Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/96ff82ca-b3fe-385b-95b1-1c6ce40a7eaf.roa
File: 96ff82ca-b3fe-385b-95b1-1c6ce40a7eaf.roa (raw, json)
Hash identifier: +qtwR3OYC88V+c1h7oXTYoPqytQ8x+ZugMqvh1YTeoU=
Subject key identifier: 5C:C1:BC:C3:89:3D:65:0A:DE:19:09:9F:C9:13:AF:7D:76:23:AE:ED
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69F7CDD3AB85BF9062688
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/96ff82ca-b3fe-385b-95b1-1c6ce40a7eaf.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54548
IP address blocks: 74.208.204.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Mar 2025 11:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9f:7c:dd:3a:b8:5b:f9:06:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d23232b5-87ea-4f4c-9271-5f4dd13de5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:ad:c2:93:ca:fe:3d:86:00:a5:c7:c1:92:
ca:9e:78:a2:4e:c0:c6:7d:d0:3f:8a:b2:2e:a8:8a:
4c:14:1e:39:2d:2e:f8:eb:8c:2a:a7:53:04:22:87:
17:91:47:0d:2a:79:c0:cc:67:8f:f7:9b:8c:e3:a5:
a3:1f:f5:5b:a3:55:a0:7b:fb:2b:6d:fa:43:a9:f2:
fb:ff:d3:c2:4e:20:86:65:1d:50:c0:e2:fa:61:30:
72:2d:d4:c7:03:98:93:53:95:83:df:bc:96:8f:d3:
79:ea:63:f3:53:27:d5:e7:05:38:32:f0:dc:74:46:
dd:36:24:55:81:13:bd:29:66:55:6c:31:16:f1:3c:
7f:aa:ee:3e:13:93:ae:d7:48:09:81:09:e7:87:7d:
96:f8:de:75:94:a1:17:16:83:7e:48:1d:d5:50:91:
05:e8:b3:d2:23:d5:65:98:27:c7:e9:60:89:86:18:
c6:6b:5a:a1:89:b4:ba:9e:fd:ef:0f:91:6b:16:72:
b3:fd:af:5b:c9:2b:ef:da:c2:7a:49:98:8e:ff:a2:
ce:f1:ec:e2:79:7c:eb:8b:bc:35:84:08:92:7e:f4:
bf:2e:ef:e8:15:f4:61:23:98:f5:e2:26:29:33:00:
40:2f:27:e9:35:f7:6a:2e:5a:66:cc:9a:ce:30:57:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C1:BC:C3:89:3D:65:0A:DE:19:09:9F:C9:13:AF:7D:76:23:AE:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/96ff82ca-b3fe-385b-95b1-1c6ce40a7eaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
74.208.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:5e:2f:c0:f4:e9:71:fb:22:f0:8c:04:a2:95:e3:99:de:29:
cc:a0:a5:96:7d:de:ba:de:31:e4:78:4d:86:34:74:07:ec:a8:
f4:b6:f6:19:af:34:35:6f:94:4c:4a:d2:d7:da:2c:5e:47:30:
1c:ba:fb:8e:4e:64:e6:1c:fa:82:1e:47:1f:07:1b:5b:85:65:
7c:2a:2c:ef:1f:3f:e7:2e:65:ae:d8:89:05:80:14:d8:cd:74:
d1:1b:09:f6:63:a4:46:3a:9e:4d:98:0e:af:12:df:98:5e:53:
22:4a:06:0e:91:58:64:94:9b:2e:d8:47:ea:37:65:2e:01:95:
9b:fd:0c:31:6c:ce:52:c0:4e:90:af:e6:9d:fe:11:44:e8:09:
81:df:f5:a3:fe:6c:fb:13:36:46:3f:60:1d:98:4b:01:e4:49:
ab:6b:96:43:26:5d:e0:f0:e7:5c:98:9c:a9:c7:44:8a:1b:d3:
0e:58:bd:5d:82:a6:e0:25:25:f7:8d:0c:d6:f3:b1:53:54:f7:
0f:8c:bd:9f:6e:92:9b:cf:b8:0b:07:41:d3:80:d5:d8:a8:ba:
ff:72:d4:3f:81:e7:87:69:2b:60:e7:2c:08:77:60:ae:22:59:
2c:84:2a:53:10:c4:fe:c6:74:3d:f1:40:46:10:5a:92:ba:d7:
a2:cb:c1:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09p983Tq4W/kGJogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZDIzMjMyYjUtODdlYS00ZjRjLTkyNzEtNWY0ZGQxM2RlNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp2twpPK/j2GAKXHwZLKnniiTsDGfdA/irIu
qIpMFB45LS7464wqp1MEIocXkUcNKnnAzGeP95uM46WjH/Vbo1Wge/srbfpDqfL7
/9PCTiCGZR1QwOL6YTByLdTHA5iTU5WD37yWj9N56mPzUyfV5wU4MvDcdEbdNiRV
gRO9KWZVbDEW8Tx/qu4+E5Ou10gJgQnnh32W+N51lKEXFoN+SB3VUJEF6LPSI9Vl
mCfH6WCJhhjGa1qhibS6nv3vD5FrFnKz/a9bySvv2sJ6SZiO/6LO8ezieXzri7w1
hAiSfvS/Lu/oFfRhI5j14iYpMwBALyfpNfdqLlpmzJrOMFePQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFzBvMOJPWUK3hkJn8kTr312I67tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvOTZmZjgyY2EtYjNmZS0z
ODViLTk1YjEtMWM2Y2U0MGE3ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStDMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANteL8D06XH7IvCMBKKV45neKcygpZZ93rreMeR4TYY0dAfsqPS29hmv
NDVvlExK0tfaLF5HMBy6+45OZOYc+oIeRx8HG1uFZXwqLO8fP+cuZa7YiQWAFNjN
dNEbCfZjpEY6nk2YDq8S35heUyJKBg6RWGSUmy7YR+o3ZS4BlZv9DDFszlLATpCv
5p3+EUToCYHf9aP+bPsTNkY/YB2YSwHkSatrlkMmXeDw51yYnKnHRIob0w5YvV2C
puAlJfeNDNbzsVNU9w+MvZ9ukpvPuAsHQdOA1diouv9y1D+B54dpK2DnLAh3YK4i
WSyEKlMQxP7GdD3xQEYQWpK616LLwd4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:46 2025 by rpki-client