Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/416d31a6-049d-3289-8e1c-8d67f3a7c0c8.roa
File: 416d31a6-049d-3289-8e1c-8d67f3a7c0c8.roa (raw, json)
Hash identifier: NoXs+3EBprZ6H0IhvI2TZwdFyUIRfsavrwuGohntQT8=
Subject key identifier: 3C:FE:69:86:DB:03:81:9B:9E:2A:DD:A3:7E:2E:BF:C1:39:5F:7C:1F
Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial: 010D0C9F43285848A400BFFD76F587EEF2963A80
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/416d31a6-049d-3289-8e1c-8d67f3a7c0c8.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 57974
IP address blocks: 23.153.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 07:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:bf:fd:76:f5:87:ee:f2:96:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=8362fcbb-ad26-4c5f-8926-7f229c39c0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:22:03:2a:cb:8c:12:83:3d:0f:74:b9:85:
87:96:70:05:bb:6d:89:fa:ec:30:2b:5f:4b:78:34:
28:3e:eb:64:69:89:4f:6e:bb:43:75:4f:01:e2:19:
1d:d2:0e:06:45:d7:bd:7e:02:2d:da:3a:1c:ed:d1:
79:1c:7d:46:f5:d5:42:65:ff:37:f3:04:64:5e:d8:
af:09:47:3b:9c:1a:11:93:00:32:88:fb:03:eb:aa:
be:ad:e4:96:ab:fc:45:7c:0d:cc:7d:08:9b:0a:5c:
71:fe:93:af:8f:62:e0:03:05:38:4e:28:1e:80:fb:
4e:bf:c0:f3:e3:c7:41:57:18:ad:f2:4f:ce:86:f2:
14:bd:9f:2e:a4:a8:cd:09:f0:c9:8c:71:32:37:04:
41:dd:29:57:39:ee:ec:a2:f0:cf:70:f9:99:b3:23:
74:75:a8:95:86:0f:10:70:36:57:c6:b1:da:c4:8f:
c9:22:5f:9a:e5:1a:dc:19:e0:14:df:88:d7:35:99:
1b:b5:e2:71:87:bb:d3:5f:cc:de:04:ef:f2:5c:f1:
12:a5:40:cb:f3:c3:54:f4:e2:9f:31:d8:44:8a:23:
e2:d1:17:5e:72:f2:bf:30:35:c8:1a:eb:9c:f4:2f:
8c:36:ae:c3:b9:78:8e:d7:cb:1c:c9:07:da:4c:d0:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FE:69:86:DB:03:81:9B:9E:2A:DD:A3:7E:2E:BF:C1:39:5F:7C:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/416d31a6-049d-3289-8e1c-8d67f3a7c0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
X509v3 Authority Key Identifier:
keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:5e:c3:ee:b1:59:b4:90:a5:a9:29:df:01:08:1c:5a:46:2b:
69:96:28:d6:bf:73:ab:c7:25:c4:67:66:ec:5a:48:07:42:b9:
05:34:97:f6:af:2c:15:24:a1:96:2f:ba:af:0e:a0:09:96:0b:
1a:90:28:a4:7d:c6:b5:88:22:b9:a5:d0:fd:05:89:cd:be:43:
51:d6:a0:8c:f2:12:14:7a:63:56:ab:6b:04:2e:35:06:03:07:
d7:fb:48:53:41:ca:90:71:80:5e:60:2a:2b:20:29:82:32:9e:
8b:12:5b:1a:96:53:98:8d:ef:de:83:c0:75:bd:bb:0d:80:1a:
ca:aa:96:1d:18:d2:85:91:be:18:02:ea:4e:02:e4:f4:24:5c:
80:73:13:a6:ab:36:44:3d:69:3e:9c:94:68:6c:f1:a7:66:50:
b1:88:d6:9c:e1:ab:ca:6d:1c:96:5c:89:a1:c6:a8:aa:ec:eb:
aa:36:ab:a0:5b:58:c7:84:f6:f1:4a:ff:e1:1d:d5:6c:10:3e:
77:f3:cb:4e:14:b6:84:09:b0:29:d8:4f:73:99:ee:d6:14:a2:
0c:2a:11:4d:7f:80:71:73:58:2b:a9:9a:44:8b:2a:3e:fd:a1:
7c:33:27:fa:bc:1e:e6:b2:ba:cb:8e:bd:11:ad:e7:ff:0b:d7:
a6:24:1e:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAL/9dvWH7vKWOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5
NzA3MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
ODM2MmZjYmItYWQyNi00YzVmLTg5MjYtN2YyMjljMzljMGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8QiAyrLjBKDPQ90uYWHlnAFu22J+uwwK19L
eDQoPutkaYlPbrtDdU8B4hkd0g4GRde9fgIt2joc7dF5HH1G9dVCZf838wRkXtiv
CUc7nBoRkwAyiPsD66q+reSWq/xFfA3MfQibClxx/pOvj2LgAwU4TigegPtOv8Dz
48dBVxit8k/OhvIUvZ8upKjNCfDJjHEyNwRB3SlXOe7sovDPcPmZsyN0daiVhg8Q
cDZXxrHaxI/JIl+a5RrcGeAU34jXNZkbteJxh7vTX8zeBO/yXPESpUDL88NU9OKf
MdhEiiPi0RdecvK/MDXIGuuc9C+MNq7DuXiO18scyQfaTNAjNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDz+aYbbA4Gbnirdo34uv8E5X3wfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm
Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNDE2ZDMxYTYtMDQ5ZC0z
Mjg5LThlMWMtOGQ2N2YzYTdjMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz
OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi
OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji
ZWFjYjk3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5lIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5ew+6xWbSQpakp3wEIHFpGK2mWKNa/c6vHJcRnZuxaSAdCuQU0l/av
LBUkoZYvuq8OoAmWCxqQKKR9xrWIIrml0P0Fic2+Q1HWoIzyEhR6Y1arawQuNQYD
B9f7SFNBypBxgF5gKisgKYIynosSWxqWU5iN796DwHW9uw2AGsqqlh0Y0oWRvhgC
6k4C5PQkXIBzE6arNkQ9aT6clGhs8admULGI1pzhq8ptHJZciaHGqKrs66o2q6Bb
WMeE9vFK/+Ed1WwQPnfzy04UtoQJsCnYT3OZ7tYUogwqEU1/gHFzWCupmkSLKj79
oXwzJ/q8HuayusuOvRGt5/8L16YkHjQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:36:32 2025 by rpki-client