Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8757e23-1986-3272-9f2c-c1a2ce60b359.roa
File: b8757e23-1986-3272-9f2c-c1a2ce60b359.roa (raw, json)
Hash identifier: 7ZXI+WgORytvPkIqpTD6YDHjtFOp/YcXjSPvO8R7gfc=
Subject key identifier: A2:7C:11:CA:4C:A4:F9:0B:4C:9E:00:DF:40:81:85:E5:B3:01:5B:71
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848EFD2066CAAD55ABBBA32BF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8757e23-1986-3272-9f2c-c1a2ce60b359.roa
Signing time: Wed 19 Feb 2025 17:48:15 +0000
ROA not before: Wed 19 Feb 2025 17:48:15 +0000
ROA not after: Tue 20 May 2025 16:48:15 +0000
asID: 401152
IP address blocks: 142.111.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 16:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:d2:06:6c:aa:d5:5a:bb:ba:32:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 19 17:48:15 2025 GMT
Not After : May 20 16:48:15 2025 GMT
Subject: CN=2fed2b09-f130-496f-beac-0df34131ed15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:55:5d:26:28:10:bc:60:50:72:b4:31:ca:
a5:59:9f:44:c4:bd:c2:a7:52:33:e2:81:12:96:44:
4d:1f:26:4b:82:3d:2f:99:e7:da:3a:82:b7:95:dc:
fc:61:2c:65:97:34:96:a6:ce:59:67:ce:53:8b:65:
56:61:85:ae:52:94:81:6d:0a:2d:c8:d6:61:9a:d1:
d8:e1:06:5b:39:44:96:a9:ed:ce:78:ef:05:bb:42:
4f:de:11:4d:b8:12:41:79:14:3e:7a:49:ee:61:cf:
f4:9d:96:7c:18:91:fb:11:11:5d:37:f3:0c:03:52:
9a:4a:5d:ea:23:93:ea:dc:fd:94:06:94:a1:97:aa:
a2:8c:df:66:8d:a8:ba:cf:09:bb:63:9a:15:28:c0:
e7:5a:b2:3f:ed:b5:b0:d1:f3:bb:6b:d2:37:2a:d4:
21:01:ae:c8:24:79:c3:b7:89:40:94:40:ff:61:ad:
60:58:6f:3e:14:cd:2c:70:00:25:03:91:7a:68:80:
ee:86:60:73:4d:40:13:8e:f4:14:95:3b:08:8e:9e:
2a:69:7e:b6:e5:a1:b3:ec:ce:6e:9a:9a:8b:0f:12:
a8:05:05:c0:4a:e9:1e:1e:59:4b:e2:34:7c:7f:d3:
4f:c2:4f:65:51:aa:22:02:6e:ed:a1:99:2b:b7:73:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7C:11:CA:4C:A4:F9:0B:4C:9E:00:DF:40:81:85:E5:B3:01:5B:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8757e23-1986-3272-9f2c-c1a2ce60b359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:ba:53:3d:b0:4e:99:d4:63:d4:18:04:e5:96:b5:64:be:13:
87:9b:d2:27:fd:b1:93:09:f3:5b:56:c0:0f:83:d4:1b:be:b2:
64:bb:3c:fb:36:ee:2c:fb:16:e2:3f:e6:7d:85:b3:39:71:d2:
e2:3d:8b:c8:ca:7c:6e:89:53:2a:f0:ea:15:0d:84:95:24:be:
80:ac:e2:53:39:3f:33:0d:7f:3e:15:18:79:23:77:30:ff:b4:
52:ca:45:a4:34:30:66:58:c9:81:3c:87:21:22:f0:5d:dc:1d:
ee:70:8a:7a:93:cd:69:48:5e:ba:bc:53:54:c6:93:5f:e8:de:
b5:6b:aa:8f:e1:c2:15:66:a0:97:b2:02:2a:86:ba:e9:c8:94:
3b:e6:5c:8f:3a:05:a2:be:38:74:66:c7:1e:af:7a:fc:31:fc:
ca:a5:40:cc:a1:64:0c:2f:5c:9f:c7:92:8f:d5:5d:0f:62:bb:
b0:83:4a:09:d8:87:a0:74:e3:ca:af:0f:4e:68:b1:de:08:a6:
d4:63:35:33:c6:93:1e:95:79:ee:67:1a:4f:76:d2:ab:bb:c0:
15:37:68:1b:44:a6:66:85:ce:d7:ab:f6:b0:cc:44:ce:35:e0:
3e:bd:c6:36:93:3f:1a:9a:8a:df:ad:67:7a:44:58:e5:e2:5d:
d1:61:6a:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjv0gZsqtVau7oyvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDIxOTE3NDgxNVoXDTI1MDUyMDE2NDgxNVowLzEtMCsGA1UEAxMk
MmZlZDJiMDktZjEzMC00OTZmLWJlYWMtMGRmMzQxMzFlZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TdVXSYoELxgUHK0McqlWZ9ExL3Cp1Iz4oES
lkRNHyZLgj0vmefaOoK3ldz8YSxllzSWps5ZZ85Ti2VWYYWuUpSBbQotyNZhmtHY
4QZbOUSWqe3OeO8Fu0JP3hFNuBJBeRQ+eknuYc/0nZZ8GJH7ERFdN/MMA1KaSl3q
I5Pq3P2UBpShl6qijN9mjai6zwm7Y5oVKMDnWrI/7bWw0fO7a9I3KtQhAa7IJHnD
t4lAlED/Ya1gWG8+FM0scAAlA5F6aIDuhmBzTUATjvQUlTsIjp4qaX625aGz7M5u
mpqLDxKoBQXASukeHllL4jR8f9NPwk9lUaoiAm7toZkrt3Nl7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJ8EcpMpPkLTJ4A30CBheWzAVtxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjg3NTdlMjMtMTk4Ni0z
MjcyLTlmMmMtYzFhMmNlNjBiMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABa6Uz2wTpnUY9QYBOWWtWS+E4eb0if9sZMJ81tWwA+D1Bu+smS7PPs2
7iz7FuI/5n2Fszlx0uI9i8jKfG6JUyrw6hUNhJUkvoCs4lM5PzMNfz4VGHkjdzD/
tFLKRaQ0MGZYyYE8hyEi8F3cHe5winqTzWlIXrq8U1TGk1/o3rVrqo/hwhVmoJey
AiqGuunIlDvmXI86BaK+OHRmxx6vevwx/MqlQMyhZAwvXJ/Hko/VXQ9iu7CDSgnY
h6B048qvD05osd4IptRjNTPGkx6Vee5nGk920qu7wBU3aBtEpmaFzter9rDMRM41
4D69xjaTPxqait+tZ3pEWOXiXdFhaqI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:02 2025 by rpki-client