Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/7eee69df-ceb7-3890-8794-6d3d8100094a.roa
File: 7eee69df-ceb7-3890-8794-6d3d8100094a.roa (raw, json)
Hash identifier: Xbd9L+nR2bBzaixBMg/uX9bdStUpRd+NFzu8CmoVFG8=
Subject key identifier: 03:E0:18:D3:F9:36:98:AE:D1:22:1B:14:D2:29:D8:F9:D1:C6:E9:C1
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F43285848DBD66866C9C38F57FDC71C80
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/7eee69df-ceb7-3890-8794-6d3d8100094a.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 393529
IP address blocks: 160.129.0.0/22 maxlen: 22
160.129.4.0/22 maxlen: 22
160.129.8.0/22 maxlen: 22
160.129.12.0/22 maxlen: 22
160.129.16.0/22 maxlen: 22
160.129.20.0/22 maxlen: 22
160.129.24.0/22 maxlen: 22
160.129.28.0/22 maxlen: 22
160.129.32.0/22 maxlen: 22
160.129.36.0/22 maxlen: 22
160.129.40.0/22 maxlen: 22
160.129.44.0/22 maxlen: 22
160.129.48.0/22 maxlen: 22
160.129.52.0/22 maxlen: 22
160.129.56.0/22 maxlen: 22
160.129.60.0/22 maxlen: 22
160.129.64.0/22 maxlen: 22
160.129.68.0/22 maxlen: 22
160.129.72.0/22 maxlen: 22
160.129.76.0/22 maxlen: 22
160.129.80.0/22 maxlen: 22
160.129.84.0/22 maxlen: 22
160.129.88.0/22 maxlen: 22
160.129.92.0/22 maxlen: 22
160.129.96.0/22 maxlen: 22
160.129.100.0/22 maxlen: 22
160.129.104.0/22 maxlen: 22
160.129.108.0/22 maxlen: 22
160.129.112.0/22 maxlen: 22
160.129.116.0/22 maxlen: 22
160.129.120.0/22 maxlen: 22
160.129.124.0/22 maxlen: 22
160.129.128.0/22 maxlen: 22
160.129.132.0/22 maxlen: 22
160.129.136.0/22 maxlen: 22
160.129.140.0/22 maxlen: 22
160.129.144.0/22 maxlen: 22
160.129.148.0/22 maxlen: 22
160.129.152.0/22 maxlen: 22
160.129.156.0/22 maxlen: 22
160.129.160.0/22 maxlen: 22
160.129.164.0/22 maxlen: 22
160.129.168.0/22 maxlen: 22
160.129.172.0/22 maxlen: 22
160.129.176.0/22 maxlen: 22
160.129.180.0/22 maxlen: 22
160.129.184.0/22 maxlen: 22
160.129.188.0/22 maxlen: 22
160.129.192.0/22 maxlen: 22
160.129.196.0/22 maxlen: 22
160.129.200.0/22 maxlen: 22
160.129.204.0/22 maxlen: 22
160.129.208.0/22 maxlen: 22
160.129.212.0/22 maxlen: 22
160.129.216.0/22 maxlen: 22
160.129.220.0/22 maxlen: 22
160.129.224.0/22 maxlen: 22
160.129.228.0/22 maxlen: 22
160.129.232.0/22 maxlen: 22
160.129.236.0/22 maxlen: 22
160.129.240.0/22 maxlen: 22
160.129.244.0/22 maxlen: 22
160.129.248.0/22 maxlen: 22
160.129.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Mar 2025 18:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:68:66:c9:c3:8f:57:fd:c7:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=aee2def9-45c6-4e37-b258-5d3e082f8fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:f4:2e:2d:8c:de:da:64:9f:14:74:ec:69:
f6:df:11:dc:62:f4:a5:c0:cc:8b:23:71:bf:50:f7:
77:a2:93:d4:39:68:b7:39:2c:d3:4b:ac:02:17:70:
57:03:dd:82:68:4e:26:ee:80:f7:82:0b:e0:e6:a8:
27:f2:43:3b:18:a0:1e:c5:3f:e3:14:84:44:98:b3:
12:2f:40:71:0b:ae:03:ea:fb:ec:bb:bd:8a:83:f4:
27:d6:25:01:ed:ec:2d:88:3d:f9:75:9f:c4:5a:84:
77:76:b9:f1:21:09:da:30:2e:e0:b7:da:0e:f1:40:
6e:10:c8:6a:62:5d:ca:8f:d7:cb:bd:cf:ad:4a:be:
08:1c:41:4c:5f:c7:70:81:e0:98:b6:03:9a:44:1c:
