Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5f4ee19-a7bb-3539-96dd-2bdffd2756be.roa
File: a5f4ee19-a7bb-3539-96dd-2bdffd2756be.roa (raw, json)
Hash identifier: khXJhW4aNARJm8/kCAh9t5Voszf4N+3jBBFPJPntvbk=
Subject key identifier: 1C:21:B7:A4:14:3D:CE:F3:F4:36:E0:A6:B1:1D:92:FA:D5:7B:41:3E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2635386FD597112B29FA880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5f4ee19-a7bb-3539-96dd-2bdffd2756be.roa
Signing time: Mon 03 Feb 2025 11:13:50 +0000
ROA not before: Mon 03 Feb 2025 11:13:50 +0000
ROA not after: Sun 04 May 2025 10:13:50 +0000
asID: 30036
IP address blocks: 173.22.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 19:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:63:53:86:fd:59:71:12:b2:9f:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:13:50 2025 GMT
Not After : May 4 10:13:50 2025 GMT
Subject: CN=70f76707-e7b7-4762-a4a7-8ca78a67c9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:db:f8:9e:66:be:1d:b0:25:f1:6c:83:7e:cc:
a2:01:05:fc:38:71:1e:a6:25:39:44:cf:36:72:30:
92:d9:c0:2d:c9:35:29:9a:b1:8d:62:6c:35:d6:97:
0f:dc:cd:87:15:47:d8:a7:45:0c:ef:3c:c4:52:e2:
96:c4:4e:56:5f:fb:b8:eb:2d:89:45:35:19:df:b7:
32:82:8e:33:36:15:5d:5c:78:3a:e1:fb:31:c7:f0:
e5:10:57:f4:31:06:f8:67:67:3a:08:7d:ab:4b:1a:
5c:ca:42:ff:9a:13:94:00:09:ef:eb:7b:21:1b:2a:
33:ec:e0:d5:bf:3b:88:31:5b:3b:63:6b:e9:2c:37:
be:d7:39:bd:e0:93:9c:26:f9:f7:f3:09:71:c6:9a:
b1:66:27:65:7c:d0:84:9e:9a:f2:56:7a:87:a6:d5:
d6:cf:2f:5e:fd:75:69:af:86:0a:b3:cf:6c:25:a5:
a2:76:b0:ef:95:24:b9:3d:15:7c:5d:76:89:ab:d4:
dc:ea:55:4a:46:92:cf:b9:71:a1:98:7a:54:cc:ee:
6e:e7:45:eb:e8:63:aa:7a:e9:c2:4e:3a:68:71:02:
55:a4:c0:79:cc:6b:fa:bc:76:7c:43:18:14:83:e2:
6e:08:38:fa:b6:30:50:03:6f:43:0a:d3:47:8c:83:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:B7:A4:14:3D:CE:F3:F4:36:E0:A6:B1:1D:92:FA:D5:7B:41:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5f4ee19-a7bb-3539-96dd-2bdffd2756be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:34:ee:2b:83:fd:4e:0e:ea:00:95:cd:53:06:40:a8:cc:c8:
e8:3d:e5:58:e0:b9:dc:98:78:37:7f:23:ad:09:cd:39:68:dd:
22:bf:68:36:c6:49:56:45:a3:c1:e9:b1:d0:e6:2c:68:c2:a3:
a6:2b:6c:1f:d4:cf:06:25:74:cb:8b:43:a3:f5:cb:79:c0:ca:
ae:a4:7c:b8:a1:8f:df:3c:fa:e6:a3:49:2d:a3:4d:36:91:dd:
bf:30:b8:58:9b:42:10:16:55:4f:04:44:16:c4:ab:af:30:63:
63:d7:28:d3:9a:c4:76:36:c3:65:f1:23:1b:49:bb:bb:4d:bb:
f0:e2:dc:63:28:7e:95:2b:6b:70:21:29:57:8e:f5:10:a8:4f:
11:5e:aa:30:d3:3f:19:f9:e6:36:0a:e7:7b:cd:ea:fb:f0:48:
06:af:39:70:a5:82:97:c3:c2:95:d0:5f:12:5f:92:df:5e:59:
ba:7f:27:f7:53:97:09:29:58:3a:d7:52:5c:52:14:4c:5e:8a:
e0:2c:04:c8:c2:b8:8c:d4:72:d8:d3:3e:b9:55:84:aa:75:0d:
00:91:01:81:65:b5:0c:30:32:15:9c:ae:50:d9:a0:9d:81:1c:
ed:2d:e6:14:89:c6:e1:4c:80:10:b8:d5:85:00:bf:37:59:6f:
33:ac:28:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCY1OG/VlxErKfqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTM1MFoXDTI1MDUwNDEwMTM1MFowLzEtMCsGA1UEAxMk
NzBmNzY3MDctZTdiNy00NzYyLWE0YTctOGNhNzhhNjdjOWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdv4nma+HbAl8WyDfsyiAQX8OHEepiU5RM82
cjCS2cAtyTUpmrGNYmw11pcP3M2HFUfYp0UM7zzEUuKWxE5WX/u46y2JRTUZ37cy
go4zNhVdXHg64fsxx/DlEFf0MQb4Z2c6CH2rSxpcykL/mhOUAAnv63shGyoz7ODV
vzuIMVs7Y2vpLDe+1zm94JOcJvn38wlxxpqxZidlfNCEnpryVnqHptXWzy9e/XVp
r4YKs89sJaWidrDvlSS5PRV8XXaJq9Tc6lVKRpLPuXGhmHpUzO5u50Xr6GOqeunC
TjpocQJVpMB5zGv6vHZ8QxgUg+JuCDj6tjBQA29DCtNHjIPMtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwht6QUPc7z9DbgprEdkvrVe0E+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTVmNGVlMTktYTdiYi0z
NTM5LTk2ZGQtMmJkZmZkMjc1NmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHg07iuD/U4O6gCVzVMGQKjMyOg95VjgudyYeDd/I60JzTlo3SK/aDbG
SVZFo8HpsdDmLGjCo6YrbB/UzwYldMuLQ6P1y3nAyq6kfLihj988+uajSS2jTTaR
3b8wuFibQhAWVU8ERBbEq68wY2PXKNOaxHY2w2XxIxtJu7tNu/Di3GMofpUra3Ah
KVeO9RCoTxFeqjDTPxn55jYK53vN6vvwSAavOXClgpfDwpXQXxJfkt9eWbp/J/dT
lwkpWDrXUlxSFExeiuAsBMjCuIzUctjTPrlVhKp1DQCRAYFltQwwMhWcrlDZoJ2B
HO0t5hSJxuFMgBC41YUAvzdZbzOsKNo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:54:12 2025 by rpki-client