Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/f3608783-a3d8-3011-af9a-7e5fa64d35eb.roa
File: f3608783-a3d8-3011-af9a-7e5fa64d35eb.roa (raw, json)
Hash identifier: ck05c/V98thSbbROuJga1rKwTgvyEMJRoln+bbrU0uI=
Subject key identifier: F5:2E:29:49:A6:8D:24:04:4D:2E:C1:47:9F:E4:55:5B:50:02:74:53
Certificate issuer: /CN=b741a525-1b5e-4308-93b6-815fed38e182
Certificate serial: 010D0C9F43285848B1C960FB2795D9B92B5E7A80
Authority key identifier: B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/f3608783-a3d8-3011-af9a-7e5fa64d35eb.roa
Signing time: Tue 28 Jan 2025 12:30:43 +0000
ROA not before: Tue 28 Jan 2025 12:30:43 +0000
ROA not after: Mon 28 Apr 2025 11:30:43 +0000
asID: 32490
IP address blocks: 199.101.204.0/22 maxlen: 22
205.209.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 29 Jan 2025 07:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:c9:60:fb:27:95:d9:b9:2b:5e:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b741a525-1b5e-4308-93b6-815fed38e182
Validity
Not Before: Jan 28 12:30:43 2025 GMT
Not After : Apr 28 11:30:43 2025 GMT
Subject: CN=e743e84a-6ac9-483d-8c63-afcc9d9515c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:86:7a:b9:68:aa:af:a3:1a:da:a1:97:45:
8b:11:08:1c:bf:7c:98:9e:4e:53:3c:46:49:d8:ec:
31:3d:45:b1:6f:b6:41:e5:63:98:4b:70:6d:47:10:
8b:65:fc:e3:02:81:6b:96:4e:6a:9c:56:c2:f4:e3:
c8:e1:3c:01:b4:62:0c:67:d5:19:4d:b0:70:5e:d9:
1d:27:6c:28:18:a6:c6:a8:04:b9:09:18:97:ca:fa:
6b:c1:78:90:23:a8:f0:54:99:cf:42:32:ab:24:53:
32:1a:9d:b5:38:3e:b6:9a:ae:95:59:a4:82:a2:88:
8c:cc:e0:e5:52:f8:0a:11:2b:2d:98:e6:1c:5f:20:
ef:42:c7:86:2d:bf:91:22:97:6c:51:4b:7e:15:47:
90:fd:40:d6:ea:c3:f0:b4:c6:f0:24:93:32:14:1e:
69:0c:c7:37:00:a8:22:42:55:61:cc:f1:0a:d1:e1:
f4:eb:b9:36:bf:92:95:e5:da:2b:34:0a:13:b8:90:
9c:b1:e0:cc:0c:d9:ed:02:83:cf:f0:90:c9:fb:35:
96:54:e5:91:14:88:32:38:ba:5e:4a:32:39:cb:c7:
5c:97:f4:5d:47:30:3b:e2:da:0e:00:e4:9f:1a:89:
c4:16:51:20:cc:71:f9:47:15:35:3f:d5:c9:b3:22:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:29:49:A6:8D:24:04:4D:2E:C1:47:9F:E4:55:5B:50:02:74:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/f3608783-a3d8-3011-af9a-7e5fa64d35eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl
X509v3 Authority Key Identifier:
keyid:B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.204.0/22
205.209.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:b2:03:40:bb:3b:d2:30:cf:9c:36:36:9e:72:34:6c:af:b4:
a8:18:ee:5d:38:96:d1:39:ff:d0:4f:f3:de:5e:52:07:fd:e3:
