Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/608828fa-f6e5-35a0-8554-9040148c5e64.roa
File: 608828fa-f6e5-35a0-8554-9040148c5e64.roa (raw, json)
Hash identifier: +s1tgmfdgXAzc8RULOXSLUxN5NHO1bJDSc/fwSAWn6o=
Subject key identifier: 0E:B8:19:73:04:AB:3B:AB:EE:81:65:7D:7F:1C:65:BB:48:1F:1D:29
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584951B26D3A42E1D900E29CD580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/608828fa-f6e5-35a0-8554-9040148c5e64.roa
Signing time: Wed 26 Mar 2025 19:13:49 +0000
ROA not before: Wed 26 Mar 2025 19:13:49 +0000
ROA not after: Tue 24 Jun 2025 19:13:49 +0000
asID: 401152
IP address blocks: 136.0.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 16:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:51:b2:6d:3a:42:e1:d9:00:e2:9c:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Mar 26 19:13:49 2025 GMT
Not After : Jun 24 19:13:49 2025 GMT
Subject: CN=b2ecf483-752b-4ad1-bbe8-7945ac33eef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:14:ad:95:0f:5c:cc:84:6d:4f:90:9c:0a:
e9:e8:b6:d0:8c:b9:e1:79:dd:eb:12:26:8b:09:5a:
a3:01:7d:8b:f1:30:a3:f3:c3:1f:92:81:6f:27:18:
fd:5c:15:18:63:9d:d8:85:de:14:7b:cb:ef:ed:64:
87:37:6c:f1:f7:24:c4:1d:fd:e5:c1:91:c8:71:6a:
ac:25:65:4a:26:da:af:fd:31:04:c3:e6:a8:c8:bb:
07:6c:f5:04:da:07:24:6a:c1:27:7a:cf:09:1a:68:
4f:1f:c7:0b:39:1d:e4:13:90:1d:79:df:4f:6c:21:
16:99:62:d0:21:0d:99:fe:6c:05:8b:82:db:fc:ae:
f8:a7:46:f5:19:52:79:17:fe:ab:17:f7:42:a8:b3:
7f:81:f9:53:89:ab:bb:7c:b6:b2:50:73:d9:8d:cd:
63:68:ce:ed:85:1e:2f:83:da:c8:1b:88:6d:c6:58:
2e:ec:2a:dd:da:d1:b1:95:46:71:5a:3a:08:84:cd:
72:c0:e5:47:49:72:02:cd:53:d3:30:0e:9f:4e:ef:
03:94:f4:50:d9:d0:dd:2c:5d:7f:8f:05:1e:8a:52:
9a:0a:fa:5f:01:58:fd:33:05:3f:c4:8b:da:14:b4:
88:b7:91:a0:83:84:ed:f4:f1:7e:e3:b5:93:72:43:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:19:73:04:AB:3B:AB:EE:81:65:7D:7F:1C:65:BB:48:1F:1D:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/608828fa-f6e5-35a0-8554-9040148c5e64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ac:a5:cb:41:1c:0a:f8:1e:f6:48:2f:02:99:a8:1a:78:6e:
bd:de:b7:89:ef:38:1b:03:e9:0f:6f:0f:81:a7:73:ab:2b:be:
e4:7f:c7:c9:5b:1a:12:dd:06:47:df:82:cb:f7:62:b7:e1:52:
83:f1:6f:59:df:1e:b5:4e:0f:a8:7c:0a:28:b6:62:39:40:5f:
f2:c0:25:a2:14:04:27:ce:e6:30:fe:a4:0b:ce:f0:26:0d:bf:
ce:41:da:af:dc:8c:36:b9:42:ca:8a:78:28:d6:29:b9:8b:7a:
59:48:54:32:5f:0a:63:1e:7a:89:12:b1:85:23:39:ea:d3:e9:
5d:52:8d:51:a9:39:30:6c:fa:42:a5:9b:f2:eb:b4:11:ad:14:
bb:61:f6:95:8c:95:7a:51:16:c9:e9:d6:77:ac:99:53:15:32:
e2:89:81:29:97:58:c9:73:8c:5c:8e:f7:9b:e0:72:fe:a1:0c:
db:25:74:34:37:81:e4:1a:26:ba:f6:17:dd:a8:d7:f5:db:40:
51:9d:51:9a:37:b5:d0:23:c7:ad:ca:3d:06:d6:ef:16:6b:7e:
db:21:32:8c:be:f9:b9:52:6b:04:aa:95:be:03:e5:a8:a8:7f:
08:5c:ab:1b:2b:db:e9:0a:77:fe:8c:a6:74:6f:59:cf:da:48:
04:e5:23:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRsm06QuHZAOKc1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDMyNjE5MTM0OVoXDTI1MDYyNDE5MTM0OVowLzEtMCsGA1UEAxMk
YjJlY2Y0ODMtNzUyYi00YWQxLWJiZTgtNzk0NWFjMzNlZWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwMUrZUPXMyEbU+QnArp6LbQjLnhed3rEiaL
CVqjAX2L8TCj88MfkoFvJxj9XBUYY53Yhd4Ue8vv7WSHN2zx9yTEHf3lwZHIcWqs
JWVKJtqv/TEEw+aoyLsHbPUE2gckasEnes8JGmhPH8cLOR3kE5Aded9PbCEWmWLQ
IQ2Z/mwFi4Lb/K74p0b1GVJ5F/6rF/dCqLN/gflTiau7fLayUHPZjc1jaM7thR4v
g9rIG4htxlgu7Crd2tGxlUZxWjoIhM1ywOVHSXICzVPTMA6fTu8DlPRQ2dDdLF1/
jwUeilKaCvpfAVj9MwU/xIvaFLSIt5Ggg4Tt9PF+47WTckPwxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA64GXMEqzur7oFlfX8cZbtIHx0pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjA4ODI4ZmEtZjZlNS0z
NWEwLTg1NTQtOTA0MDE0OGM1ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmspctBHAr4HvZILwKZqBp4br3et4nvOBsD6Q9vD4Gnc6srvuR/x8lb
GhLdBkffgsv3YrfhUoPxb1nfHrVOD6h8Cii2YjlAX/LAJaIUBCfO5jD+pAvO8CYN
v85B2q/cjDa5QsqKeCjWKbmLellIVDJfCmMeeokSsYUjOerT6V1SjVGpOTBs+kKl
m/LrtBGtFLth9pWMlXpRFsnp1nesmVMVMuKJgSmXWMlzjFyO95vgcv6hDNsldDQ3
geQaJrr2F92o1/XbQFGdUZo3tdAjx63KPQbW7xZrftshMoy++blSawSqlb4D5aio
fwhcqxsr2+kKd/6MpnRvWc/aSATlI2U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:51 2025 by rpki-client