Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/a917e9bb-de99-3334-aa9d-725bcbd772cc.roa
File: a917e9bb-de99-3334-aa9d-725bcbd772cc.roa (raw, json)
Hash identifier: klB1bCC3AsBVIya6C93o4XJIr/UMJWMBM6EUIZgDuks=
Subject key identifier: 7E:49:FC:14:52:0A:56:1E:69:E8:ED:2D:D7:46:E7:5B:EA:64:05:12
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F43285848CBBE5C61141D5FC22F36E780
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/a917e9bb-de99-3334-aa9d-725bcbd772cc.roa
Signing time: Thu 06 Feb 2025 19:39:32 +0000
ROA not before: Thu 06 Feb 2025 19:39:32 +0000
ROA not after: Wed 07 May 2025 18:39:32 +0000
asID: 14618
IP address blocks: 209.54.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 06 Feb 2025 21:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:be:5c:61:14:1d:5f:c2:2f:36:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: Feb 6 19:39:32 2025 GMT
Not After : May 7 18:39:32 2025 GMT
Subject: CN=4531d28e-8906-4c3c-a715-7b65dc72d381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:3a:09:48:f9:52:56:22:3d:14:e8:35:f9:
ac:ce:db:a5:ad:0f:0b:fe:f0:82:4e:73:4e:dd:5f:
31:5e:ec:e4:4a:a5:1f:f9:db:94:e9:ac:71:de:0c:
b3:1d:99:ff:e6:d1:14:21:8c:be:90:a9:2f:76:87:
4c:08:90:31:39:54:4b:e8:d0:c5:39:92:95:4b:fa:
cb:9a:f9:6f:ba:c3:c1:1a:2e:5a:d9:6b:da:50:ce:
f6:e0:9c:14:16:88:d1:01:5b:d0:bd:8c:a3:34:2a:
83:25:5a:8f:0d:b7:4c:24:3b:80:a2:ac:69:c7:9d:
d5:8b:33:8a:af:9f:3e:2e:2d:ef:14:0a:76:fa:21:
e4:a1:51:41:3f:6f:61:f6:0f:91:86:13:b1:e6:0e:
21:0a:6a:a0:44:67:c3:e7:38:50:90:b9:da:db:96:
6a:ba:40:30:e5:5a:ff:e0:e0:10:f5:6e:a3:19:18:
ac:cb:58:d7:37:5b:8e:90:91:c0:08:5d:d1:a6:54:
21:49:48:3e:c3:92:c9:11:d3:d2:1a:9e:b6:7c:98:
80:02:c7:31:d6:94:51:53:57:6c:16:3b:ee:f9:d5:
19:6d:a3:82:2a:69:1f:07:63:ac:7b:6d:1a:b6:02:
d6:a7:c3:ad:f3:74:b0:7e:4d:ba:96:e6:e9:44:7f:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:49:FC:14:52:0A:56:1E:69:E8:ED:2D:D7:46:E7:5B:EA:64:05:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/a917e9bb-de99-3334-aa9d-725bcbd772cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.54.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:1d:94:90:8c:a2:26:a1:7d:ee:d5:b5:35:be:ed:8f:2f:36:
80:d9:7c:77:d3:61:8f:e4:a9:3c:91:42:fe:ee:fa:4d:b0:7d:
60:67:81:7e:70:73:5f:00:6e:c3:8e:3f:0d:79:e2:cd:2e:1b:
15:cb:b6:79:c2:08:fa:12:0f:ca:02:a7:3c:e8:c3:74:5f:b1:
3b:aa:1c:a4:da:02:52:1a:ce:3b:c2:dc:68:f6:c3:13:af:ad:
22:3e:12:1a:ef:e3:27:03:7b:8b:7b:03:68:30:a3:dc:7d:42:
69:94:3d:9d:6b:d7:ab:0a:16:98:03:3e:03:aa:32:42:c5:92:
5f:68:6d:84:e5:7c:0d:01:fc:08:e5:4c:ba:06:82:15:a2:54:
17:b1:fb:9c:9f:2a:26:24:72:c9:78:a0:55:1d:81:58:d1:f7:
18:11:e1:07:dd:21:80:4e:da:bb:a7:2d:68:96:55:8b:f2:c6:
4e:5d:d2:5d:3d:6c:55:59:44:61:cc:7b:eb:df:ff:89:26:a9:
bc:33:70:af:fb:26:b1:ed:1d:7c:f3:3e:14:97:1a:45:a1:b3:
60:02:9d:2e:e3:5e:20:ed:bc:a3:f1:c4:12:1c:d9:6f:b0:f3:
bc:10:54:ad:c4:92:c2:6f:5b:c2:00:1e:80:3b:32:29:31:96:
b0:4a:f3:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLvlxhFB1fwi8254AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy
MzRlMB4XDTI1MDIwNjE5MzkzMloXDTI1MDUwNzE4MzkzMlowLzEtMCsGA1UEAxMk
NDUzMWQyOGUtODkwNi00YzNjLWE3MTUtN2I2NWRjNzJkMzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtQ6CUj5UlYiPRToNfmsztulrQ8L/vCCTnNO
3V8xXuzkSqUf+duU6axx3gyzHZn/5tEUIYy+kKkvdodMCJAxOVRL6NDFOZKVS/rL
mvlvusPBGi5a2WvaUM724JwUFojRAVvQvYyjNCqDJVqPDbdMJDuAoqxpx53VizOK
r58+Li3vFAp2+iHkoVFBP29h9g+RhhOx5g4hCmqgRGfD5zhQkLna25ZqukAw5Vr/
4OAQ9W6jGRisy1jXN1uOkJHACF3RplQhSUg+w5LJEdPSGp62fJiAAscx1pRRU1ds
Fjvu+dUZbaOCKmkfB2Ose20atgLWp8Ot83Swfk26lubpRH/cmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5J/BRSClYeaejtLddG51vqZAUSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3
MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvYTkxN2U5YmItZGU5OS0z
MzM0LWFhOWQtNzI1YmNiZDc3MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0
MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3
MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh
ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKsdlJCMoiahfe7VtTW+7Y8vNoDZfHfTYY/kqTyRQv7u+k2wfWBngX5w
c18AbsOOPw154s0uGxXLtnnCCPoSD8oCpzzow3RfsTuqHKTaAlIazjvC3Gj2wxOv
rSI+Ehrv4ycDe4t7A2gwo9x9QmmUPZ1r16sKFpgDPgOqMkLFkl9obYTlfA0B/Ajl
TLoGghWiVBex+5yfKiYkcsl4oFUdgVjR9xgR4QfdIYBO2runLWiWVYvyxk5d0l09
bFVZRGHMe+vf/4kmqbwzcK/7JrHtHXzzPhSXGkWhs2ACnS7jXiDtvKPxxBIc2W+w
87wQVK3EksJvW8IAHoA7MikxlrBK8w4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:40 2025 by rpki-client