Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3b2f589a-810b-31dd-864e-710de84879cb.roa
File: 3b2f589a-810b-31dd-864e-710de84879cb.roa (raw, json)
Hash identifier: O0yED3hGg8cRzFkAKgVY0cKad+mH2ssyZMrNoaLMeVI=
Subject key identifier: 7C:57:29:4A:7E:49:C2:FD:25:14:A7:22:7F:1F:FA:94:E1:2F:BF:6C
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F4328584896474BB6E39716AB4CD203E2
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3b2f589a-810b-31dd-864e-710de84879cb.roa
Signing time: Sat 18 Jan 2025 16:01:48 +0000
ROA not before: Sat 18 Jan 2025 16:01:48 +0000
ROA not after: Fri 18 Apr 2025 15:01:48 +0000
asID: 47741
IP address blocks: 65.87.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:47:4b:b6:e3:97:16:ab:4c:d2:03:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Jan 18 16:01:48 2025 GMT
Not After : Apr 18 15:01:48 2025 GMT
Subject: CN=3369e72a-6669-4e3a-a764-245597c714e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:88:59:28:f9:58:b2:c2:bd:38:c4:51:84:
bb:9a:6f:5b:2a:66:14:40:70:dd:08:61:c6:56:13:
cd:aa:f9:45:12:9a:d3:eb:79:90:4c:c4:38:9d:db:
c9:04:14:9a:2e:22:5d:8e:ae:90:a5:b7:a8:03:98:
d8:2a:82:f5:47:75:7f:03:82:b9:42:6c:08:b0:cc:
74:59:5a:bc:6d:2c:67:7e:b1:8b:1b:e1:8f:79:39:
e1:d9:ff:9c:a2:f5:c7:d6:0c:67:7c:29:38:b3:02:
68:71:da:77:11:71:01:ce:64:34:2a:d0:ff:bd:60:
d7:8d:8f:64:c1:9c:53:d7:d1:60:0b:b1:9d:af:0d:
03:34:37:53:1a:53:ad:2a:65:f7:c5:ca:a6:18:11:
b8:3e:94:41:2f:3b:5f:15:91:f2:84:aa:c0:05:ba:
d0:38:6e:cb:a0:4e:7f:f7:e7:1e:2f:f8:b0:cd:cd:
46:2b:6b:f1:b5:e0:69:1b:68:6f:31:61:c6:28:cd:
f6:eb:58:a5:c0:ea:b2:29:fb:1d:84:d2:80:eb:0b:
df:79:1b:1d:df:b1:1c:bd:bf:d5:8d:0e:ff:95:ae:
03:10:2a:76:86:cf:94:8d:24:d3:37:0c:5a:6d:43:
5e:c8:35:33:96:c9:1c:d5:03:c8:23:e0:6d:87:73:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:29:4A:7E:49:C2:FD:25:14:A7:22:7F:1F:FA:94:E1:2F:BF:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3b2f589a-810b-31dd-864e-710de84879cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:f5:a7:58:2b:24:8e:9f:e5:f5:9f:55:5a:98:57:8f:da:7d:
ac:df:40:82:56:76:d7:20:65:10:77:b2:06:08:29:e0:34:42:
86:c6:8b:01:04:25:2c:e3:84:b0:fd:fd:59:f1:0d:68:db:90:
6b:38:8e:63:b7:07:b2:b8:b1:77:62:b8:16:5e:88:70:c3:22:
ac:05:27:01:5c:e0:ce:04:56:20:8e:30:95:c9:fe:b8:91:c7:
6b:37:65:cb:0a:c1:dd:f5:97:f0:53:f0:d7:6d:a8:52:5d:25:
c9:d0:a9:91:d0:16:d4:54:51:af:76:7f:46:d3:59:e6:57:dd:
64:ec:81:5f:e6:09:de:ed:6c:68:8c:6f:78:8f:8c:7e:7b:06:
55:21:72:e1:6c:57:d8:eb:4f:65:1c:d3:ee:a1:e9:29:56:13:
24:9d:29:e7:6b:bf:7c:57:f7:db:9c:6b:a4:0d:4b:31:21:61:
37:71:27:56:be:b3:32:69:a0:71:7c:48:ed:bf:98:0f:66:24:
f4:01:ff:b3:73:1b:1f:32:b2:da:46:5b:e5:40:3e:3a:e8:36:
1e:63:96:9f:be:2b:dc:ec:2d:ce:68:10:7a:71:a4:92:b5:88:
38:c7:c4:e1:ba:a3:7a:2a:f1:a2:53:6e:8b:63:ac:17:99:8b:
f6:3f:b0:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWR0u245cWq0zSA+IwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk
NWYzMB4XDTI1MDExODE2MDE0OFoXDTI1MDQxODE1MDE0OFowLzEtMCsGA1UEAxMk
MzM2OWU3MmEtNjY2OS00ZTNhLWE3NjQtMjQ1NTk3YzcxNGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDGIWSj5WLLCvTjEUYS7mm9bKmYUQHDdCGHG
VhPNqvlFEprT63mQTMQ4ndvJBBSaLiJdjq6QpbeoA5jYKoL1R3V/A4K5QmwIsMx0
WVq8bSxnfrGLG+GPeTnh2f+covXH1gxnfCk4swJocdp3EXEBzmQ0KtD/vWDXjY9k
wZxT19FgC7Gdrw0DNDdTGlOtKmX3xcqmGBG4PpRBLztfFZHyhKrABbrQOG7LoE5/
9+ceL/iwzc1GK2vxteBpG2hvMWHGKM3261ilwOqyKfsdhNKA6wvfeRsd37Ecvb/V
jQ7/la4DECp2hs+UjSTTNwxabUNeyDUzlskc1QPII+Bth3McBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxXKUp+ScL9JRSnIn8f+pThL79sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl
Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvM2IyZjU4OWEtODEwYi0z
MWRkLTg2NGUtNzEwZGU4NDg3OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky
ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi
ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk
M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACr1p1grJI6f5fWfVVqYV4/afazfQIJWdtcgZRB3sgYIKeA0QobGiwEE
JSzjhLD9/VnxDWjbkGs4jmO3B7K4sXdiuBZeiHDDIqwFJwFc4M4EViCOMJXJ/riR
x2s3ZcsKwd31l/BT8NdtqFJdJcnQqZHQFtRUUa92f0bTWeZX3WTsgV/mCd7tbGiM
b3iPjH57BlUhcuFsV9jrT2Uc0+6h6SlWEySdKedrv3xX99uca6QNSzEhYTdxJ1a+
szJpoHF8SO2/mA9mJPQB/7NzGx8ystpGW+VAPjroNh5jlp++K9zsLc5oEHpxpJK1
iDjHxOG6o3oq8aJTbotjrBeZi/Y/sPU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:35 2025 by rpki-client