Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcafd4c8-0811-337c-af1b-134e37686b68.roa
File: fcafd4c8-0811-337c-af1b-134e37686b68.roa (raw, json)
Hash identifier: vEkPZi/ClChQ3HITFCyxyCXN/PK5OY1cLXWLNxROcu4=
Subject key identifier: DE:72:52:2F:A0:1C:9E:CC:43:85:98:4E:D1:70:09:DE:97:E8:95:7A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F432858491637F892EEF2A17A53CA5440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcafd4c8-0811-337c-af1b-134e37686b68.roa
Signing time: Wed 05 Mar 2025 11:54:23 +0000
ROA not before: Wed 05 Mar 2025 11:54:23 +0000
ROA not after: Tue 03 Jun 2025 10:54:23 +0000
asID: 30036
IP address blocks: 173.24.198.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Mar 2025 13:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:16:37:f8:92:ee:f2:a1:7a:53:ca:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 5 11:54:23 2025 GMT
Not After : Jun 3 10:54:23 2025 GMT
Subject: CN=239018d7-c003-44f2-9924-005aa3a6e4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:a6:e4:10:74:f7:78:82:71:ee:02:e7:7c:
ff:11:72:d8:12:2b:c7:46:c6:3c:18:1d:31:3b:2b:
97:8d:f8:eb:e5:82:85:c9:ae:ec:92:dc:04:29:4a:
96:35:e8:cb:5c:d4:2a:f3:f6:35:5c:75:af:e6:c6:
14:f7:27:31:bc:bf:7c:c6:37:e9:e8:89:f8:a1:2b:
49:0d:e8:b6:34:0e:bc:7c:96:4e:8b:70:b2:6c:ee:
16:99:8f:ab:30:99:b9:65:ef:8b:1d:cb:ef:99:dd:
df:2c:a2:1d:9c:cd:b0:25:15:91:d6:2a:2a:b0:91:
ec:c3:71:f8:5a:2a:9c:a2:2b:48:f8:bd:6d:08:7a:
3c:55:38:c3:46:49:eb:92:e5:60:cb:62:5d:e1:ce:
22:05:ef:51:2e:ff:6f:c7:db:ae:2a:e2:5c:0a:b4:
f8:6e:48:6f:87:8a:83:c0:9b:eb:71:b2:a7:cb:8c:
70:e0:30:17:be:a8:6d:79:75:8a:c9:00:bb:99:c6:
45:59:9a:d7:36:f5:55:f0:b7:0e:7c:36:a7:82:e5:
ab:83:e0:19:da:f4:3c:c9:4d:ad:7a:3b:d3:6f:a1:
37:50:b5:b9:f1:62:50:ff:70:64:53:7c:ef:a4:bd:
9e:87:93:d7:e1:89:6e:e3:3c:93:29:44:10:25:b1:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:52:2F:A0:1C:9E:CC:43:85:98:4E:D1:70:09:DE:97:E8:95:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcafd4c8-0811-337c-af1b-134e37686b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a3:f9:36:40:86:31:35:56:02:60:a1:83:4b:d3:c4:66:0c:
ee:0d:bc:05:f6:b9:d5:fe:3b:24:ca:f4:09:7b:7a:14:e2:8d:
12:a3:dc:65:db:fe:19:2d:d8:07:48:83:b1:10:ff:63:c2:e3:
a3:e5:d1:df:52:24:57:ad:bb:21:3e:f8:16:43:cb:00:29:56:
d4:e6:d8:a7:d8:dc:25:a2:02:98:0b:b5:9d:1f:68:d4:75:9c:
10:ae:ec:d3:73:30:a1:a6:3e:f9:93:58:41:d1:39:d0:45:34:
82:d9:77:28:d7:75:2f:2c:1d:42:bb:20:26:e9:8b:13:3d:ee:
6a:19:0c:ce:4b:0b:1d:8c:30:24:b1:10:ea:80:28:ab:fd:38:
4b:e2:fa:d9:f3:d1:20:16:2d:4b:34:29:f0:be:14:aa:0c:5d:
8a:be:79:fc:e5:a9:c3:47:4b:81:0f:9e:c4:ec:e6:cb:9f:98:
ec:3f:a7:82:9c:65:25:f8:df:cc:cb:4d:36:44:2c:83:43:0b:
b7:c5:fb:5a:41:3f:ad:2c:db:79:26:70:22:6c:ae:45:88:9c:
6d:c6:92:e6:7b:b5:e6:47:d1:ac:3e:4e:bd:f7:3c:b1:fd:ef:
db:70:91:bd:23:3e:08:f1:7d:9e:52:28:15:25:a2:46:d0:6f:
b6:05:8c:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWN/iS7vKhelPKVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDMwNTExNTQyM1oXDTI1MDYwMzEwNTQyM1owLzEtMCsGA1UEAxMk
MjM5MDE4ZDctYzAwMy00NGYyLTk5MjQtMDA1YWEzYTZlNGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+qm5BB093iCce4C53z/EXLYEivHRsY8GB0x
OyuXjfjr5YKFya7sktwEKUqWNejLXNQq8/Y1XHWv5sYU9ycxvL98xjfp6In4oStJ
Dei2NA68fJZOi3CybO4WmY+rMJm5Ze+LHcvvmd3fLKIdnM2wJRWR1ioqsJHsw3H4
WiqcoitI+L1tCHo8VTjDRknrkuVgy2Jd4c4iBe9RLv9vx9uuKuJcCrT4bkhvh4qD
wJvrcbKny4xw4DAXvqhteXWKyQC7mcZFWZrXNvVV8LcOfDanguWrg+AZ2vQ8yU2t
ejvTb6E3ULW58WJQ/3BkU3zvpL2eh5PX4Ylu4zyTKUQQJbHiQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5yUi+gHJ7MQ4WYTtFwCd6X6JV6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmNhZmQ0YzgtMDgxMS0z
MzdjLWFmMWItMTM0ZTM3Njg2YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqj+TZAhjE1VgJgoYNL08RmDO4NvAX2udX+OyTK9Al7ehTijRKj3GXb
/hkt2AdIg7EQ/2PC46Pl0d9SJFetuyE++BZDywApVtTm2KfY3CWiApgLtZ0faNR1
nBCu7NNzMKGmPvmTWEHROdBFNILZdyjXdS8sHUK7ICbpixM97moZDM5LCx2MMCSx
EOqAKKv9OEvi+tnz0SAWLUs0KfC+FKoMXYq+efzlqcNHS4EPnsTs5sufmOw/p4Kc
ZSX438zLTTZELINDC7fF+1pBP60s23kmcCJsrkWInG3GkuZ7teZH0aw+Tr33PLH9
79twkb0jPgjxfZ5SKBUlokbQb7YFjB4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:10 2025 by rpki-client