Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/4388c8a6-3c59-38f8-8574-05ccb5c7bf8e.roa
File: 4388c8a6-3c59-38f8-8574-05ccb5c7bf8e.roa (raw, json)
Hash identifier: kRmiQl5knyfm80VaXMc1JS4wTjU4hHCqj87sktMZuTk=
Subject key identifier: 71:88:ED:E8:AA:4E:7A:1E:8D:0A:C8:FB:FF:6A:64:B8:AE:7A:42:7D
Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial: 010D0C9F432858493C09387037EE9D3C8C613500
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/4388c8a6-3c59-38f8-8574-05ccb5c7bf8e.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 23.128.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:38:70:37:ee:9d:3c:8c:61:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=78b2d336-715c-4437-bafb-df80373c577c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:5d:2d:7c:93:31:de:a7:82:30:73:be:2b:
07:a4:bd:72:95:a2:0c:a6:d7:67:07:7d:d6:58:a8:
a6:bd:ac:22:49:be:39:b3:44:15:8e:c0:b5:48:84:
9e:d9:a6:af:dc:4a:7d:c2:1a:86:a4:ed:a5:dc:5f:
f5:ae:20:ad:e4:4f:82:b7:b1:b0:5c:ed:fa:51:32:
38:94:39:7d:19:83:4a:7f:e6:b2:6b:9d:69:c3:e5:
d3:5c:f9:94:64:9f:7e:87:3e:14:4b:22:e7:8c:d8:
f8:2e:e5:12:d1:7f:dd:d6:02:eb:b7:8c:8d:76:8d:
29:39:f2:e1:a5:76:02:71:0e:2d:d2:83:8c:30:b7:
20:41:f0:73:7a:93:95:fc:8e:aa:75:44:9e:9d:f5:
32:eb:47:61:c7:c5:93:64:83:87:50:2a:75:78:99:
fd:14:92:db:03:a6:84:a7:d8:37:c1:95:e0:69:80:
6e:b0:e7:ec:48:4a:f7:1c:12:3b:1e:2b:ad:e8:5c:
f5:d3:2c:86:3b:49:4d:08:4b:8f:77:c0:f3:41:1f:
a6:4f:8c:fa:62:b8:05:b9:f8:41:73:6d:b7:20:35:
51:de:29:f1:43:57:f8:83:37:d5:6a:71:46:77:51:
69:36:d9:c1:99:0a:5a:38:b8:bf:f2:1e:90:a8:7e:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:88:ED:E8:AA:4E:7A:1E:8D:0A:C8:FB:FF:6A:64:B8:AE:7A:42:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/4388c8a6-3c59-38f8-8574-05ccb5c7bf8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
X509v3 Authority Key Identifier:
keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:19:c4:68:9a:7b:e6:67:b6:cc:9c:d4:2e:35:19:ba:e7:66:
d6:ea:89:d7:5b:41:66:84:74:0d:a6:52:e7:f5:81:a4:4b:01:
81:c4:cd:b9:45:70:dd:02:9d:71:77:1b:f6:e6:3c:00:dc:6c:
7c:f2:0b:59:43:87:b1:12:dc:7b:d9:53:83:74:b5:7c:74:1d:
2d:03:27:68:7d:11:e9:1d:3c:fe:0c:00:8f:81:34:f5:cd:e9:
f4:06:e1:62:81:6f:b2:69:47:ce:2d:d4:79:f9:1b:1b:57:87:
d4:4d:4b:ca:dc:a0:1b:a6:bb:33:87:f2:7e:bc:13:ea:72:05:
03:35:e4:90:57:d0:0a:d3:f6:26:b9:6c:58:d2:44:42:f8:64:
17:50:91:50:4c:f1:db:75:8e:b2:5d:c4:b0:71:94:96:c3:bf:
61:8d:20:f0:e1:70:e3:68:e6:7b:e6:4c:06:92:2e:4d:c1:61:
c2:bf:c0:ab:3c:60:41:84:63:d6:87:72:47:da:66:9e:64:f5:
34:15:4d:58:41:93:e2:9b:5b:24:bd:57:d1:bf:70:98:6a:4e:
45:01:98:2b:4b:cc:96:65:f1:dd:b3:1e:c5:02:e8:33:74:2b:
4d:e6:a4:93:02:ca:aa:1b:1d:85:67:42:eb:cc:9f:85:13:d5:
07:33:dc:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CThwN+6dPIxhNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk
NDEwMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
NzhiMmQzMzYtNzE1Yy00NDM3LWJhZmItZGY4MDM3M2M1NzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplddLXyTMd6ngjBzvisHpL1ylaIMptdnB33W
WKimvawiSb45s0QVjsC1SISe2aav3Ep9whqGpO2l3F/1riCt5E+Ct7GwXO36UTI4
lDl9GYNKf+aya51pw+XTXPmUZJ9+hz4USyLnjNj4LuUS0X/d1gLrt4yNdo0pOfLh
pXYCcQ4t0oOMMLcgQfBzepOV/I6qdUSenfUy60dhx8WTZIOHUCp1eJn9FJLbA6aE
p9g3wZXgaYBusOfsSEr3HBI7Hiut6Fz10yyGO0lNCEuPd8DzQR+mT4z6YrgFufhB
c223IDVR3inxQ1f4gzfVanFGd1FpNtnBmQpaOLi/8h6QqH7A4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGI7eiqTnoejQrI+/9qZLiuekJ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi
NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvNDM4OGM4YTYtM2M1OS0z
OGY4LTg1NzQtMDVjY2I1YzdiZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3
OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4
ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj
NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkZxGiae+Zntsyc1C41GbrnZtbqiddbQWaEdA2mUuf1gaRLAYHEzblF
cN0CnXF3G/bmPADcbHzyC1lDh7ES3HvZU4N0tXx0HS0DJ2h9EekdPP4MAI+BNPXN
6fQG4WKBb7JpR84t1Hn5GxtXh9RNS8rcoBumuzOH8n68E+pyBQM15JBX0ArT9ia5
bFjSREL4ZBdQkVBM8dt1jrJdxLBxlJbDv2GNIPDhcONo5nvmTAaSLk3BYcK/wKs8
YEGEY9aHckfaZp5k9TQVTVhBk+KbWyS9V9G/cJhqTkUBmCtLzJZl8d2zHsUC6DN0
K03mpJMCyqobHYVnQuvMn4UT1Qcz3CU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:36 2025 by rpki-client