Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a9d8845-2282-345a-ad58-831bfd8d7d84.roa
File: 2a9d8845-2282-345a-ad58-831bfd8d7d84.roa (raw, json)
Hash identifier: MdpkNWZ1RRz2O3e5SPH78y5ZuiRxcQoe44myrw7Quyc=
Subject key identifier: 9C:E6:20:05:5C:E7:A2:46:A7:7A:47:49:0C:30:3E:7A:3C:1A:E0:2F
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69EA976F6FADF633AFD00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a9d8845-2282-345a-ad58-831bfd8d7d84.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54548
IP address blocks: 74.208.188.0/23 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Mar 2025 11:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9e:a9:76:f6:fa:df:63:3a:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=9c13fd50-befe-40d4-95aa-0ac54da334c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:70:3d:ec:35:32:e5:2b:a8:a7:3f:40:23:
18:36:2b:b2:5c:0e:74:19:00:f6:b6:0d:62:e3:36:
7a:85:23:bc:c6:b4:4f:3c:5d:8c:af:d1:f4:a4:72:
83:c7:60:57:ec:30:88:a0:13:e7:02:d5:66:c9:fe:
12:40:6e:37:fe:c7:5f:d8:8b:21:18:26:33:38:ea:
90:ae:a3:8c:aa:71:df:42:1d:02:b4:66:3d:6d:f5:
24:ee:d2:ae:73:3b:8b:1b:c9:f5:28:d8:63:62:37:
fc:1e:3a:22:6a:3e:6c:8f:76:a5:5e:5f:d2:34:6d:
97:a8:cf:ce:86:e3:02:7d:be:f3:8a:07:59:97:d6:
fe:fb:28:38:b1:4d:53:10:e3:27:4b:13:67:08:e4:
7a:95:bd:68:4b:51:ec:f7:83:cc:5e:96:96:9a:fb:
0a:99:1b:5d:47:e9:e2:0f:a6:ff:31:96:6c:f6:29:
98:99:89:aa:01:d9:e7:ce:e3:cd:0c:9b:13:38:47:
c0:50:1b:e4:cc:a9:3c:49:87:9a:54:53:bb:5b:01:
2e:24:3c:74:1c:38:43:da:51:0a:3f:38:f3:f8:0a:
d3:b4:c5:f3:cf:06:cd:63:51:a2:bf:d7:24:c8:f2:
59:bc:a5:1a:63:1c:b9:08:fd:6b:7c:69:57:ad:11:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E6:20:05:5C:E7:A2:46:A7:7A:47:49:0C:30:3E:7A:3C:1A:E0:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a9d8845-2282-345a-ad58-831bfd8d7d84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:17:51:58:e5:5d:00:71:10:b7:19:b8:7e:e8:5c:d6:d2:f0:
cc:10:11:11:b1:9d:c8:00:c3:84:fe:72:10:80:d6:76:94:f5:
5c:7e:a1:ad:5f:6f:2d:e0:52:42:bb:4c:7b:a3:35:7a:51:f4:
8a:fc:6a:66:9f:53:32:13:59:e6:62:49:e0:5f:1e:b6:71:57:
eb:e2:7f:25:c0:42:96:9f:e1:0e:1a:b0:8f:0d:bb:3d:af:c8:
61:c1:a7:65:42:36:e2:0d:f3:f1:b7:63:78:72:7f:c1:e3:6d:
e2:d2:ab:89:6f:f8:5f:c5:39:ad:3d:35:6d:66:e7:88:80:d9:
d2:bf:90:cd:3f:b5:25:e3:e4:fc:45:a9:90:02:8e:32:2c:fd:
4e:aa:2b:5f:d3:64:60:80:54:0e:4c:74:1d:2b:55:76:93:1c:
c4:f8:7b:e7:e3:76:45:23:99:ed:a2:82:fa:fa:cc:0b:5e:cd:
d2:05:21:7e:39:e1:fa:ff:f9:f4:bc:ef:71:8d:b8:17:90:df:
70:05:2c:84:2f:9c:3b:52:ea:2a:6a:22:56:4b:33:47:2c:7e:
a3:af:ab:68:a4:0b:73:4e:8d:e1:8d:31:fd:89:3e:d1:ea:48:
cf:33:b4:7a:53:a9:ca:d7:b5:01:fc:9e:49:6d:0a:64:d1:2f:
23:41:78:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09p6pdvb632M6/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
OWMxM2ZkNTAtYmVmZS00MGQ0LTk1YWEtMGFjNTRkYTMzNGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6lwPew1MuUrqKc/QCMYNiuyXA50GQD2tg1i
4zZ6hSO8xrRPPF2Mr9H0pHKDx2BX7DCIoBPnAtVmyf4SQG43/sdf2IshGCYzOOqQ
rqOMqnHfQh0CtGY9bfUk7tKuczuLG8n1KNhjYjf8Hjoiaj5sj3alXl/SNG2XqM/O
huMCfb7zigdZl9b++yg4sU1TEOMnSxNnCOR6lb1oS1Hs94PMXpaWmvsKmRtdR+ni
D6b/MZZs9imYmYmqAdnnzuPNDJsTOEfAUBvkzKk8SYeaVFO7WwEuJDx0HDhD2lEK
Pzjz+ArTtMXzzwbNY1Giv9ckyPJZvKUaYxy5CP1rfGlXrRGwZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzmIAVc56JGp3pHSQwwPno8GuAvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvMmE5ZDg4NDUtMjI4Mi0z
NDVhLWFkNTgtODMxYmZkOGQ3ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBStC8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMXUVjlXQBxELcZuH7oXNbS8MwQERGxncgAw4T+chCA1naU9Vx+oa1f
by3gUkK7THujNXpR9Ir8amafUzITWeZiSeBfHrZxV+vifyXAQpaf4Q4asI8Nuz2v
yGHBp2VCNuIN8/G3Y3hyf8HjbeLSq4lv+F/FOa09NW1m54iA2dK/kM0/tSXj5PxF
qZACjjIs/U6qK1/TZGCAVA5MdB0rVXaTHMT4e+fjdkUjme2igvr6zAtezdIFIX45
4fr/+fS873GNuBeQ33AFLIQvnDtS6ipqIlZLM0csfqOvq2ikC3NOjeGNMf2JPtHq
SM8ztHpTqcrXtQH8nkltCmTRLyNBeF0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:08 2025 by rpki-client