Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/21c82b19-2ab0-3013-9ca9-6d3f6c90d3cb.roa
File: 21c82b19-2ab0-3013-9ca9-6d3f6c90d3cb.roa (raw, json)
Hash identifier: sz0DwzYb0Ud4rNsobv6SF5hiFmLWaWGx1M27Nc48cjE=
Subject key identifier: 19:D0:D2:64:94:C2:87:37:CC:C3:4A:C2:B5:C1:B9:9C:A7:A6:7C:55
Certificate issuer: /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087
Certificate serial: 010D0C9F43285849398E61E877B20EC83EA75680
Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/21c82b19-2ab0-3013-9ca9-6d3f6c90d3cb.roa
Signing time: Tue 18 Mar 2025 03:41:47 +0000
ROA not before: Tue 18 Mar 2025 03:41:47 +0000
ROA not after: Mon 16 Jun 2025 03:41:47 +0000
asID: 14497
IP address blocks: 199.168.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 02:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:8e:61:e8:77:b2:0e:c8:3e:a7:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087
Validity
Not Before: Mar 18 03:41:47 2025 GMT
Not After : Jun 16 03:41:47 2025 GMT
Subject: CN=3032faad-a17f-47d0-beba-3188ef4114aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:a8:40:9c:a8:82:20:b8:45:23:69:7f:95:
0f:f1:14:ba:7c:2c:6e:c2:b5:0a:4a:71:ba:0d:69:
40:79:5b:2b:59:57:d2:ff:38:d9:4b:fa:e7:d0:ef:
55:ed:c7:14:af:1f:dc:61:fb:a8:a1:21:46:ea:6f:
69:0a:63:2a:60:24:61:05:0c:59:5d:d8:b3:ee:f0:
b0:31:9d:b0:9a:b0:71:60:1a:62:ce:f8:e9:83:1b:
a0:7f:3e:a7:c8:78:f1:18:6e:b3:86:4c:fa:94:9b:
10:17:75:44:0d:16:d1:2e:0d:ac:45:84:b0:5f:e0:
c9:8b:38:79:61:0b:56:de:46:7a:59:bf:6c:fd:a5:
f3:94:9c:f1:58:ae:e7:76:38:11:a2:53:14:bd:38:
fc:8d:13:d6:f4:8d:d1:4d:e2:92:35:9a:03:0d:0a:
24:10:3c:c6:cf:7f:49:32:57:62:fc:d5:73:9d:7f:
fc:93:c1:af:16:ef:83:b2:0f:14:c8:ab:0a:a0:e3:
81:be:5c:d2:51:12:ad:04:f2:86:11:81:ef:77:a0:
be:d7:36:82:51:b5:40:1e:7e:4e:7f:8c:c8:9e:3d:
ae:a4:21:a8:43:87:3f:87:4b:cb:57:b2:42:60:95:
c7:49:e4:1d:1e:59:7b:c9:55:9f:46:fe:c6:79:b6:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:D2:64:94:C2:87:37:CC:C3:4A:C2:B5:C1:B9:9C:A7:A6:7C:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/21c82b19-2ab0-3013-9ca9-6d3f6c90d3cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl
X509v3 Authority Key Identifier:
keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:8d:53:77:7a:31:8c:40:58:bf:a7:4e:7d:85:97:26:5a:4d:
3a:a7:40:1e:65:d0:64:87:2b:3e:50:b1:64:8a:0a:62:23:b5:
f1:25:37:8b:b6:37:cd:fc:ac:9d:b8:d7:5d:c3:f9:f3:c6:6c:
