Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/882ba558-d258-391c-8274-5bd4cb10b95c.roa
File: 882ba558-d258-391c-8274-5bd4cb10b95c.roa (raw, json)
Hash identifier: soTUWJ/QkwqFmTlV5pG1OE7xMATntJDz86F/C5OhjdY=
Subject key identifier: AD:F7:6E:11:81:EA:FE:67:62:C8:9B:48:EC:D5:2A:69:16:27:64:4B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848B1B93770EAA1E0258A053E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/882ba558-d258-391c-8274-5bd4cb10b95c.roa
Signing time: Tue 28 Jan 2025 11:58:09 +0000
ROA not before: Tue 28 Jan 2025 11:58:09 +0000
ROA not after: Mon 28 Apr 2025 10:58:09 +0000
asID: 208485
IP address blocks: 206.123.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 11:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:b9:37:70:ea:a1:e0:25:8a:05:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 28 11:58:09 2025 GMT
Not After : Apr 28 10:58:09 2025 GMT
Subject: CN=9b1ef432-9a52-43f2-a675-a56ac5b7e659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:41:17:42:e0:cf:14:43:74:77:99:20:57:
2f:b4:7c:d8:bd:1a:b0:00:6e:63:d9:97:c7:03:89:
e9:f9:2f:ef:90:25:bd:ed:33:43:e4:05:fd:c6:6a:
f6:c2:46:fc:20:ab:85:b5:f0:1c:25:f7:d9:25:06:
8f:80:f9:1d:77:ed:07:5b:61:13:42:6d:4f:aa:b6:
7e:89:ba:18:22:6f:99:f1:25:74:3e:c8:2e:49:4a:
27:a6:6e:a6:aa:20:83:9b:67:90:69:1f:92:d7:4b:
f6:de:e1:29:48:53:7a:99:8f:55:43:46:ee:a7:7c:
75:e8:fe:d1:c6:77:8d:12:c0:27:5c:b8:9f:73:e6:
72:be:3f:42:18:96:b2:b9:ac:eb:b2:ca:81:bd:b8:
22:fa:9f:85:af:cb:c2:be:a8:11:0c:f7:6c:b5:9f:
f2:05:26:6a:af:d2:b6:1f:b9:ec:b7:36:00:7e:08:
fe:c2:f1:8f:22:67:a8:42:b7:b0:48:23:86:3f:ca:
d4:b0:1d:ef:17:fb:f8:3b:af:e8:fd:fd:ac:6f:19:
d0:4e:38:73:84:f8:f3:90:cb:eb:92:ba:e3:c8:2b:
9f:e8:7e:5a:7d:71:56:32:57:0e:36:c3:82:ef:c9:
19:6d:02:25:e8:38:25:4b:73:e2:31:da:02:27:04:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F7:6E:11:81:EA:FE:67:62:C8:9B:48:EC:D5:2A:69:16:27:64:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/882ba558-d258-391c-8274-5bd4cb10b95c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ab:f4:b2:35:f1:8a:06:93:2f:57:81:e8:da:d7:7a:83:c4:
4f:6c:99:60:86:47:fd:2b:f7:ea:b1:aa:65:aa:f4:f8:d7:2b:
3c:7f:1d:29:f4:ad:02:ea:e0:18:ad:b5:7b:80:da:35:dd:67:
a9:7c:42:04:6a:ed:ef:e5:b9:6f:bf:0b:e8:ba:3c:46:d3:35:
87:14:67:02:10:89:1a:0c:df:b4:e6:64:bf:96:c6:3e:ac:90:
f2:03:88:70:3c:0a:06:33:bb:8a:fa:0d:5b:7a:76:e3:ad:b4:
02:90:ed:fa:80:81:49:1c:cc:11:4f:88:2f:30:49:09:38:8e:
95:6e:21:a3:ad:e6:fa:86:ac:df:1d:f8:5b:60:e3:07:c3:38:
02:6c:96:44:cc:80:29:47:52:34:8b:8c:7a:ea:39:74:58:a7:
df:39:b4:66:31:6f:b6:cc:2f:2e:04:1a:cd:5a:24:a5:c8:e8:
ca:76:41:7c:e0:26:95:d2:db:17:78:cf:c4:9b:7c:98:b9:f1:
e3:20:da:0a:62:00:4f:d4:7f:b7:09:18:ea:ec:9f:82:92:40:
3a:d2:63:e8:0d:a8:24:39:2a:fd:4e:2c:ce:23:cf:95:cc:e9:
87:d8:5e:8c:d6:28:4f:a0:8b:f9:07:28:12:42:bf:f7:97:7f:
bc:79:92:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEixuTdw6qHgJYoFPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyODExNTgwOVoXDTI1MDQyODEwNTgwOVowLzEtMCsGA1UEAxMk
OWIxZWY0MzItOWE1Mi00M2YyLWE2NzUtYTU2YWM1YjdlNjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx9BF0LgzxRDdHeZIFcvtHzYvRqwAG5j2ZfH
A4np+S/vkCW97TND5AX9xmr2wkb8IKuFtfAcJffZJQaPgPkdd+0HW2ETQm1PqrZ+
iboYIm+Z8SV0PsguSUonpm6mqiCDm2eQaR+S10v23uEpSFN6mY9VQ0bup3x16P7R
xneNEsAnXLifc+Zyvj9CGJayuazrssqBvbgi+p+Fr8vCvqgRDPdstZ/yBSZqr9K2
H7nstzYAfgj+wvGPImeoQrewSCOGP8rUsB3vF/v4O6/o/f2sbxnQTjhzhPjzkMvr
krrjyCuf6H5afXFWMlcONsOC78kZbQIl6DglS3PiMdoCJwQ5hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK33bhGB6v5nYsibSOzVKmkWJ2RLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODgyYmE1NTgtZDI1OC0z
OTFjLTgyNzQtNWJkNGNiMTBiOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABir9LI18YoGky9Xgeja13qDxE9smWCGR/0r9+qxqmWq9PjXKzx/HSn0
rQLq4BittXuA2jXdZ6l8QgRq7e/luW+/C+i6PEbTNYcUZwIQiRoM37TmZL+Wxj6s
kPIDiHA8CgYzu4r6DVt6duOttAKQ7fqAgUkczBFPiC8wSQk4jpVuIaOt5vqGrN8d
+Ftg4wfDOAJslkTMgClHUjSLjHrqOXRYp985tGYxb7bMLy4EGs1aJKXI6Mp2QXzg
JpXS2xd4z8SbfJi58eMg2gpiAE/Uf7cJGOrsn4KSQDrSY+gNqCQ5Kv1OLM4jz5XM
6YfYXozWKE+gi/kHKBJCv/eXf7x5kuY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:09 2025 by rpki-client