Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/53eafe7e-e084-3d04-b293-fc2bff941e99.roa
File: 53eafe7e-e084-3d04-b293-fc2bff941e99.roa (raw, json)
Hash identifier: 860ZLvFvah5HqwdVeXI5W7khVvqYVEVx+++c5D4MjZ0=
Subject key identifier: 75:7A:55:CC:7A:CC:43:A7:50:E4:CF:B2:E0:93:89:40:D8:A7:C2:FE
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848E2159495EC62F284C2008E60
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/53eafe7e-e084-3d04-b293-fc2bff941e99.roa
Signing time: Fri 14 Feb 2025 19:43:03 +0000
ROA not before: Fri 14 Feb 2025 19:43:03 +0000
ROA not after: Thu 15 May 2025 18:43:03 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 14 Feb 2025 22:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:15:94:95:ec:62:f2:84:c2:00:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 14 19:43:03 2025 GMT
Not After : May 15 18:43:03 2025 GMT
Subject: CN=538af2e5-38e8-46a1-ab23-ca2a486d396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:5f:89:c9:33:db:60:81:44:d9:cc:17:3c:
63:a0:f8:85:97:96:56:9e:3f:0e:dd:93:ff:ad:30:
89:27:a0:f9:b6:2c:44:b8:c1:13:ef:52:83:ce:5a:
e7:d8:24:41:08:62:84:4c:e8:2a:08:08:c7:26:0e:
4a:6a:da:ba:60:8d:29:9b:ad:bd:11:19:75:10:a9:
99:0c:89:ef:ae:b7:80:75:31:2b:ee:dc:2b:30:ff:
b1:60:72:62:e6:f8:e9:0f:50:39:94:37:a9:04:63:
8b:4d:c3:b1:9a:c2:15:d2:09:9d:47:2e:87:88:64:
42:91:04:5c:ca:ab:27:c5:3a:b4:d2:ab:bb:5e:ab:
e9:a4:9b:df:74:6c:86:8f:4f:2d:3e:80:87:6a:f0:
1b:28:81:91:b9:e7:41:c7:d2:64:47:0e:73:8c:cf:
af:7d:4e:a6:21:2f:38:e7:8e:24:52:ef:80:3d:34:
84:d4:a2:de:26:d6:31:48:87:d6:7a:96:47:fc:76:
c0:42:9d:ff:9e:84:df:6f:d2:ab:81:d1:95:3a:c3:
38:3a:de:f9:60:1e:0b:66:ce:dd:c8:55:a9:8f:e2:
fa:69:3c:8e:00:ba:c3:45:3d:88:e2:25:74:95:6a:
4d:da:c5:4c:08:be:68:38:45:38:b7:eb:cf:c6:64:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7A:55:CC:7A:CC:43:A7:50:E4:CF:B2:E0:93:89:40:D8:A7:C2:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/53eafe7e-e084-3d04-b293-fc2bff941e99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:61:2a:3f:4e:c7:ff:4c:d0:7a:ef:c4:68:58:07:e2:bf:86:
99:e1:90:47:4b:34:eb:97:8b:55:8e:14:4d:8b:ac:c4:25:9f:
57:3f:df:5a:1b:4a:2f:dd:11:02:f2:e4:f3:b5:0f:99:2f:bb:
3e:82:61:c3:70:49:de:cc:07:8e:34:6b:d7:91:b8:0c:85:6f:
16:4b:00:39:c9:a2:bb:34:80:ca:b8:9a:5f:67:7a:77:b9:7c:
5f:b9:f5:48:6d:28:38:40:3f:78:ad:a7:74:e0:11:4f:08:62:
30:3f:f2:8c:f8:90:56:01:8c:f2:93:28:37:3d:fc:51:b6:20:
f4:5b:5b:9a:b6:d9:c5:0d:8a:3d:14:35:ed:13:3b:d7:09:54:
09:f6:0a:2f:6e:0d:85:c2:f0:1f:01:06:ef:67:3f:9f:cf:be:
b5:91:ad:7c:19:9d:61:72:92:4a:b5:33:bd:14:ba:00:50:ac:
2e:c4:71:b0:a4:cd:7e:db:35:53:3a:38:ad:8b:f9:b8:0c:f8:
4f:23:68:14:02:7f:18:72:a2:81:b1:5b:f2:b8:9b:d0:cb:60:
ab:32:ba:fe:a4:f0:68:fa:7e:8c:39:e9:9b:84:f5:8c:35:e3:
a6:a3:56:49:c5:9e:7a:1c:ee:fe:52:bd:28:70:db:39:70:14:
4d:3a:4a:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjiFZSV7GLyhMIAjmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3
M2JjMB4XDTI1MDIxNDE5NDMwM1oXDTI1MDUxNTE4NDMwM1owLzEtMCsGA1UEAxMk
NTM4YWYyZTUtMzhlOC00NmExLWFiMjMtY2EyYTQ4NmQzOTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYNfickz22CBRNnMFzxjoPiFl5ZWnj8O3ZP/
rTCJJ6D5tixEuMET71KDzlrn2CRBCGKETOgqCAjHJg5Katq6YI0pm629ERl1EKmZ
DInvrreAdTEr7twrMP+xYHJi5vjpD1A5lDepBGOLTcOxmsIV0gmdRy6HiGRCkQRc
yqsnxTq00qu7XqvppJvfdGyGj08tPoCHavAbKIGRuedBx9JkRw5zjM+vfU6mIS84
544kUu+APTSE1KLeJtYxSIfWepZH/HbAQp3/noTfb9KrgdGVOsM4Ot75YB4LZs7d
yFWpj+L6aTyOALrDRT2I4iV0lWpN2sVMCL5oOEU4t+vPxmRSuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHV6Vcx6zEOnUOTPsuCTiUDYp8L+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw
OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvNTNlYWZlN2UtZTA4NC0z
ZDA0LWIyOTMtZmMyYmZmOTQxZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi
NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw
NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl
ZmYyMDczYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ1hKj9Ox/9M0HrvxGhYB+K/hpnhkEdLNOuXi1WOFE2LrMQln1c/31ob
Si/dEQLy5PO1D5kvuz6CYcNwSd7MB440a9eRuAyFbxZLADnJors0gMq4ml9nene5
fF+59UhtKDhAP3itp3TgEU8IYjA/8oz4kFYBjPKTKDc9/FG2IPRbW5q22cUNij0U
Ne0TO9cJVAn2Ci9uDYXC8B8BBu9nP5/PvrWRrXwZnWFykkq1M70UugBQrC7EcbCk
zX7bNVM6OK2L+bgM+E8jaBQCfxhyooGxW/K4m9DLYKsyuv6k8Gj6fow56ZuE9Yw1
46ajVknFnnoc7v5SvShw2zlwFE06SqY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:46:35 2025 by rpki-client