28:02:ff:95:00:7d:fa:52:74:17:79:7f:2c:5c:6f:a8:8d:31:
98:ee:23:2b:05:af:15:05:20:fe:92:98:40:35:c4:ac:cc:04:
c1:47:53:be:81:21:e4:2d:88:aa:3a:ed:88:bd:80:e8:b3:9a:
47:a5:e0:fb:f3:88:f1:ac:f0:10:5f:b5:d5:d9:9f:89:14:07:
ac:66:cb:c0:2d:d1:f5:eb:6f:c5:e7:e3:79:d9:60:e2:0b:64:
a1:6c:06:13:ee:8a:4d:48:28:9b:3e:31:31:f7:48:06:cd:16:
b4:c6:7a:5f:97:15:f7:3b:05:1e:3d:f1:9e:34:31:54:cf:e0:
0d:6c:2e:37:14:19:e8:52:89:75:d0:1d:b1:f5:97:73:24:96:
06:60:02:b0:4a:a5:36:ef:bd:ca:a9:c0:c4:17:32:ff:5e:c2:
42:f9:c7:a1:c5:21:d4:e4:df:74:e4:21:54:96:81:07:a1:1f:
60:26:27:15:ac:b2:d0:c4:b6:0a:b8:85:d8:eb:1d:40:80:56:
2f:30:3b:12:02:49:b6:cc:70:2e:44:89:98:0d:6d:f6:0d:1f:
4e:67:d9:4f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEixyWD7J5XZuSteeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc0MWE1MjUtMWI1ZS00MzA4LTkzYjYtODE1ZmVkMzhl
MTgyMB4XDTI1MDEyODEyMzA0M1oXDTI1MDQyODExMzA0M1owLzEtMCsGA1UEAxMk
ZTc0M2U4NGEtNmFjOS00ODNkLThjNjMtYWZjYzlkOTUxNWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuSGerloqq+jGtqhl0WLEQgcv3yYnk5TPEZJ
2OwxPUWxb7ZB5WOYS3BtRxCLZfzjAoFrlk5qnFbC9OPI4TwBtGIMZ9UZTbBwXtkd
J2woGKbGqAS5CRiXyvprwXiQI6jwVJnPQjKrJFMyGp21OD62mq6VWaSCooiMzODl
UvgKESstmOYcXyDvQseGLb+RIpdsUUt+FUeQ/UDW6sPwtMbwJJMyFB5pDMc3AKgi
QlVhzPEK0eH067k2v5KV5dorNAoTuJCcseDMDNntAoPP8JDJ+zWWVOWRFIgyOLpe
SjI5y8dcl/RdRzA74toOAOSfGonEFlEgzHH5RxU1P9XJsyIKAwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPUuKUmmjSQETS7BR5/kVVtQAnRTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNzQx
YTUyNS0xYjVlLTQzMDgtOTNiNi04MTVmZWQzOGUxODIvZjM2MDg3ODMtYTNkOC0z
MDExLWFmOWEtN2U1ZmE2NGQzNWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjc0MWE1MjUtMWI1ZS00MzA4LTkz
YjYtODE1ZmVkMzhlMTgyL2I3NDFhNTI1LTFiNWUtNDMwOC05M2I2LTgxNWZlZDM4
ZTE4Mi5jcmwwHwYDVR0jBBgwFoAUuS/4L9MIge48OrywiL1g4vCI7ngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNzQxYTUyNS0xYjVlLTQzMDgtOTNiNi04MTVm
ZWQzOGUxODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCx2XMAwQC
zdEMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAE+yA0C7O9Iwz5w2Np5yNGyvtKgY7l04ltE5/9BP895eUgf9
4ygC/5UAffpSdBd5fyxcb6iNMZjuIysFrxUFIP6SmEA1xKzMBMFHU76BIeQtiKo6
7Yi9gOizmkel4PvziPGs8BBftdXZn4kUB6xmy8At0fXrb8Xn43nZYOILZKFsBhPu
ik1IKJs+MTH3SAbNFrTGel+XFfc7BR498Z40MVTP4A1sLjcUGehSiXXQHbH1l3Mk
lgZgArBKpTbvvcqpwMQXMv9ewkL5x6HFIdTk33TkIVSWgQehH2AmJxWsstDEtgq4
hdjrHUCAVi8wOxICSbbMcC5EiZgNbfYNH05n2U8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:59 2025 by rpki-client