Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/2b6f3b3f-67e7-3be4-9e3d-6867f17f0821.roa
File: 2b6f3b3f-67e7-3be4-9e3d-6867f17f0821.roa (raw, json)
Hash identifier: yA8vFG2IIBwBZFhdIXMM7w5ylaiTjm0l7legAi2HH/A=
Subject key identifier: 51:FB:90:7F:BF:16:0F:AF:91:E6:75:63:85:72:D9:4E:45:15:56:4D
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F4328584913A9FC2177B20EECAB137380
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/2b6f3b3f-67e7-3be4-9e3d-6867f17f0821.roa
Signing time: Tue 04 Mar 2025 13:56:41 +0000
ROA not before: Tue 04 Mar 2025 13:56:41 +0000
ROA not after: Mon 02 Jun 2025 12:56:41 +0000
asID: 9009
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 07 Mar 2025 20:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:a9:fc:21:77:b2:0e:ec:ab:13:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Mar 4 13:56:41 2025 GMT
Not After : Jun 2 12:56:41 2025 GMT
Subject: CN=75b57ebb-4931-4111-97d7-ae8b115f258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:18:58:26:38:0b:06:48:11:70:5b:c5:01:
dc:c0:b5:c7:5f:f1:a2:45:67:4b:b2:d2:35:6d:05:
8b:40:51:ba:50:84:04:cd:b4:0b:87:f8:5f:93:cc:
da:dd:2f:bb:63:0b:17:0b:99:86:bd:aa:c4:69:a1:
28:1f:25:4b:ad:65:6b:7f:b6:77:ac:8b:3e:7f:d5:
ac:69:95:04:b2:5a:26:c8:b6:88:64:8f:47:38:e9:
c9:0f:b5:48:8d:b9:a6:78:bb:bc:1f:a6:77:c9:bb:
00:d1:70:7d:ad:59:f6:7a:02:40:6d:44:16:c3:e9:
57:64:f6:c7:df:1d:4e:2f:56:11:0d:7f:64:c1:11:
86:f8:07:ad:36:6d:cd:1a:a9:aa:91:3d:d7:5c:62:
b7:bd:fc:e5:06:1a:21:66:19:6f:c8:ae:81:a1:90:
47:00:08:e0:3b:33:ac:7f:4c:9f:86:8f:02:5f:6b:
f7:9a:8e:af:89:87:6a:09:c6:48:bd:e6:d3:2e:8e:
9f:b9:71:e8:5f:b3:f6:73:e6:9a:b3:d9:50:93:c7:
fc:a9:74:ec:9c:d9:b0:ba:1e:af:fd:b5:73:6e:0b:
dc:ff:d3:1f:df:67:03:9f:d2:a1:fc:5a:23:30:83:
38:b8:9d:3f:29:6b:15:77:91:23:db:42:2c:dd:2b:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:90:7F:BF:16:0F:AF:91:E6:75:63:85:72:D9:4E:45:15:56:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/2b6f3b3f-67e7-3be4-9e3d-6867f17f0821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:d8:f9:55:92:3f:75:4b:20:fa:86:da:68:74:8b:a5:75:e7:
f8:17:05:50:69:bd:09:62:97:58:b8:56:08:b8:ab:3e:b0:19:
bb:a6:7d:9f:f2:a4:56:fe:ee:0d:eb:63:db:8c:74:b0:30:00:
d4:cd:1a:23:7f:e6:8b:6c:92:8a:94:b0:f3:a1:97:e8:6a:8e:
92:25:83:f5:23:2f:3c:e6:6f:00:8d:6e:fc:49:1d:89:3c:3c:
8a:85:74:7b:46:b0:1f:d5:90:31:47:f1:b6:1e:bf:31:f7:9a:
0a:86:a7:d7:89:be:98:6e:81:ee:bb:22:8b:85:94:2d:e4:bb:
29:34:08:0a:63:54:6e:dc:b1:31:97:c7:ac:83:71:49:55:3f:
3d:9c:26:4d:8b:62:65:28:a4:34:30:b0:0f:57:cd:76:b6:39:
cb:c9:dc:d9:96:e3:79:26:b6:0c:5a:03:a5:8d:d4:8d:53:4a:
fd:bd:f9:f5:dd:a0:db:f6:54:36:b0:b9:72:68:45:98:1c:83:
b7:e5:52:57:b9:5e:44:f5:64:fb:30:21:89:26:1d:d8:87:76:
67:65:49:75:5d:94:d3:1c:46:f3:5a:56:4d:0f:11:a9:f2:94:
1c:ba:10:d0:f6:ad:84:91:40:15:69:b4:e8:d9:a0:12:59:7a:
5b:56:46:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTqfwhd7IO7KsTc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQxOGI3YmItN2YxYy00MzMzLTliOGUtYmFiZjhiOGZh
MzkxMB4XDTI1MDMwNDEzNTY0MVoXDTI1MDYwMjEyNTY0MVowLzEtMCsGA1UEAxMk
NzViNTdlYmItNDkzMS00MTExLTk3ZDctYWU4YjExNWYyNThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/gYWCY4CwZIEXBbxQHcwLXHX/GiRWdLstI1
bQWLQFG6UIQEzbQLh/hfk8za3S+7YwsXC5mGvarEaaEoHyVLrWVrf7Z3rIs+f9Ws
aZUEslomyLaIZI9HOOnJD7VIjbmmeLu8H6Z3ybsA0XB9rVn2egJAbUQWw+lXZPbH
3x1OL1YRDX9kwRGG+AetNm3NGqmqkT3XXGK3vfzlBhohZhlvyK6BoZBHAAjgOzOs
f0yfho8CX2v3mo6viYdqCcZIvebTLo6fuXHoX7P2c+aas9lQk8f8qXTsnNmwuh6v
/bVzbgvc/9Mf32cDn9Kh/FojMIM4uJ0/KWsVd5Ej20Is3SsR2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFH7kH+/Fg+vkeZ1Y4Vy2U5FFVZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NDE4
YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4ZmEzOTEvMmI2ZjNiM2YtNjdlNy0z
YmU0LTllM2QtNjg2N2YxN2YwODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDQxOGI3YmItN2YxYy00MzMzLTli
OGUtYmFiZjhiOGZhMzkxLzQ0MThiN2JiLTdmMWMtNDMzMy05YjhlLWJhYmY4Yjhm
YTM5MS5jcmwwHwYDVR0jBBgwFoAUF+nkvGubJJ1zMAqaiW7ze5zlQ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJm
OGI4ZmEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHY+VWSP3VLIPqG2mh0i6V15/gXBVBpvQlil1i4Vgi4qz6wGbumfZ/y
pFb+7g3rY9uMdLAwANTNGiN/5otskoqUsPOhl+hqjpIlg/UjLzzmbwCNbvxJHYk8
PIqFdHtGsB/VkDFH8bYevzH3mgqGp9eJvphuge67IouFlC3kuyk0CApjVG7csTGX
x6yDcUlVPz2cJk2LYmUopDQwsA9XzXa2OcvJ3NmW43kmtgxaA6WN1I1TSv29+fXd
oNv2VDawuXJoRZgcg7flUle5XkT1ZPswIYkmHdiHdmdlSXVdlNMcRvNaVk0PEany
lBy6END2rYSRQBVptOjZoBJZeltWRnY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:18 2025 by rpki-client