gA25n0qlOOULXF/r5Jm3n6sLTmKyTbhDiiSRmdFeuC14hl9tCvr
EujdppMx+e4N4HbIVj9HWr4m6WBxwLQ1TCXQ/HN4WfbtTOQ9G6wtN1fLYUM0bxvv
ibxuIj2xAxRFL2QwoDi1Bhi2T3w5XfX1yPMiMTnvkeWt8FV2hZK78bF0jP7gGe6G
/il2Edbs69VomBNPK/aYtOsD0Sq4IHHyeBB/VDL7oOJzsIILgDlORUt52nG53XFf
2GsI3VcjuAZMJBeu0eZ0kBwk2mS4BDA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:54:56 2025 by rpki-client