Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40582708-0813-3bc7-810b-e2c0d8e2ccf5.roa
File: 40582708-0813-3bc7-810b-e2c0d8e2ccf5.roa (raw, json)
Hash identifier: 3nXz4v5xfnDXCbOwIN+b6QPz9Cu4fviNSbv0ROQ9ZKQ=
Subject key identifier: 29:44:97:03:F3:D3:9A:6A:4C:E7:D9:45:F5:F7:76:03:A6:90:7A:D8
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584927B5C65C14F155E0330FDC40
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40582708-0813-3bc7-810b-e2c0d8e2ccf5.roa
Signing time: Tue 11 Mar 2025 18:16:36 +0000
ROA not before: Tue 11 Mar 2025 18:16:36 +0000
ROA not after: Mon 09 Jun 2025 18:16:36 +0000
asID: 174
IP address blocks: 198.145.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 00:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:27:b5:c6:5c:14:f1:55:e0:33:0f:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Mar 11 18:16:36 2025 GMT
Not After : Jun 9 18:16:36 2025 GMT
Subject: CN=755b6fbd-c301-4050-b427-c65fec4fea8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:e0:87:17:3d:97:e3:48:f1:89:cb:8b:40:
bd:b0:a7:cc:ad:7a:06:42:89:31:5d:70:ba:54:0c:
66:91:09:d5:cd:22:7c:e3:bc:29:0a:fa:d6:e1:03:
c9:5f:d7:c7:d4:f7:d1:a5:e7:2c:ee:31:32:bc:f6:
eb:4b:e3:91:85:7d:c1:ce:d5:fc:88:a5:91:51:55:
f4:f8:f9:a3:85:20:c1:94:b6:7b:1e:fd:5a:6b:bd:
7c:c3:14:81:19:ff:1f:1f:e0:0e:47:e2:76:b3:bf:
8d:f2:f7:88:5f:7a:e8:2a:5e:e2:89:02:75:fb:a8:
81:bf:e9:c3:cf:0e:50:17:26:37:aa:d4:ec:11:30:
5a:9a:2a:6c:b4:d8:57:da:46:9f:93:7e:aa:08:9f:
c5:9f:c2:f2:32:61:08:18:d2:f2:b1:78:5d:54:c3:
11:34:ac:a6:29:58:b1:50:7a:d0:eb:eb:aa:8a:be:
32:53:4b:a4:f9:97:4c:11:e6:3b:f7:dc:81:79:89:
1f:69:a9:58:c8:82:3c:4b:1b:ae:fb:8c:c6:03:b6:
fa:e1:5a:4e:f1:2f:2c:b7:15:2c:53:fc:f2:42:a6:
c2:a0:e9:95:e0:a5:0d:b9:4c:c8:54:8f:e8:60:d4:
e9:f0:b5:97:9e:d3:4e:5d:c4:70:91:98:50:51:1c:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:44:97:03:F3:D3:9A:6A:4C:E7:D9:45:F5:F7:76:03:A6:90:7A:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40582708-0813-3bc7-810b-e2c0d8e2ccf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:0c:d7:13:bc:2e:9e:82:53:99:a7:db:4d:83:a4:0e:29:13:
55:27:19:e9:f7:fc:ec:88:d8:5f:dd:38:08:21:0d:6b:c6:ca:
0d:e3:19:f5:53:9c:90:bf:24:0c:88:d5:1e:c0:7c:a6:16:b1:
cd:c6:24:2f:e9:56:d1:b9:6a:d8:5e:e9:6a:4c:b8:d0:53:a4:
29:6d:b6:cd:3a:df:e5:5e:11:f9:75:f4:bb:b6:03:b1:67:ed:
ac:ef:6e:3b:d7:ce:9e:3e:fd:52:13:a6:16:91:91:45:26:af:
05:b9:f3:30:37:38:73:ea:64:91:26:e1:57:52:b8:97:d5:0b:
5a:30:dc:75:a4:78:6e:01:1b:a7:dc:12:f4:c2:d9:49:b9:90:
71:f5:a4:75:40:15:18:c0:3e:b1:17:4a:22:ac:a0:da:de:d5:
f6:49:cf:38:4e:f7:30:f4:cb:3b:60:38:0b:98:46:f6:bb:12:
b2:e2:e2:a5:3b:52:76:4c:ee:94:95:8c:5f:ea:dc:20:d6:ee:
64:64:5d:ce:0e:ce:9c:fc:58:95:f5:ff:88:ff:01:0c:2f:4c:
81:41:54:95:58:25:86:55:be:ac:4a:cf:07:11:a6:2c:69:a2:
7f:dc:4b:06:70:15:77:eb:c8:73:aa:8b:52:e3:8c:7c:fa:84:
4a:e2:a5:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkntcZcFPFV4DMP3EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDMxMTE4MTYzNloXDTI1MDYwOTE4MTYzNlowLzEtMCsGA1UEAxMk
NzU1YjZmYmQtYzMwMS00MDUwLWI0MjctYzY1ZmVjNGZlYThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF/ghxc9l+NI8YnLi0C9sKfMrXoGQokxXXC6
VAxmkQnVzSJ847wpCvrW4QPJX9fH1PfRpecs7jEyvPbrS+ORhX3BztX8iKWRUVX0
+PmjhSDBlLZ7Hv1aa718wxSBGf8fH+AOR+J2s7+N8veIX3roKl7iiQJ1+6iBv+nD
zw5QFyY3qtTsETBamipstNhX2kafk36qCJ/Fn8LyMmEIGNLysXhdVMMRNKymKVix
UHrQ6+uqir4yU0uk+ZdMEeY799yBeYkfaalYyII8Sxuu+4zGA7b64VpO8S8stxUs
U/zyQqbCoOmV4KUNuUzIVI/oYNTp8LWXntNOXcRwkZhQURyeswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClElwPz05pqTOfZRfX3dgOmkHrYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDA1ODI3MDgtMDgxMy0z
YmM3LTgxMGItZTJjMGQ4ZTJjY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYM1xO8Lp6CU5mn202DpA4pE1UnGen3/OyI2F/dOAghDWvGyg3jGfVT
nJC/JAyI1R7AfKYWsc3GJC/pVtG5athe6WpMuNBTpCltts063+VeEfl19Lu2A7Fn
7azvbjvXzp4+/VITphaRkUUmrwW58zA3OHPqZJEm4VdSuJfVC1ow3HWkeG4BG6fc
EvTC2Um5kHH1pHVAFRjAPrEXSiKsoNre1fZJzzhO9zD0yztgOAuYRva7ErLi4qU7
UnZM7pSVjF/q3CDW7mRkXc4Ozpz8WJX1/4j/AQwvTIFBVJVYJYZVvqxKzwcRpixp
on/cSwZwFXfryHOqi1LjjHz6hEripaQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:02 2025 by rpki-client