Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/1065242d-4d0e-3e8a-bf20-da0cbeac4faa.roa
File: 1065242d-4d0e-3e8a-bf20-da0cbeac4faa.roa (raw, json)
Hash identifier: CwCtu7weP75ORLTrFAEy84LNjGSIg8TB7hhQs/vLWdg=
Subject key identifier: B4:F2:86:0E:C8:61:E4:C4:78:7B:7A:98:62:B0:D7:1D:B9:33:06:64
Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial: 010D0C9F43285848E2D11C0DDFA5DA9A139D0200
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/1065242d-4d0e-3e8a-bf20-da0cbeac4faa.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 2914
IP address blocks: 174.35.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 09:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:1c:0d:df:a5:da:9a:13:9d:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=037585bb-a7e0-43e7-90bf-6c110a650fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:ed:eb:ff:5c:a4:42:7b:7b:4f:03:80:68:
27:f3:04:8e:d9:91:e8:4b:3d:7a:d7:d8:be:19:72:
a7:3c:32:0c:6b:3d:c6:93:53:8c:68:5f:b7:7a:cc:
81:a7:d4:98:bb:e0:11:df:3e:35:ad:20:04:4a:aa:
69:b6:44:46:00:c7:bd:e4:de:28:b5:36:c5:5d:f9:
3e:3b:d8:6e:bf:7d:d8:f5:c2:24:2b:92:21:fd:8d:
f3:ea:98:e2:e1:1f:c7:60:6e:f3:7f:d9:94:e6:af:
36:23:02:af:16:7e:75:15:0c:f0:95:9a:87:29:b4:
2b:d9:93:47:16:47:2d:9a:6e:8f:cb:c9:e8:a7:93:
69:c2:03:a1:f0:86:bc:3b:57:ba:10:ae:22:d2:54:
9b:60:03:21:ab:8f:ab:32:68:7b:b8:8f:1b:2a:4f:
bb:be:a4:5d:ed:f3:c4:c1:1e:66:db:f2:5b:94:35:
42:af:2f:93:de:2a:cf:38:5e:ec:57:7b:0c:fa:60:
3c:85:2e:0c:d8:27:61:6c:cb:20:e7:27:dd:dc:42:
76:cd:1b:4d:1d:44:05:2c:f4:e7:70:8a:91:81:fd:
f9:5b:de:0f:f0:ee:91:f3:fb:89:4a:e8:08:78:f5:
44:6e:1a:b5:56:7a:d1:90:12:dc:45:31:bd:b9:ce:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F2:86:0E:C8:61:E4:C4:78:7B:7A:98:62:B0:D7:1D:B9:33:06:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/1065242d-4d0e-3e8a-bf20-da0cbeac4faa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
X509v3 Authority Key Identifier:
keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
sbgp-ipAddrBlock: critical
IPv4:
174.35.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:66:98:8b:47:ee:76:b2:8b:da:59:47:1f:c4:34:9d:7b:a0:
03:88:40:78:0c:78:fb:5c:2e:90:7d:f9:35:02:57:de:b8:ec:
22:27:66:a3:7a:cd:1b:86:01:6f:77:29:c5:3e:40:6e:6d:f2:
ee:b9:08:e8:be:46:2e:1b:d2:a5:1c:24:ee:71:2e:b6:d4:c6:
b5:5d:85:16:d5:db:e1:00:7b:4c:77:2d:ba:6c:2f:62:f6:cd:
7c:78:05:a7:d1:af:af:04:bb:fb:b3:f5:5b:2c:21:b7:58:0f:
6c:8c:2f:bb:28:29:b5:37:f8:91:56:bc:b7:8d:fc:68:09:c3:
8a:d0:a1:9c:c7:5f:f0:10:a8:0e:87:2f:33:00:1a:8b:8b:d8:
ad:74:06:a0:f1:bf:4c:0f:46:9d:43:f5:fe:66:35:cf:13:1a:
64:3a:33:c2:d2:82:11:29:73:e0:a1:26:50:dc:51:a9:77:01:
04:07:fd:e1:8b:ee:ca:5a:c4:7b:b6:03:ca:23:47:69:58:68:
9f:8f:0a:87:c7:ad:d9:92:b6:69:7b:fc:e7:09:c4:7b:4c:0d:
87:43:53:ca:b4:17:ad:9c:c7:c7:aa:5e:9f:f0:64:cc:dd:45:
54:8a:8d:d9:8b:08:c7:f5:b1:67:a9:23:23:41:9c:a8:93:f8:
34:c4:f6:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RwN36XamhOdAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MDM3NTg1YmItYTdlMC00M2U3LTkwYmYtNmMxMTBhNjUwZmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTjt6/9cpEJ7e08DgGgn8wSO2ZHoSz1619i+
GXKnPDIMaz3Gk1OMaF+3esyBp9SYu+AR3z41rSAESqpptkRGAMe95N4otTbFXfk+
O9huv33Y9cIkK5Ih/Y3z6pji4R/HYG7zf9mU5q82IwKvFn51FQzwlZqHKbQr2ZNH
Fkctmm6Py8nop5NpwgOh8Ia8O1e6EK4i0lSbYAMhq4+rMmh7uI8bKk+7vqRd7fPE
wR5m2/JblDVCry+T3irPOF7sV3sM+mA8hS4M2CdhbMsg5yfd3EJ2zRtNHUQFLPTn
cIqRgf35W94P8O6R8/uJSugIePVEbhq1VnrRkBLcRTG9uc5QdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTyhg7IYeTEeHt6mGKw1x25MwZkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvMTA2NTI0MmQtNGQwZS0z
ZThhLWJmMjAtZGEwY2JlYWM0ZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriNCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFmmItH7nayi9pZRx/ENJ17oAOIQHgMePtcLpB9+TUCV9647CInZqN6
zRuGAW93KcU+QG5t8u65COi+Ri4b0qUcJO5xLrbUxrVdhRbV2+EAe0x3LbpsL2L2
zXx4BafRr68Eu/uz9VssIbdYD2yML7soKbU3+JFWvLeN/GgJw4rQoZzHX/AQqA6H
LzMAGouL2K10BqDxv0wPRp1D9f5mNc8TGmQ6M8LSghEpc+ChJlDcUal3AQQH/eGL
7spaxHu2A8ojR2lYaJ+PCofHrdmStml7/OcJxHtMDYdDU8q0F62cx8eqXp/wZMzd
RVSKjdmLCMf1sWepIyNBnKiT+DTE9jI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:20:51 2025 by rpki-client