Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/525d5c73-999c-3d20-9629-a922b8ea6c9b.roa
File: 525d5c73-999c-3d20-9629-a922b8ea6c9b.roa (raw, json)
Hash identifier: H0SOZVyA6XT+3n7rEhop+c6VebwNLO9R44Fd6e9laMg=
Subject key identifier: 4F:E6:2F:24:74:58:AE:D1:8B:E8:A9:E4:51:9F:AC:1A:51:FD:2C:05
Certificate issuer: /CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Certificate serial: 010D0C9F43285849018684AB65B3A792A896A880
Authority key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/525d5c73-999c-3d20-9629-a922b8ea6c9b.roa
Signing time: Wed 26 Feb 2025 02:00:39 +0000
ROA not before: Wed 26 Feb 2025 02:00:39 +0000
ROA not after: Tue 27 May 2025 01:00:39 +0000
asID: 212232
IP address blocks: 115.84.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 02:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:01:86:84:ab:65:b3:a7:92:a8:96:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Validity
Not Before: Feb 26 02:00:39 2025 GMT
Not After : May 27 01:00:39 2025 GMT
Subject: CN=3e69aa42-cb8c-4fa2-9a93-6f775985a9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:cb:01:55:52:d2:e0:8d:44:ad:5c:e8:74:
f8:8f:b8:d0:1e:c7:e9:fb:7e:7d:a3:fb:a3:f0:c3:
cc:30:19:be:95:d1:16:1e:2c:05:f0:f9:0e:bd:67:
b6:5d:d8:fe:8c:6e:1d:f1:8e:83:bf:9d:f4:5c:62:
d8:aa:ca:bb:0b:17:8a:a6:7e:5c:e9:c5:25:5b:f9:
62:8a:54:57:6c:c2:e8:70:4f:37:22:03:c8:c6:0d:
a0:45:66:f4:82:a4:b8:26:79:12:52:47:15:94:15:
98:11:46:a1:23:a5:77:1b:0c:0e:c6:b2:7c:ea:0a:
ad:d1:03:e2:88:93:df:84:d8:d7:bb:56:e9:12:e1:
32:12:d9:e9:29:86:c5:dd:21:7e:cc:d6:8f:c6:fc:
ab:b8:51:a8:de:e3:dc:08:15:18:a5:bd:74:64:2d:
86:98:45:e7:77:32:7f:1d:00:43:49:f2:6f:9d:6e:
b4:54:be:e9:60:85:35:63:9c:0c:fb:f2:cf:af:6c:
25:da:b4:85:ad:55:3a:f8:76:25:e1:e9:84:db:fc:
0c:8a:ed:68:d7:45:95:ee:3c:23:df:71:74:ed:35:
75:47:43:f0:81:e6:a0:42:c1:b4:68:13:1b:fe:27:
c0:d6:9f:4d:a7:ee:9e:70:05:28:34:7b:36:5d:5f:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E6:2F:24:74:58:AE:D1:8B:E8:A9:E4:51:9F:AC:1A:51:FD:2C:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/525d5c73-999c-3d20-9629-a922b8ea6c9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl
X509v3 Authority Key Identifier:
keyid:70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
sbgp-ipAddrBlock: critical
IPv4:
115.84.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:cc:4d:9b:4c:f0:d7:4a:a2:2a:39:58:08:02:d3:10:20:47:
43:de:1b:83:c1:57:57:5d:3a:28:ce:8c:80:4b:b4:2c:1f:d5:
