Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/37926e3f-a7ac-32ed-88a3-d9e0ed27780c.roa
File: 37926e3f-a7ac-32ed-88a3-d9e0ed27780c.roa (raw, json)
Hash identifier: aVsZ9BsLpAaG4r3F89y9Oe4lgnG8P5jT4JQPEy+sWh0=
Subject key identifier: 13:F2:84:5E:19:47:1B:AB:F9:11:F1:CD:E0:9A:CC:E3:8D:F9:26:78
Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial: 010D0C9F432858488D25FCC5F6BA862238868D00
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/37926e3f-a7ac-32ed-88a3-d9e0ed27780c.roa
Signing time: Wed 15 Jan 2025 09:32:24 +0000
ROA not before: Wed 15 Jan 2025 09:32:24 +0000
ROA not after: Tue 15 Apr 2025 08:32:24 +0000
asID: 7311
IP address blocks: 69.17.224.0/19 maxlen: 19
104.37.80.0/22 maxlen: 22
192.154.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 21 Jan 2025 17:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:25:fc:c5:f6:ba:86:22:38:86:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Validity
Not Before: Jan 15 09:32:24 2025 GMT
Not After : Apr 15 08:32:24 2025 GMT
Subject: CN=247f01fa-5822-4b95-ac28-703705f0b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:69:44:be:75:d9:5a:e2:f7:97:6e:a4:6d:
a3:5b:84:d0:5b:b2:b5:ae:b8:6f:54:39:76:56:90:
d2:aa:a2:b2:b6:23:22:fe:d2:8f:ff:19:23:da:5c:
67:3e:9c:41:5a:36:36:bd:99:8c:52:e1:f5:72:4e:
fa:b4:97:2c:62:a0:9b:51:d7:8a:ab:b3:1f:81:7f:
14:3a:44:82:14:87:27:7e:b4:35:dc:94:ea:9c:c3:
9f:e6:94:b9:64:85:7e:4f:aa:d0:75:d6:de:73:84:
d1:92:ce:fc:66:0b:a0:d7:9a:f9:45:e7:76:36:58:
17:eb:c0:78:43:cf:d8:00:d3:92:e1:82:46:de:b1:
63:45:b3:1b:c2:c0:67:fc:16:b3:7f:19:b6:de:8c:
cd:54:03:b2:7d:93:60:65:78:f8:6f:3e:92:1f:4f:
c8:ca:87:00:ef:65:1a:e8:96:9f:34:c7:09:33:2d:
89:71:58:1c:e7:8f:23:e0:20:2b:2c:a1:37:3d:29:
ee:61:18:0a:8e:d8:5f:a4:de:4f:9b:3f:ef:69:2f:
d1:a8:4d:9c:57:61:a0:2a:53:1b:0b:8e:2e:a4:8a:
cf:4a:2e:53:25:35:83:e2:e5:b1:9d:8c:ed:e6:f1:
ad:93:c9:05:8d:3d:42:4e:a7:ff:ce:b8:d1:0e:65:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F2:84:5E:19:47:1B:AB:F9:11:F1:CD:E0:9A:CC:E3:8D:F9:26:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/37926e3f-a7ac-32ed-88a3-d9e0ed27780c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
X509v3 Authority Key Identifier:
keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
sbgp-ipAddrBlock: critical
IPv4:
69.17.224.0/19
104.37.80.0/22
192.154.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:80:3c:7c:8d:4d:48:19:fe:47:57:d1:09:9b:4f:41:b0:9c:
da:6f:1c:93:eb:6d:89:6f:14:0b:ab:eb:21:53:93:bd:c1:26:
81:f6:f1:85:35:42:25:7a:ee:83:2f:cc:52:9c:aa:e0:c6:bd:
35:64:f7:3a:d9:23:34:3c:2f:0b:04:c4:80:e3:25:24:65:50:
89:cd:ac:4e:29:47:3e:48:11:ca:c3:a7:f7:62:d4:f4:df:1b:
a2:b6:e6:ec:6f:2a:6c:9c:eb:d5:ac:9a:d8:58:2e:2f:28:fb:
c9:ae:80:6d:0b:ce:7e:b2:d8:36:50:5f:85:a6:02:4f:d9:ac:
c3:f7:0c:4a:1c:15:1b:4b:26:68:4d:27:46:05:e8:22:5d:61:
eb:98:ac:54:74:7e:bf:52:77:4d:ef:d0:f8:6d:30:85:76:8a:
a9:05:1b:c1:21:0f:78:4d:5f:8c:00:a8:ec:eb:f5:82:b1:23:
6b:05:67:77:fd:ee:7e:27:9e:00:0c:3f:5e:2b:f0:06:14:6c:
04:fc:f2:be:72:be:29:fb:1a:e7:4b:80:69:9c:3c:32:5a:8a:
7b:07:bb:ba:ea:49:0a:7c:22:dc:38:5a:0a:74:54:da:43:68:
d8:86:b0:79:43:3e:35:4f:57:f1:7e:e4:11:40:e0:9b:dc:d8:
6f:77:7d:86
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEiNJfzF9rqGIjiGjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy
YWQwMB4XDTI1MDExNTA5MzIyNFoXDTI1MDQxNTA4MzIyNFowLzEtMCsGA1UEAxMk
MjQ3ZjAxZmEtNTgyMi00Yjk1LWFjMjgtNzAzNzA1ZjBiNmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGxpRL512Vri95dupG2jW4TQW7K1rrhvVDl2
VpDSqqKytiMi/tKP/xkj2lxnPpxBWjY2vZmMUuH1ck76tJcsYqCbUdeKq7MfgX8U
OkSCFIcnfrQ13JTqnMOf5pS5ZIV+T6rQddbec4TRks78Zgug15r5Red2NlgX68B4
Q8/YANOS4YJG3rFjRbMbwsBn/Bazfxm23ozNVAOyfZNgZXj4bz6SH0/IyocA72Ua
6JafNMcJMy2JcVgc548j4CArLKE3PSnuYRgKjthfpN5Pmz/vaS/RqE2cV2GgKlMb
C44upIrPSi5TJTWD4uWxnYzt5vGtk8kFjT1CTqf/zrjRDmWWUwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFBPyhF4ZRxur+RHxzeCazOON+SZ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi
Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvMzc5MjZlM2YtYTdhYy0z
MmVkLTg4YTMtZDllMGVkMjc3ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm
NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0
MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3
ZjAyNDJhZDAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFRRHgAwQC
aCVQAwQEwJqQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAF6APHyNTUgZ/kdX0QmbT0GwnNpvHJPrbYlvFAur
6yFTk73BJoH28YU1QiV67oMvzFKcquDGvTVk9zrZIzQ8LwsExIDjJSRlUInNrE4p
Rz5IEcrDp/di1PTfG6K25uxvKmyc69WsmthYLi8o+8mugG0Lzn6y2DZQX4WmAk/Z
rMP3DEocFRtLJmhNJ0YF6CJdYeuYrFR0fr9Sd03v0PhtMIV2iqkFG8EhD3hNX4wA
qOzr9YKxI2sFZ3f97n4nngAMP14r8AYUbAT88r5yvin7GudLgGmcPDJainsHu7rq
SQp8Itw4Wgp0VNpDaNiGsHlDPjVPV/F+5BFA4Jvc2G93fYY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:53:20 2025 by rpki-client