Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/69cb72dd-b7ab-340a-bbb1-91965ba29cb2.roa
File: 69cb72dd-b7ab-340a-bbb1-91965ba29cb2.roa (raw, json)
Hash identifier: c5GCwCtdQC8ql3hNTZNeAsNm+Qnnk3TWiq3t3EopA4U=
Subject key identifier: FF:38:BB:1A:B5:C0:F0:64:20:68:E6:CC:3F:98:0C:E0:CB:56:BB:E5
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F432858494BB9FC0D43DCD938CE832080
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/69cb72dd-b7ab-340a-bbb1-91965ba29cb2.roa
Signing time: Mon 24 Mar 2025 15:54:11 +0000
ROA not before: Mon 24 Mar 2025 15:54:11 +0000
ROA not after: Sun 22 Jun 2025 15:54:11 +0000
asID: 55154
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 25 Mar 2025 21:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:b9:fc:0d:43:dc:d9:38:ce:83:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Mar 24 15:54:11 2025 GMT
Not After : Jun 22 15:54:11 2025 GMT
Subject: CN=c8621af7-c526-445a-9bfd-31b090e3fe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:b1:e9:95:2d:60:b0:b2:c6:36:f9:2d:91:
2f:53:12:df:93:24:48:be:11:4c:61:a7:12:de:a6:
f1:6b:71:a2:ba:5e:9c:9f:40:80:fa:ed:e4:9a:8e:
e8:ca:be:22:03:7f:47:00:40:95:ec:05:69:d4:a3:
59:20:e0:51:ff:fa:1a:1b:dc:8a:3a:24:dc:4e:7e:
eb:8a:bf:b0:e0:a8:24:05:41:e8:5c:62:e6:59:80:
fc:40:3d:fc:cd:50:24:67:52:0b:91:33:73:3b:85:
5c:f2:d0:e9:19:da:1c:6f:23:e6:f0:86:93:36:27:
2c:7e:5c:94:54:95:a3:cb:5c:58:73:ca:6b:0b:b6:
ce:a6:a2:f2:5f:67:43:e0:e2:01:b2:f5:fe:3b:a6:
80:e1:74:9c:64:d2:e0:0c:dd:e5:c1:40:1c:4e:68:
f9:3d:36:f3:6d:85:a2:b9:87:ae:4b:c3:73:94:16:
98:d5:49:7e:6d:9f:85:27:aa:9f:79:bb:7c:2e:3f:
d3:3b:31:5f:90:7e:1f:3f:37:f6:dc:e2:a0:b5:19:
b9:64:c0:87:7b:0f:44:c0:4a:0c:6c:d5:ba:b2:97:
00:22:f7:74:ba:90:4e:a8:aa:49:18:a0:f4:b9:fa:
49:c1:e0:75:99:0e:25:48:3a:4d:78:a2:93:db:a5:
c3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:BB:1A:B5:C0:F0:64:20:68:E6:CC:3F:98:0C:E0:CB:56:BB:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/69cb72dd-b7ab-340a-bbb1-91965ba29cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:a6:85:8e:98:1e:a0:70:a5:70:4f:9e:c8:b9:28:36:4d:db:
19:8b:d2:29:c1:00:af:40:28:ed:bc:78:33:8e:5e:db:e4:15:
c6:c1:3d:54:5b:96:d9:1b:85:3f:a2:3a:60:28:42:a0:c0:c5:
97:bb:7c:71:e3:66:fb:28:e6:96:4b:aa:9c:b0:1d:f5:1a:d0:
bc:ac:c7:df:b6:55:7c:75:0b:ee:65:f3:34:d6:c4:c5:89:1f:
e5:53:97:b4:73:ae:00:06:0d:b7:d7:d6:a3:94:ba:71:1e:12:
2f:76:86:0f:9a:c8:d9:04:2c:ef:90:b9:4d:75:7b:1d:23:d0:
a9:7f:63:4a:0c:15:4d:2f:b5:82:7e:14:f6:c5:e9:56:13:14:
af:b1:67:54:a9:c7:16:8e:d1:56:ae:60:c6:c8:53:de:19:c5:
93:b9:01:f6:ed:fa:1f:04:c0:7c:57:0c:49:67:60:73:9f:1c:
6a:a5:3c:43:74:84:73:91:48:87:92:bb:15:e4:70:56:bc:1d:
62:6f:b8:c0:48:a1:cb:e9:8a:6f:ef:10:0b:fc:40:56:fe:e4:
1b:98:35:1f:80:cf:86:2e:fb:f9:5b:7f:bd:80:51:52:a7:ff:
a6:f2:c7:f7:5e:d8:f6:67:69:a8:91:39:d1:a4:03:5f:1a:d6:
e5:ea:08:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLufwNQ9zZOM6DIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQxOGI3YmItN2YxYy00MzMzLTliOGUtYmFiZjhiOGZh
MzkxMB4XDTI1MDMyNDE1NTQxMVoXDTI1MDYyMjE1NTQxMVowLzEtMCsGA1UEAxMk
Yzg2MjFhZjctYzUyNi00NDVhLTliZmQtMzFiMDkwZTNmZThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyix6ZUtYLCyxjb5LZEvUxLfkyRIvhFMYacS
3qbxa3Giul6cn0CA+u3kmo7oyr4iA39HAECV7AVp1KNZIOBR//oaG9yKOiTcTn7r
ir+w4KgkBUHoXGLmWYD8QD38zVAkZ1ILkTNzO4Vc8tDpGdocbyPm8IaTNicsflyU
VJWjy1xYc8prC7bOpqLyX2dD4OIBsvX+O6aA4XScZNLgDN3lwUAcTmj5PTbzbYWi
uYeuS8NzlBaY1Ul+bZ+FJ6qfebt8Lj/TOzFfkH4fPzf23OKgtRm5ZMCHew9EwEoM
bNW6spcAIvd0upBOqKpJGKD0ufpJweB1mQ4lSDpNeKKT26XD5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP84uxq1wPBkIGjmzD+YDODLVrvlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NDE4
YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4ZmEzOTEvNjljYjcyZGQtYjdhYi0z
NDBhLWJiYjEtOTE5NjViYTI5Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDQxOGI3YmItN2YxYy00MzMzLTli
OGUtYmFiZjhiOGZhMzkxLzQ0MThiN2JiLTdmMWMtNDMzMy05YjhlLWJhYmY4Yjhm
YTM5MS5jcmwwHwYDVR0jBBgwFoAUF+nkvGubJJ1zMAqaiW7ze5zlQ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJm
OGI4ZmEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqmhY6YHqBwpXBPnsi5KDZN2xmL0inBAK9AKO28eDOOXtvkFcbBPVRb
ltkbhT+iOmAoQqDAxZe7fHHjZvso5pZLqpywHfUa0Lysx9+2VXx1C+5l8zTWxMWJ
H+VTl7RzrgAGDbfX1qOUunEeEi92hg+ayNkELO+QuU11ex0j0Kl/Y0oMFU0vtYJ+
FPbF6VYTFK+xZ1SpxxaO0VauYMbIU94ZxZO5Afbt+h8EwHxXDElnYHOfHGqlPEN0
hHORSIeSuxXkcFa8HWJvuMBIocvpim/vEAv8QFb+5BuYNR+Az4Yu+/lbf72AUVKn
/6byx/de2PZnaaiROdGkA18a1uXqCEI=
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:37:33 2025 by rpki-client