Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/5c268d29-d075-3b38-9a2d-fd65d74f5517.roa
File: 5c268d29-d075-3b38-9a2d-fd65d74f5517.roa (raw, json)
Hash identifier: 3HukMC8hzQxVGiZvEGJrx0EQxkwUZwF9M0VV5pIamEs=
Subject key identifier: D1:DA:9D:5D:3C:E1:B8:29:42:9A:FA:C2:53:7B:71:9A:D4:FB:C4:D5
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F43285849850EE22466B8ED6C1356B780
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/5c268d29-d075-3b38-9a2d-fd65d74f5517.roa
Signing time: Mon 14 Apr 2025 04:46:19 +0000
ROA not before: Mon 14 Apr 2025 04:46:19 +0000
ROA not after: Sun 13 Jul 2025 04:46:19 +0000
asID: 63150
IP address blocks: 161.129.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 10:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:85:0e:e2:24:66:b8:ed:6c:13:56:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Apr 14 04:46:19 2025 GMT
Not After : Jul 13 04:46:19 2025 GMT
Subject: CN=57891cad-ee01-4e58-9fa7-1c999f8efd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:84:79:44:f4:f3:03:e6:99:e0:80:87:2d:
bc:70:7e:a0:ca:5e:9f:7e:9a:4f:5c:21:91:4c:e1:
1e:cb:96:1a:a4:15:d3:92:9e:66:f5:96:de:da:a0:
7d:12:8e:7e:64:54:fe:38:1b:dc:3b:11:03:df:f4:
0a:ac:55:d9:85:70:6d:c7:38:4b:4f:35:6b:12:91:
0c:d8:8e:a3:b7:75:63:7b:2c:41:bd:7e:c5:6f:29:
3a:ed:22:08:33:a2:d3:81:23:82:11:55:ac:b7:54:
b5:30:3c:af:39:8d:7e:49:33:81:62:b1:ac:71:8f:
4a:ae:3b:a2:1e:fc:a0:05:60:52:e8:e4:9a:43:57:
c0:14:14:4b:8c:db:37:23:56:57:af:f0:d3:9b:59:
5d:f0:7a:f5:f0:e1:b9:41:08:6a:db:4b:91:bc:93:
51:a4:38:ef:e6:ae:e1:92:c3:88:56:aa:c7:97:30:
4d:2d:4a:ca:4d:4c:ee:c5:4d:42:50:cf:1a:15:2a:
6f:86:ca:c3:8c:1f:a3:17:8d:c3:fe:4a:d8:98:4d:
49:6d:98:ec:e8:86:1e:a1:5e:57:c7:82:dc:54:8c:
e1:7a:f6:38:61:8c:ca:b9:5b:d0:8f:a4:53:44:0f:
da:70:a9:fd:ca:ba:25:6f:cb:bc:88:5a:c0:3f:b6:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:9D:5D:3C:E1:B8:29:42:9A:FA:C2:53:7B:71:9A:D4:FB:C4:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/5c268d29-d075-3b38-9a2d-fd65d74f5517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:fa:dc:44:6b:30:64:92:87:42:68:b6:88:2e:c2:31:3a:03:
1e:98:da:46:fe:9f:4c:ed:a9:8f:48:9f:36:d3:5a:d8:71:08:
e2:58:c3:43:10:c7:a4:78:ee:2a:88:fb:93:50:89:5c:9b:71:
d5:75:2c:08:0d:67:e6:1d:c0:6a:9c:b4:80:0d:28:50:3a:4d:
33:94:42:40:d8:d1:72:ef:38:32:d8:23:f3:ca:31:31:0f:b0:
08:ec:13:b6:8a:8f:55:46:c0:59:ee:93:9b:d4:d7:3c:31:16:
15:6a:08:67:28:51:9a:f5:bb:4d:fe:f9:37:21:e0:50:d2:e3:
e2:22:8c:ba:2c:71:2c:e9:b7:47:8f:96:11:85:cd:78:c9:da:
25:bc:ec:7e:4b:f7:82:16:39:a1:7d:5d:1e:df:cd:a6:9d:90:
76:d5:67:6d:f6:b7:40:3d:75:1c:07:62:aa:1b:db:53:6b:41:
d0:a5:48:f1:1a:18:6a:1e:d8:8e:60:d8:b2:2d:c5:d9:92:75:
d4:d7:11:1b:5e:d0:fd:3d:ed:fb:1d:29:7c:50:e3:32:b1:32:
53:c9:62:6c:40:d2:d6:09:48:e5:34:2f:97:44:e3:c0:2e:10:
8b:55:db:cd:65:8c:07:53:85:b8:23:8f:51:0c:21:ea:86:c1:
1e:1a:53:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmFDuIkZrjtbBNWt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI1MDQxNDA0NDYxOVoXDTI1MDcxMzA0NDYxOVowLzEtMCsGA1UEAxMk
NTc4OTFjYWQtZWUwMS00ZTU4LTlmYTctMWM5OTlmOGVmZDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivSEeUT08wPmmeCAhy28cH6gyl6ffppPXCGR
TOEey5YapBXTkp5m9Zbe2qB9Eo5+ZFT+OBvcOxED3/QKrFXZhXBtxzhLTzVrEpEM
2I6jt3VjeyxBvX7Fbyk67SIIM6LTgSOCEVWst1S1MDyvOY1+STOBYrGscY9Krjui
HvygBWBS6OSaQ1fAFBRLjNs3I1ZXr/DTm1ld8Hr18OG5QQhq20uRvJNRpDjv5q7h
ksOIVqrHlzBNLUrKTUzuxU1CUM8aFSpvhsrDjB+jF43D/krYmE1JbZjs6IYeoV5X
x4LcVIzhevY4YYzKuVvQj6RTRA/acKn9yrolb8u8iFrAP7brtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHanV084bgpQpr6wlN7cZrU+8TVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvNWMyNjhkMjktZDA3NS0z
YjM4LTlhMmQtZmQ2NWQ3NGY1NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADD63ERrMGSSh0JotoguwjE6Ax6Y2kb+n0ztqY9InzbTWthxCOJYw0MQ
x6R47iqI+5NQiVybcdV1LAgNZ+YdwGqctIANKFA6TTOUQkDY0XLvODLYI/PKMTEP
sAjsE7aKj1VGwFnuk5vU1zwxFhVqCGcoUZr1u03++Tch4FDS4+IijLoscSzpt0eP
lhGFzXjJ2iW87H5L94IWOaF9XR7fzaadkHbVZ232t0A9dRwHYqob21NrQdClSPEa
GGoe2I5g2LItxdmSddTXERte0P097fsdKXxQ4zKxMlPJYmxA0tYJSOU0L5dE48Au
EItV281ljAdThbgjj1EMIeqGwR4aUxM=
-----END CERTIFICATE-----
Generated at Thu Jul 10 12:36:57 2025 by rpki-client