81:d2:37:0e:2b:24:e3:00:41:0d:fd:8d:30:a7:55:35:56:fd:
8f:f5:65:66:fe:c2:0b:39:4c:20:f5:56:e7:63:20:d0:0a:d3:
ff:47:bb:f0:52:16:df:26:f6:f5:24:28:ea:bd:e7:8b:6c:87:
6e:9a:95:11:81:d6:b1:3d:e4:fc:63:e1:8c:e5:87:5f:8b:6d:
99:85:50:ec:86:b2:82:38:f0:ef:c8:3d:11:6f:ed:27:a1:8d:
27:d3:67:10:24:0e:b3:27:a6:16:ea:18:a7:0f:d9:d3:b9:fc:
9f:3f:5a:16:48:d8:f1:91:5e:4f:b0:83:2e:e7:dc:e7:c5:48:
81:2d:0f:0d:27:90:3a:8b:57:f9:07:15:ae:67:52:14:d6:48:
d8:0d:af:de:10:d1:b4:4c:ad:be:09:fe:7e:fd:ce:ea:f3:f6:
d4:fe:e3:f3:6d:86:0d:55:1c:b8:00:58:70:fc:11:cd:10:b3:
a7:4c:9d:b6:1e:0f:c2:42:07:bc:0f:75:61:b6:53:87:29:ed:
9e:81:3b:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5jmHod7IOyD6nVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc2YzY0YTUtM2NkMi00NGQ1LTgwYzMtNjI2Y2NjODRl
MDg3MB4XDTI1MDMxODAzNDE0N1oXDTI1MDYxNjAzNDE0N1owLzEtMCsGA1UEAxMk
MzAzMmZhYWQtYTE3Zi00N2QwLWJlYmEtMzE4OGVmNDExNGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzioQJyogiC4RSNpf5UP8RS6fCxuwrUKSnG6
DWlAeVsrWVfS/zjZS/rn0O9V7ccUrx/cYfuooSFG6m9pCmMqYCRhBQxZXdiz7vCw
MZ2wmrBxYBpizvjpgxugfz6nyHjxGG6zhkz6lJsQF3VEDRbRLg2sRYSwX+DJizh5
YQtW3kZ6Wb9s/aXzlJzxWK7ndjgRolMUvTj8jRPW9I3RTeKSNZoDDQokEDzGz39J
Mldi/NVznX/8k8GvFu+Dsg8UyKsKoOOBvlzSURKtBPKGEYHvd6C+1zaCUbVAHn5O
f4zInj2upCGoQ4c/h0vLV7JCYJXHSeQdHll7yVWfRv7GebbqwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnQ0mSUwoc3zMNKwrXBuZynpnxVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzZj
NjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZjY2M4NGUwODcvMjFjODJiMTktMmFiMC0z
MDEzLTljYTktNmQzZjZjOTBkM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTc2YzY0YTUtM2NkMi00NGQ1LTgw
YzMtNjI2Y2NjODRlMDg3LzU3NmM2NGE1LTNjZDItNDRkNS04MGMzLTYyNmNjYzg0
ZTA4Ny5jcmwwHwYDVR0jBBgwFoAUk0DOtnGW2j79FgyHIy7gqDvHHIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81NzZjNjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZj
Y2M4NGUwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6gcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGONU3d6MYxAWL+nTn2FlyZaTTqnQB5l0GSHKz5QsWSKCmIjtfElN4u2
N838rJ24113D+fPGbIHSNw4rJOMAQQ39jTCnVTVW/Y/1ZWb+wgs5TCD1VudjINAK
0/9Hu/BSFt8m9vUkKOq954tsh26alRGB1rE95Pxj4Yzlh1+LbZmFUOyGsoI48O/I
PRFv7SehjSfTZxAkDrMnphbqGKcP2dO5/J8/WhZI2PGRXk+wgy7n3OfFSIEtDw0n
kDqLV/kHFa5nUhTWSNgNr94Q0bRMrb4J/n79zurz9tT+4/Nthg1VHLgAWHD8Ec0Q
s6dMnbYeD8JCB7wPdWG2U4cp7Z6BO1w=
-----END CERTIFICATE-----
Generated at Fri Apr 18 04:08:52 2025 by rpki-client