Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bd97df7-540a-3a5c-ad88-596f91089dcf.roa
File: 0bd97df7-540a-3a5c-ad88-596f91089dcf.roa (raw, json)
Hash identifier: Ri5daGHqdfyYFTXzG0VTEM8rFdxdtRe7Vy+bvkWXnLs=
Subject key identifier: E5:CF:31:D4:3D:85:02:69:9B:9A:6B:54:89:9C:08:25:6D:28:B2:23
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B737D74B786D6CBC966AC280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bd97df7-540a-3a5c-ad88-596f91089dcf.roa
Signing time: Thu 30 Jan 2025 11:12:20 +0000
ROA not before: Thu 30 Jan 2025 11:12:20 +0000
ROA not after: Wed 30 Apr 2025 10:12:20 +0000
asID: 30036
IP address blocks: 2604:2d80:3480::/41 maxlen: 41
Validation: Failed, certificate revoked on Thu 20 Mar 2025 10:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:37:d7:4b:78:6d:6c:bc:96:6a:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:12:20 2025 GMT
Not After : Apr 30 10:12:20 2025 GMT
Subject: CN=05b2ff0e-00db-47fa-8fe1-d15ff80ec083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:ee:fd:5c:f5:db:9e:ca:85:42:52:8e:05:
d4:78:c3:9a:3c:8d:13:fb:1d:60:bf:cd:1b:f5:29:
b7:22:47:5d:d0:65:9a:4f:ae:14:03:6f:fa:55:22:
a0:90:09:07:f1:be:7c:25:ac:53:ee:84:e3:63:24:
04:e1:ea:b4:40:b5:e6:53:6c:27:55:61:df:f4:f5:
94:6a:6b:48:20:4a:d7:36:5e:08:fb:b7:bd:76:db:
cd:2c:7d:ec:da:d6:82:e1:82:94:c7:01:30:60:46:
14:2d:0d:90:b2:32:fb:e2:3d:e0:2b:2d:4a:51:74:
3b:d1:c1:55:73:37:90:02:c6:40:cc:eb:84:bf:38:
67:bc:aa:c9:e5:37:bb:a4:00:52:1c:20:fb:9d:7d:
79:e5:a4:0e:88:8d:3f:c2:5a:c8:18:85:66:42:70:
05:d4:32:9c:c3:0c:27:d1:85:fc:40:1f:55:38:a5:
1b:36:c3:3e:8d:04:06:15:dc:84:c3:6f:36:da:ed:
b5:f7:ee:de:07:8b:44:18:97:30:b5:33:20:af:d4:
c8:8b:52:3b:47:b9:e1:62:79:88:70:54:10:fc:64:
ff:20:8c:b3:e2:58:09:48:83:bb:b4:01:df:3e:85:
82:9a:95:ac:24:23:30:a9:33:37:ab:54:e1:e6:6b:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:31:D4:3D:85:02:69:9B:9A:6B:54:89:9C:08:25:6D:28:B2:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bd97df7-540a-3a5c-ad88-596f91089dcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3480::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:8d:e5:8f:4c:42:d5:5b:56:3c:5f:ec:31:07:1d:db:b7:f8:
34:e4:79:18:e3:92:93:85:79:a8:9e:b1:b5:7f:10:88:4e:0e:
11:86:07:ec:13:86:35:7a:5a:41:68:63:37:ff:db:73:af:42:
b6:06:5a:07:a7:fe:69:7e:91:a1:66:03:eb:48:fb:eb:7c:6d:
4f:e1:26:25:d2:f5:3b:96:ce:46:e7:64:11:8a:ff:38:25:7d:
9c:4d:d7:0d:24:44:7f:59:d4:7e:31:ef:2d:c3:20:c1:ee:fd:
e5:c1:7e:94:aa:45:8b:69:5d:cf:d3:a0:e8:b7:18:88:b7:b1:
52:34:6a:4b:ab:f4:50:5a:f6:35:7a:92:cc:7c:70:0d:05:03:
e8:9d:1a:df:8c:1c:bc:a2:37:38:7a:b5:c0:41:22:12:70:4a:
f4:1d:07:bc:cc:89:d9:1d:4a:34:f2:e3:71:9c:05:3a:3f:7b:
0b:d2:0d:16:64:62:71:70:5f:f0:62:af:c6:65:5f:3c:97:70:
5f:5f:4e:36:8a:00:ca:c6:e7:68:df:34:e8:6f:b2:e4:4b:dc:
2b:ad:33:e4:9c:98:7b:bd:95:0a:ca:f4:bb:b4:d2:3c:d8:09:
70:e2:49:ce:d9:da:c8:b3:76:ae:11:ce:42:56:9e:3e:96:11:
43:38:5b:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi3N9dLeG1svJZqwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDEzMDExMTIyMFoXDTI1MDQzMDEwMTIyMFowLzEtMCsGA1UEAxMk
MDViMmZmMGUtMDBkYi00N2ZhLThmZTEtZDE1ZmY4MGVjMDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Lu/Vz1257KhUJSjgXUeMOaPI0T+x1gv80b
9Sm3Ikdd0GWaT64UA2/6VSKgkAkH8b58JaxT7oTjYyQE4eq0QLXmU2wnVWHf9PWU
amtIIErXNl4I+7e9dtvNLH3s2taC4YKUxwEwYEYULQ2QsjL74j3gKy1KUXQ70cFV
czeQAsZAzOuEvzhnvKrJ5Te7pABSHCD7nX155aQOiI0/wlrIGIVmQnAF1DKcwwwn
0YX8QB9VOKUbNsM+jQQGFdyEw2822u219+7eB4tEGJcwtTMgr9TIi1I7R7nhYnmI
cFQQ/GT/IIyz4lgJSIO7tAHfPoWCmpWsJCMwqTM3q1Th5mtCGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOXPMdQ9hQJpm5prVImcCCVtKLIjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGJkOTdkZjctNTQwYS0z
YTVjLWFkODgtNTk2ZjkxMDg5ZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDSA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6N5Y9MQtVbVjxf7DEHHdu3+DTkeRjjkpOFeaiesbV/EIhODhGG
B+wThjV6WkFoYzf/23OvQrYGWgen/ml+kaFmA+tI++t8bU/hJiXS9TuWzkbnZBGK
/zglfZxN1w0kRH9Z1H4x7y3DIMHu/eXBfpSqRYtpXc/ToOi3GIi3sVI0akur9FBa
9jV6ksx8cA0FA+idGt+MHLyiNzh6tcBBIhJwSvQdB7zMidkdSjTy43GcBTo/ewvS
DRZkYnFwX/Bir8ZlXzyXcF9fTjaKAMrG52jfNOhvsuRL3CutM+ScmHu9lQrK9Lu0
0jzYCXDiSc7Z2sizdq4RzkJWnj6WEUM4Wyc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:46:52 2025 by rpki-client