Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/222d45e8-d3ff-3dd9-b2c0-fcbc6a53b3d0.roa
File: 222d45e8-d3ff-3dd9-b2c0-fcbc6a53b3d0.roa (raw, json)
Hash identifier: Q6n3P+oRJJrHrZIe7+kT6jLTO2aN4PhlzPVzzVsUUH0=
Subject key identifier: BD:06:97:63:78:DC:15:3D:FD:22:69:7F:FE:32:3F:FB:4F:F6:68:6B
Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial: 010D0C9F4328584839EAB77435AF888272841180
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/222d45e8-d3ff-3dd9-b2c0-fcbc6a53b3d0.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 57164
IP address blocks: 2602:fcff:10::/45 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Jan 2025 06:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:b7:74:35:af:88:82:72:84:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=c794f9ce-7432-412b-b7c9-772d41b76a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:00:b1:a4:07:6a:a3:99:ba:dc:e7:ea:db:
81:18:b3:f1:d4:a5:af:45:70:80:d9:84:78:54:0b:
31:0a:01:97:13:85:46:2c:e2:8a:dd:f1:2d:08:fd:
4a:6b:52:4c:e9:80:21:bd:d5:1c:fa:48:c5:5a:52:
d3:3a:ff:87:5d:81:47:65:f8:4a:bd:58:6a:3f:a6:
04:f6:a9:39:ec:96:b5:c0:90:ce:82:c4:4d:2b:9b:
ac:b8:30:4a:88:6e:85:0c:b4:b2:fe:e9:e6:2d:e9:
45:9f:83:fe:ab:d3:f4:d0:9b:9a:47:82:21:02:e2:
2a:22:89:66:2b:f2:24:2b:8b:e3:b0:52:d5:c5:10:
7f:68:0f:d0:e4:92:3c:c0:f0:57:de:41:25:36:7a:
bd:0a:89:c4:1f:c7:09:79:3f:d4:17:54:4a:df:a4:
f1:6c:b8:1c:28:1b:eb:2f:05:e7:52:35:05:3b:ab:
9a:11:9a:3a:64:bb:57:5b:6e:cf:74:9c:3e:47:4d:
62:6c:d1:1a:18:d5:00:84:82:8d:10:e9:9d:2c:29:
18:23:f7:af:72:40:e3:f7:ac:b7:29:45:f1:a6:67:
00:2c:5a:38:38:cf:9c:5c:71:86:c3:fb:fa:98:6c:
ec:47:69:83:52:18:a3:1e:b6:e1:79:c3:5e:88:6d:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:97:63:78:DC:15:3D:FD:22:69:7F:FE:32:3F:FB:4F:F6:68:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/222d45e8-d3ff-3dd9-b2c0-fcbc6a53b3d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
X509v3 Authority Key Identifier:
keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fcff:10::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:b8:b9:1d:7f:d0:4c:e9:a0:2e:0f:ec:df:ea:84:84:06:26:
94:84:c2:d4:fd:94:af:f7:a1:8f:e0:44:67:85:1f:ea:0d:c3:
82:bd:38:c6:96:d3:90:02:35:ad:07:3d:da:0b:de:f8:05:36:
0b:e5:f7:66:f1:4a:08:17:dd:8a:a2:61:92:40:7e:b8:db:88:
83:74:a8:eb:7b:23:08:f6:e0:46:4d:ec:b5:fb:03:97:02:38:
11:69:02:0b:e5:a5:3e:c9:2b:e6:f8:2c:6e:0d:c4:d0:94:bd:
bf:9f:97:b2:d9:b0:26:5f:95:cb:79:d3:60:78:f5:d3:ee:3f:
a4:c9:12:6b:91:de:9e:63:df:7d:7f:c5:b7:a0:ea:e5:bd:13:
80:24:d5:f9:f8:f8:75:c7:5a:98:11:e6:87:f6:11:e9:81:88:
7f:8e:32:ca:a5:13:7e:4a:31:ba:4a:8b:5e:d1:74:f0:a1:85:
ed:34:c2:67:58:a8:40:e7:9f:1f:46:41:35:94:53:64:05:86:
22:2f:8f:49:08:d6:8d:a2:6f:ea:10:8c:14:f5:63:69:a9:cb:
0d:43:14:ae:28:e5:e5:5a:68:df:1f:31:47:54:3b:d3:f9:85:
1c:8a:c1:78:7b:85:23:0d:d7:39:aa:82:22:ef:95:87:40:b9:
aa:9d:98:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg56rd0Na+IgnKEEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5
ZmUwMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
Yzc5NGY5Y2UtNzQzMi00MTJiLWI3YzktNzcyZDQxYjc2YTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYkAsaQHaqOZutzn6tuBGLPx1KWvRXCA2YR4
VAsxCgGXE4VGLOKK3fEtCP1Ka1JM6YAhvdUc+kjFWlLTOv+HXYFHZfhKvVhqP6YE
9qk57Ja1wJDOgsRNK5usuDBKiG6FDLSy/unmLelFn4P+q9P00JuaR4IhAuIqIolm
K/IkK4vjsFLVxRB/aA/Q5JI8wPBX3kElNnq9ConEH8cJeT/UF1RK36TxbLgcKBvr
LwXnUjUFO6uaEZo6ZLtXW27PdJw+R01ibNEaGNUAhIKNEOmdLCkYI/evckDj96y3
KUXxpmcALFo4OM+cXHGGw/v6mGzsR2mDUhijHrbhecNeiG0NfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL0Gl2N43BU9/SJpf/4yP/tP9mhrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1
NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvMjIyZDQ1ZTgtZDNmZi0z
ZGQ5LWIyYzAtZmNiYzZhNTNiM2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz
YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1
OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh
ZmMwNTlmZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL8/wAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIO4uR1/0EzpoC4P7N/qhIQGJpSEwtT9lK/3oY/gRGeFH+oNw4K9
OMaW05ACNa0HPdoL3vgFNgvl92bxSggX3YqiYZJAfrjbiIN0qOt7Iwj24EZN7LX7
A5cCOBFpAgvlpT7JK+b4LG4NxNCUvb+fl7LZsCZflct502B49dPuP6TJEmuR3p5j
331/xbeg6uW9E4Ak1fn4+HXHWpgR5of2EemBiH+OMsqlE35KMbpKi17RdPChhe00
wmdYqEDnnx9GQTWUU2QFhiIvj0kI1o2ib+oQjBT1Y2mpyw1DFK4o5eVaaN8fMUdU
O9P5hRyKwXh7hSMN1zmqgiLvlYdAuaqdmGw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:44:20 2025 by rpki-client