Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/75ecc018-9f69-3ed3-8579-501b9f1102d0.roa
File: 75ecc018-9f69-3ed3-8579-501b9f1102d0.roa (raw, json)
Hash identifier: M2qt98YbycEEU7UMrFQyWwJbFsmDQXAG2U24MgSmeHI=
Subject key identifier: ED:50:32:F5:D4:8C:CB:BB:5D:19:88:CE:4E:60:07:8B:50:B1:55:FF
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858495FCE6773E6760E7DDF6B6480
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/75ecc018-9f69-3ed3-8579-501b9f1102d0.roa
Signing time: Mon 31 Mar 2025 20:31:30 +0000
ROA not before: Mon 31 Mar 2025 20:31:30 +0000
ROA not after: Sun 29 Jun 2025 20:31:30 +0000
asID: 33232
IP address blocks: 137.239.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 19:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5f:ce:67:73:e6:76:0e:7d:df:6b:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Mar 31 20:31:30 2025 GMT
Not After : Jun 29 20:31:30 2025 GMT
Subject: CN=b07079f9-cdfb-4e38-a7fb-e3293f354e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:1d:c9:97:9f:bc:db:21:3c:32:66:94:5f:
2a:52:b3:a4:36:7c:8e:4b:98:09:1a:2d:37:df:02:
66:d8:87:82:10:4b:f3:85:4b:21:16:9d:97:e1:56:
a7:bd:e4:1f:f8:5a:fd:b1:70:77:e1:d2:48:f6:39:
7e:e4:79:66:05:48:c7:9b:0d:f4:44:3f:c3:14:db:
c4:7c:9d:7e:48:a0:ef:f2:ff:62:1d:c4:e1:27:31:
aa:8f:f8:c9:0e:a2:a2:d5:c4:e5:ca:6e:ef:69:e2:
ae:93:3d:73:c5:b6:7a:2e:b6:99:ff:37:a3:96:57:
ab:3e:e9:bb:93:97:3c:e0:ce:68:46:c4:26:d3:c1:
77:64:6c:e6:e3:0e:ca:8c:51:50:52:9c:22:7d:53:
21:98:10:00:48:34:a2:ee:db:9c:52:af:19:d7:9d:
9a:23:3a:bb:6b:95:17:1d:6b:17:2f:1a:e9:bc:d2:
09:09:ab:60:57:72:18:d8:13:1e:88:d6:74:aa:ee:
90:78:3f:d2:d1:5e:54:78:89:00:a7:51:e8:fd:03:
13:1f:fb:41:a6:15:c5:ac:03:07:49:a1:0a:5d:72:
15:ea:b8:99:f8:72:95:03:72:91:72:33:24:52:f7:
28:00:62:31:7d:4e:64:fd:af:be:85:e2:17:b9:17:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:50:32:F5:D4:8C:CB:BB:5D:19:88:CE:4E:60:07:8B:50:B1:55:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/75ecc018-9f69-3ed3-8579-501b9f1102d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:20:10:45:46:dd:c4:37:93:dc:45:59:18:51:04:2f:61:ca:
c0:6d:90:bf:c3:84:d5:5e:29:39:ae:1d:5e:bf:2e:65:24:e0:
dd:52:13:43:5c:b9:73:07:21:23:05:64:b7:76:8b:1a:3f:7b:
d7:f1:6c:98:d9:43:2f:64:04:e6:97:fd:09:43:9f:a5:07:d8:
37:16:39:e2:0d:db:dc:0d:af:c1:ed:60:9d:f7:ea:7e:47:f8:
ac:8b:de:bd:c9:8d:99:fd:ca:d3:12:f8:cd:82:7e:c8:0c:44:
a4:90:88:79:f9:70:a4:1c:33:9e:3c:61:94:72:f5:1e:a1:34:
1d:4e:dd:76:9d:3b:e0:04:f3:50:f3:c9:fe:34:80:bf:12:37:
99:db:23:17:13:8b:2c:e5:42:c2:f3:e8:ac:bc:ac:90:5b:1e:
cb:5b:95:70:25:d5:d5:14:f3:23:f4:17:93:c5:21:27:c3:a2:
7e:0a:c9:46:8d:74:2f:1c:87:a8:9a:b4:31:4a:77:7d:a3:a1:
47:1a:6e:7a:a7:4f:4f:45:22:ed:cb:7c:cb:4c:7f:00:f2:96:
ad:a7:9a:97:f0:62:c8:e5:11:05:4c:f1:5b:e6:31:12:4a:0c:
87:22:07:5b:15:c6:12:fa:45:12:5c:d3:a4:4e:47:3f:77:3d:
dd:8d:d0:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElfzmdz5nYOfd9rZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI1MDMzMTIwMzEzMFoXDTI1MDYyOTIwMzEzMFowLzEtMCsGA1UEAxMk
YjA3MDc5ZjktY2RmYi00ZTM4LWE3ZmItZTMyOTNmMzU0ZTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivwdyZefvNshPDJmlF8qUrOkNnyOS5gJGi03
3wJm2IeCEEvzhUshFp2X4VanveQf+Fr9sXB34dJI9jl+5HlmBUjHmw30RD/DFNvE
fJ1+SKDv8v9iHcThJzGqj/jJDqKi1cTlym7vaeKukz1zxbZ6LraZ/zejllerPum7
k5c84M5oRsQm08F3ZGzm4w7KjFFQUpwifVMhmBAASDSi7tucUq8Z152aIzq7a5UX
HWsXLxrpvNIJCatgV3IY2BMeiNZ0qu6QeD/S0V5UeIkAp1Ho/QMTH/tBphXFrAMH
SaEKXXIV6riZ+HKVA3KRcjMkUvcoAGIxfU5k/a++heIXuReWKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1QMvXUjMu7XRmIzk5gB4tQsVX/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNzVlY2MwMTgtOWY2OS0z
ZWQzLTg1NzktNTAxYjlmMTEwMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQgEEVG3cQ3k9xFWRhRBC9hysBtkL/DhNVeKTmuHV6/LmUk4N1SE0Nc
uXMHISMFZLd2ixo/e9fxbJjZQy9kBOaX/QlDn6UH2DcWOeIN29wNr8HtYJ336n5H
+KyL3r3JjZn9ytMS+M2CfsgMRKSQiHn5cKQcM548YZRy9R6hNB1O3XadO+AE81Dz
yf40gL8SN5nbIxcTiyzlQsLz6Ky8rJBbHstblXAl1dUU8yP0F5PFISfDon4KyUaN
dC8ch6iatDFKd32joUcabnqnT09FIu3LfMtMfwDylq2nmpfwYsjlEQVM8VvmMRJK
DIciB1sVxhL6RRJc06RORz93Pd2N0FI=
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:06:23 2025 by rpki-client