Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/8bba8b64-b322-3990-a409-c3746a4fb09a.roa
File: 8bba8b64-b322-3990-a409-c3746a4fb09a.roa (raw, json)
Hash identifier: +wrtez+RS9o6W/P1nNNfdbUcijyc/X24n3yo1PS3Dus=
Subject key identifier: CF:99:86:6C:F5:39:D1:B2:05:E9:A0:E8:40:4B:DF:FB:0E:03:80:2E
Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial: 010D0C9F43285849F35A4660E5C178D26F42A8D0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/8bba8b64-b322-3990-a409-c3746a4fb09a.roa
Signing time: Fri 23 May 2025 16:57:09 +0000
ROA not before: Fri 23 May 2025 16:57:09 +0000
ROA not after: Thu 21 Aug 2025 16:57:09 +0000
asID: 40818
IP address blocks: 216.38.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 24 May 2025 00:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f3:5a:46:60:e5:c1:78:d2:6f:42:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
Validity
Not Before: May 23 16:57:09 2025 GMT
Not After : Aug 21 16:57:09 2025 GMT
Subject: CN=9e19532d-675a-4ed5-b665-d3368b5bb728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:99:c3:c7:7a:f4:37:f7:0c:92:70:c1:3c:c8:
e5:25:6d:85:ca:29:a2:82:1a:21:b1:6f:73:9e:48:
4c:39:73:7f:09:b0:fd:bf:da:90:bb:24:3a:94:0c:
ec:ef:f3:d8:fe:f1:f2:05:67:84:9b:f3:44:10:f6:
46:45:a0:6b:19:9f:71:3c:33:3a:ee:7c:ff:62:64:
ad:80:4b:e1:f0:e0:d3:33:a8:c0:07:5d:d0:c1:04:
b5:21:fb:d7:14:36:15:f2:f7:2d:3d:c1:52:c8:c2:
38:81:21:b9:15:fb:0e:5f:76:cc:ca:56:13:37:2e:
0d:76:e4:25:7d:89:55:b2:b8:f9:01:32:d7:78:02:
0f:6c:c9:44:c1:4a:88:dc:36:b6:0e:48:2a:0b:af:
42:86:ea:5d:49:36:e5:85:dd:b4:14:1a:59:36:4e:
f4:9e:4d:b2:5a:7c:83:8b:aa:8f:8e:34:4d:20:f0:
13:c8:00:02:7b:3e:4f:74:cd:f5:b2:2c:df:0e:9a:
91:0c:e0:e4:7b:61:f2:34:81:30:36:20:e9:af:6c:
8d:d7:03:79:77:61:27:2b:54:b6:93:11:f3:d3:fb:
a8:8a:db:82:94:b4:63:3d:41:7e:a9:7a:5c:a0:a1:
94:a5:84:5d:f7:8e:08:c4:8c:f2:e7:c8:14:44:ec:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:99:86:6C:F5:39:D1:B2:05:E9:A0:E8:40:4B:DF:FB:0E:03:80:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/8bba8b64-b322-3990-a409-c3746a4fb09a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
X509v3 Authority Key Identifier:
keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
sbgp-ipAddrBlock: critical
IPv4:
216.38.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:2d:fa:e8:31:26:c6:3d:24:99:f6:a3:aa:77:7e:37:18:7c:
76:8b:77:2b:fa:03:9e:bf:d2:76:6c:57:7a:f7:d5:03:94:04:
4b:29:71:9e:e1:32:9e:6f:db:65:63:b9:04:46:0c:80:55:93:
90:aa:ae:be:85:ae:22:ac:6a:87:ae:b0:a5:99:13:5f:00:84:
fc:ea:50:a0:be:8c:bf:55:3d:db:e0:69:6c:2a:b5:a9:6d:69:
fc:ba:de:10:4b:e5:d2:fd:2d:b7:99:71:46:4f:68:63:82:54:
62:cc:d9:ad:c7:f2:86:93:c1:2c:50:9e:da:40:61:a4:0a:5e:
a2:59:58:31:2a:fa:9f:3c:d6:ed:c9:5d:50:ac:b3:03:43:85:
73:1f:6a:68:b4:ba:b2:2c:4c:1b:07:5e:18:54:9f:15:12:8c:
7f:66:a3:a6:0d:93:b9:5d:d0:ba:df:d7:c6:29:03:8e:ed:ce:
f2:d0:d0:8e:8a:85:2c:d6:01:93:46:e7:6d:8a:45:bf:41:0f:
21:e5:2b:de:d8:4e:85:bf:8d:0a:77:0f:49:cf:77:42:7e:e0:
38:17:98:8d:34:5f:31:a6:85:39:78:e3:8f:bf:46:42:be:4e:
51:be:ea:d2:3f:e6:3f:9a:7b:e7:d6:68:85:a4:b0:09:22:72:
a5:a9:7c:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnzWkZg5cF40m9CqNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2
NTI1MB4XDTI1MDUyMzE2NTcwOVoXDTI1MDgyMTE2NTcwOVowLzEtMCsGA1UEAxMk
OWUxOTUzMmQtNjc1YS00ZWQ1LWI2NjUtZDMzNjhiNWJiNzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZnDx3r0N/cMknDBPMjlJW2FyimighohsW9z
nkhMOXN/CbD9v9qQuyQ6lAzs7/PY/vHyBWeEm/NEEPZGRaBrGZ9xPDM67nz/YmSt
gEvh8ODTM6jAB13QwQS1IfvXFDYV8vctPcFSyMI4gSG5FfsOX3bMylYTNy4NduQl
fYlVsrj5ATLXeAIPbMlEwUqI3Da2DkgqC69ChupdSTblhd20FBpZNk70nk2yWnyD
i6qPjjRNIPATyAACez5PdM31sizfDpqRDODke2HyNIEwNiDpr2yN1wN5d2EnK1S2
kxHz0/uoituClLRjPUF+qXpcoKGUpYRd944IxIzy58gUROxIAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+Zhmz1OdGyBemg6EBL3/sOA4AuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5
MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvOGJiYThiNjQtYjMyMi0z
OTkwLWE0MDktYzM3NDZhNGZiMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3
ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz
NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk
NjU0MzY1MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMt+ugxJsY9JJn2o6p3fjcYfHaLdyv6A56/0nZsV3r31QOUBEspcZ7h
Mp5v22VjuQRGDIBVk5Cqrr6FriKsaoeusKWZE18AhPzqUKC+jL9VPdvgaWwqtalt
afy63hBL5dL9LbeZcUZPaGOCVGLM2a3H8oaTwSxQntpAYaQKXqJZWDEq+p881u3J
XVCsswNDhXMfami0urIsTBsHXhhUnxUSjH9mo6YNk7ld0Lrf18YpA47tzvLQ0I6K
hSzWAZNG522KRb9BDyHlK97YToW/jQp3D0nPd0J+4DgXmI00XzGmhTl444+/RkK+
TlG+6tI/5j+ae+fWaIWksAkicqWpfPs=
-----END CERTIFICATE-----
Generated at Thu Jul 10 12:41:52 2025 by rpki-client