c7:ce:8c:18:8b:02:3d:9a:62:0e:15:2c:62:3e:21:
7f:e4:87:28:d9:10:00:67:ea:63:44:68:8c:c4:b1:
d1:f2:e0:83:21:8b:6d:96:fb:36:36:12:60:29:bd:
43:2e:91:51:be:43:8e:a8:d0:0d:52:62:c7:a3:75:
f3:86:6d:cc:ba:20:23:62:37:39:1c:47:8b:10:60:
8b:c7:c8:23:55:2d:a3:36:3d:93:91:52:12:04:d3:
e0:a0:b5:86:01:66:5d:47:aa:ad:23:de:56:a1:9d:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:18:D3:F9:36:98:AE:D1:22:1B:14:D2:29:D8:F9:D1:C6:E9:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/7eee69df-ceb7-3890-8794-6d3d8100094a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:72:00:7b:3f:cc:b1:2a:a8:b3:80:e6:d7:17:84:f0:ef:6d:
0d:1b:4b:44:c8:e1:7c:34:c5:0b:11:91:ac:48:f5:49:83:57:
25:44:81:98:55:f0:eb:ee:f6:a0:2b:6b:9a:d6:7b:d8:a6:ae:
94:b7:a3:6f:c5:00:2c:29:ed:ea:4f:82:6b:7a:e7:a1:b2:f8:
b1:72:f5:d3:f8:df:06:e7:75:a3:f5:e6:2b:12:1a:3c:e4:3a:
52:16:70:7e:15:31:91:31:bc:13:cd:c1:0e:3a:19:f6:84:7a:
44:3c:c0:c2:ec:77:1e:2f:22:dc:d2:f4:61:58:02:0a:22:91:
74:fc:14:05:47:fa:9d:e4:3c:ba:5f:ff:d7:d2:18:81:2e:c1:
ef:51:6b:cb:e5:5e:9b:5b:61:c9:5b:70:c6:e0:6d:ed:47:5d:
ca:24:e4:72:60:3d:5e:dd:fc:a8:23:54:3f:a0:60:e7:65:cb:
f6:6b:ab:2e:77:c7:24:e6:d2:bc:84:d7:d9:22:8d:4a:1e:a8:
09:33:54:cb:6e:81:f8:08:51:4b:a2:16:da:19:76:03:85:39:
81:a6:81:ca:9d:02:49:a0:1a:1f:c0:3a:ee:0d:9d:a8:72:af:
b2:a0:2b:89:d5:84:41:67:be:2a:ab:79:05:89:a5:42:77:b0:
14:6f:cf:ff
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjb1mhmycOPV/3HHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2Jh
MDFlMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
YWVlMmRlZjktNDVjNi00ZTM3LWIyNTgtNWQzZTA4MmY4ZmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9n0Li2M3tpknxR07Gn23xHcYvSlwMyLI3G/
UPd3opPUOWi3OSzTS6wCF3BXA92CaE4m7oD3ggvg5qgn8kM7GKAexT/jFIREmLMS
L0BxC64D6vvsu72Kg/Qn1iUB7ewtiD35dZ/EWoR3drnxIQnaMC7gt9oO8UBuEMhq
Yl3Kj9fLvc+tSr4IHEFMX8dwgeCYtgOaRBzHzowYiwI9mmIOFSxiPiF/5Ico2RAA
Z+pjRGiMxLHR8uCDIYttlvs2NhJgKb1DLpFRvkOOqNANUmLHo3Xzhm3MuiAjYjc5
HEeLEGCLx8gjVS2jNj2TkVISBNPgoLWGAWZdR6qtI95WoZ25wwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAPgGNP5Npiu0SIbFNIp2PnRxunBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFm
Y2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvN2VlZTY5ZGYtY2ViNy0z
ODkwLTg3OTQtNmQzZDgxMDAwOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGQxZmNhNzgtOWQ5OC00NTU5LWJk
NTEtODBhNmM0N2JhMDFlLzBkMWZjYTc4LTlkOTgtNDU1OS1iZDUxLTgwYTZjNDdi
YTAxZS5jcmwwHwYDVR0jBBgwFoAUymGb6KykOgfQv2pfW6o/1CDpWtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2
YzQ3YmEwMWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoIEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAO3IAez/MsSqos4Dm1xeE8O9tDRtLRMjhfDTFCxGRrEj1SYNXJUSBmFXw
6+72oCtrmtZ72KaulLejb8UALCnt6k+Ca3rnobL4sXL10/jfBud1o/XmKxIaPOQ6
UhZwfhUxkTG8E83BDjoZ9oR6RDzAwux3Hi8i3NL0YVgCCiKRdPwUBUf6neQ8ul//
19IYgS7B71Fry+Vem1thyVtwxuBt7UddyiTkcmA9Xt38qCNUP6Bg52XL9murLnfH
JObSvITX2SKNSh6oCTNUy26B+AhRS6IW2hl2A4U5gaaByp0CSaAaH8A67g2dqHKv
sqAridWEQWe+Kqt5BYmlQnewFG/P/w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:43:06 2025 by rpki-client