Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/d3578c83-e28b-3b6d-9a61-7079ca1344d7.roa
File: d3578c83-e28b-3b6d-9a61-7079ca1344d7.roa (raw, json)
Hash identifier: OCnJczoKEdH3TlOgm63skvC5OM3ceICqYYrlKnj8M3Y=
Subject key identifier: 56:95:11:EE:10:08:E2:33:21:CA:0B:E9:43:AA:C6:05:94:C0:BA:B5
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F432858494733D7DB11642A7D43939080
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/d3578c83-e28b-3b6d-9a61-7079ca1344d7.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 40065
IP address blocks: 161.129.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 02:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:d7:db:11:64:2a:7d:43:93:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=6449e8a3-961f-4c2e-90fd-fdd00b78650f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:85:37:5e:65:99:05:6e:cb:9e:4d:bd:d1:
3f:ef:a0:04:39:54:7c:f9:de:03:17:e4:54:0a:fa:
d1:c2:9e:0c:70:a2:11:70:6c:d3:f6:29:af:e0:6e:
53:74:5e:29:13:2d:dc:05:fd:09:b6:56:80:16:77:
0f:06:f5:3f:40:ce:62:ed:ac:d7:39:16:05:5d:6f:
15:c1:0a:ac:18:01:50:1a:a0:40:8e:3d:31:5b:f3:
e9:77:d5:bb:ad:fa:e1:50:01:f4:44:94:9b:bf:bd:
36:70:0d:b0:b9:96:4d:6a:36:0b:a4:e9:44:32:73:
21:96:f8:bc:5d:33:5e:44:64:71:02:4c:21:19:1e:
3f:df:e6:fd:69:ba:b9:cb:bb:1e:65:a9:4d:c9:88:
49:8c:a1:bb:6e:af:5b:fc:70:10:2d:91:0e:97:7d:
f6:b9:66:f0:07:01:af:d9:d6:df:0d:c1:4d:9b:db:
de:05:ca:af:99:11:8e:92:86:09:44:f8:e7:cb:2c:
b7:ef:51:e8:68:f7:b4:65:f1:e5:81:88:e1:84:22:
7d:2f:1e:1b:6d:02:eb:45:be:9c:7a:6b:4d:6a:80:
4d:f3:43:b6:6a:30:01:03:fd:47:cb:84:ba:e7:dd:
ef:10:9b:a9:7e:1c:fb:ea:4f:ec:f2:cf:24:96:60:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:11:EE:10:08:E2:33:21:CA:0B:E9:43:AA:C6:05:94:C0:BA:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/d3578c83-e28b-3b6d-9a61-7079ca1344d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:f9:87:b7:69:0f:13:55:5d:ae:ab:10:22:e6:ba:2c:7f:2e:
ef:75:f5:d0:50:d7:72:4a:42:33:5f:4e:39:3f:db:9a:f5:43:
b8:89:6d:ab:e7:e8:4b:f7:ed:02:7a:92:99:be:a6:18:1b:14:
c8:71:2b:14:3e:5d:64:b2:ea:35:a3:3a:2b:cf:db:9e:3c:a4:
4d:d8:85:9d:41:da:ef:63:67:95:24:16:51:74:11:d7:24:95:
8c:d4:c9:e4:ab:bc:22:f2:45:19:8d:e8:5d:b0:bd:d9:ca:21:
4b:9c:ba:ad:20:49:25:37:e8:46:e6:ec:6f:2d:5a:3d:37:f3:
f0:a9:92:df:3b:f6:8e:8f:66:99:68:c0:58:0f:98:5c:fe:0a:
51:76:20:32:33:46:8a:1b:dc:19:59:06:71:ef:a0:65:c0:72:
9b:b2:d6:17:b6:f8:f8:25:64:75:2a:18:6b:44:1d:14:7f:16:
64:f8:47:fe:e5:a3:59:e2:ae:71:2e:12:bd:2a:c8:f5:c5:fe:
2a:c9:96:72:c3:b6:83:d9:83:bd:e7:f6:b0:84:f8:8d:2f:92:
5c:a0:4f:9c:10:36:2d:4f:a0:49:db:0d:94:7c:94:62:ec:d1:
a7:d4:40:6f:e4:63:12:fd:67:3e:a7:d9:65:fd:9e:40:89:56:
fd:db:6f:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM9fbEWQqfUOTkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
NjQ0OWU4YTMtOTYxZi00YzJlLTkwZmQtZmRkMDBiNzg2NTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHqFN15lmQVuy55NvdE/76AEOVR8+d4DF+RU
CvrRwp4McKIRcGzT9imv4G5TdF4pEy3cBf0JtlaAFncPBvU/QM5i7azXORYFXW8V
wQqsGAFQGqBAjj0xW/Ppd9W7rfrhUAH0RJSbv702cA2wuZZNajYLpOlEMnMhlvi8
XTNeRGRxAkwhGR4/3+b9abq5y7seZalNyYhJjKG7bq9b/HAQLZEOl332uWbwBwGv
2dbfDcFNm9veBcqvmRGOkoYJRPjnyyy371HoaPe0ZfHlgYjhhCJ9Lx4bbQLrRb6c
emtNaoBN80O2ajABA/1Hy4S6593vEJupfhz76k/s8s8klmDb7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaVEe4QCOIzIcoL6UOqxgWUwLq1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZDM1NzhjODMtZTI4Yi0z
YjZkLTlhNjEtNzA3OWNhMTM0NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGP5h7dpDxNVXa6rECLmuix/Lu919dBQ13JKQjNfTjk/25r1Q7iJbavn
6Ev37QJ6kpm+phgbFMhxKxQ+XWSy6jWjOivP2548pE3YhZ1B2u9jZ5UkFlF0Edck
lYzUyeSrvCLyRRmN6F2wvdnKIUucuq0gSSU36Ebm7G8tWj038/Cpkt879o6PZplo
wFgPmFz+ClF2IDIzRoob3BlZBnHvoGXAcpuy1he2+PglZHUqGGtEHRR/FmT4R/7l
o1nirnEuEr0qyPXF/irJlnLDtoPZg73n9rCE+I0vklygT5wQNi1PoEnbDZR8lGLs
0afUQG/kYxL9Zz6n2WX9nkCJVv3bb6w=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:54 2025 by rpki-client