6a:22:0a:65:3c:4e:a6:40:cb:8c:53:b3:72:47:2b:09:3c:0c:
2d:ac:a7:3d:68:a8:63:01:35:33:89:dd:ae:5f:36:6d:44:57:
73:2b:41:f0:eb:72:67:61:af:6c:a5:48:14:1f:aa:b7:22:fc:
06:f7:98:a9:91:6e:cc:7b:49:fc:64:f5:94:00:6a:31:22:52:
5c:1a:3e:06:68:f3:75:ae:d8:9d:da:af:b8:b6:11:81:67:0e:
d6:d1:26:d7:fb:63:f6:3f:ee:0a:97:0a:31:63:32:b6:17:95:
f0:3d:1a:a6:47:c5:73:25:05:69:10:31:ef:b0:00:fe:00:65:
82:36:33:74:01:db:36:f0:b5:76:82:e6:98:d7:45:22:2f:cc:
b4:5e:53:90:aa:e0:f1:7f:8d:c1:33:c7:d1:d7:d4:77:55:79:
f1:40:1b:1e:50:10:0f:35:fe:23:64:e8:04:81:90:15:ca:80:
23:de:3c:c7:08:49:fc:1e:d3:fc:b5:9e:58:5e:b8:a4:6f:7b:
d6:46:45:da:ea:a4:fc:b6:7b:65:d7:61:68:87:79:1e:d1:df:
05:0c:ea:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkBhoSrZbOnkqiWqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg5NTBjM2QtM2I0My00NWI4LTkzY2ItZmJmOTk1Njhj
MzExMB4XDTI1MDIyNjAyMDAzOVoXDTI1MDUyNzAxMDAzOVowLzEtMCsGA1UEAxMk
M2U2OWFhNDItY2I4Yy00ZmEyLTlhOTMtNmY3NzU5ODVhOWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg/LAVVS0uCNRK1c6HT4j7jQHsfp+359o/uj
8MPMMBm+ldEWHiwF8PkOvWe2Xdj+jG4d8Y6Dv530XGLYqsq7CxeKpn5c6cUlW/li
ilRXbMLocE83IgPIxg2gRWb0gqS4JnkSUkcVlBWYEUahI6V3GwwOxrJ86gqt0QPi
iJPfhNjXu1bpEuEyEtnpKYbF3SF+zNaPxvyruFGo3uPcCBUYpb10ZC2GmEXndzJ/
HQBDSfJvnW60VL7pYIU1Y5wM+/LPr2wl2rSFrVU6+HYl4emE2/wMiu1o10WV7jwj
33F07TV1R0PwgeagQsG0aBMb/ifA1p9Np+6ecAUoNHs2XV8d6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/mLyR0WK7Ri+ip5FGfrBpR/SwFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lODk1
MGMzZC0zYjQzLTQ1YjgtOTNjYi1mYmY5OTU2OGMzMTEvNTI1ZDVjNzMtOTk5Yy0z
ZDIwLTk2MjktYTkyMmI4ZWE2YzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTg5NTBjM2QtM2I0My00NWI4LTkz
Y2ItZmJmOTk1NjhjMzExL2U4OTUwYzNkLTNiNDMtNDViOC05M2NiLWZiZjk5NTY4
YzMxMS5jcmwwHwYDVR0jBBgwFoAUcIVIM7amlvXdt+DyVMqKKYD/SYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lODk1MGMzZC0zYjQzLTQ1YjgtOTNjYi1mYmY5
OTU2OGMzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAc1TNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfMTZtM8NdKoio5WAgC0xAgR0PeG4PBV1ddOijOjIBLtCwf1WoiCmU8
TqZAy4xTs3JHKwk8DC2spz1oqGMBNTOJ3a5fNm1EV3MrQfDrcmdhr2ylSBQfqrci
/Ab3mKmRbsx7Sfxk9ZQAajEiUlwaPgZo83Wu2J3ar7i2EYFnDtbRJtf7Y/Y/7gqX
CjFjMrYXlfA9GqZHxXMlBWkQMe+wAP4AZYI2M3QB2zbwtXaC5pjXRSIvzLReU5Cq
4PF/jcEzx9HX1HdVefFAGx5QEA81/iNk6ASBkBXKgCPePMcISfwe0/y1nlheuKRv
e9ZGRdrqpPy2e2XXYWiHeR7R3wUM6pI=
-----END CERTIFICATE-----
Generated at Wed Mar 12 20:01:15 2025 by rpki-client