Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/200b8c54-c8d7-3835-83cc-5240ac52144b.roa
File: 200b8c54-c8d7-3835-83cc-5240ac52144b.roa (raw, json)
Hash identifier: owoSR9g4YJzjyIYkfr9tWZ6OZVbMrBdL1kEdfainwP4=
Subject key identifier: 86:E3:4D:5B:46:9E:3A:2A:88:04:06:9C:61:77:70:9B:71:89:39:47
Certificate issuer: /CN=3f61b400-76de-4d47-93da-b04c33b5a504
Certificate serial: 010D0C9F4328584943E31E48DECD420FD2DCB900
Authority key identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/200b8c54-c8d7-3835-83cc-5240ac52144b.roa
Signing time: Fri 21 Mar 2025 20:30:36 +0000
ROA not before: Fri 21 Mar 2025 20:30:36 +0000
ROA not after: Thu 19 Jun 2025 20:30:36 +0000
asID: 16509
IP address blocks: 192.67.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 21:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:e3:1e:48:de:cd:42:0f:d2:dc:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f61b400-76de-4d47-93da-b04c33b5a504
Validity
Not Before: Mar 21 20:30:36 2025 GMT
Not After : Jun 19 20:30:36 2025 GMT
Subject: CN=52de291d-1cc5-4550-a322-01f286f65758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:ae:d4:35:6b:6e:86:37:f9:eb:42:ea:55:
a8:4a:05:7b:24:51:33:7c:f1:ca:41:59:f0:31:60:
34:43:09:1d:ba:52:80:99:dd:12:49:60:e8:76:e1:
38:44:a5:8a:2c:3f:5f:b8:d1:bc:b6:a4:d7:a5:c4:
f4:d0:ad:2f:b6:57:25:2c:0f:f9:33:a8:a7:99:ab:
48:3a:4f:f9:ac:ec:cb:6f:3a:0e:18:67:41:d6:99:
83:92:fa:38:9a:48:2e:39:49:99:a6:07:6b:3b:06:
79:6c:82:ac:dd:00:66:f2:93:3d:67:0e:32:9c:e7:
f6:b8:e2:ee:0d:58:eb:84:f3:d2:67:9c:4d:da:a7:
73:cf:3d:68:4c:5d:c8:ff:d5:b6:f8:a3:8f:8a:b3:
fe:a8:0b:6d:c2:b1:7f:45:45:52:8c:07:88:bc:54:
d3:0f:e5:ce:d4:cf:a5:4b:52:0a:50:20:15:fe:d2:
e1:ab:67:30:f5:64:9a:18:20:e0:c6:92:d4:25:71:
a1:45:f2:ff:53:26:64:29:23:d5:0e:5f:97:46:ce:
d8:67:da:bd:51:ab:d9:bb:38:5f:28:ae:a0:78:93:
a8:62:57:91:f5:39:0c:aa:77:ba:85:0a:c3:34:7a:
1a:95:4b:34:f3:22:75:42:5c:fd:12:f4:b1:3d:73:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:4D:5B:46:9E:3A:2A:88:04:06:9C:61:77:70:9B:71:89:39:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/200b8c54-c8d7-3835-83cc-5240ac52144b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl
X509v3 Authority Key Identifier:
keyid:26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:16:72:c2:6e:57:1a:87:8f:29:b1:fc:55:05:05:ee:ca:00:
3d:3e:ab:37:c3:c6:c2:48:f8:ba:d3:8f:79:79:d0:ec:c9:31:
41:62:27:3a:f5:a7:fa:fa:e8:a0:c0:ee:77:c2:fb:f6:bd:07:
8e:44:a9:76:df:47:2a:e0:3e:6b:d7:51:39:a5:bb:42:45:ca:
40:76:e4:0c:bf:dd:ef:c7:e8:e8:41:e4:ce:d5:db:e2:7c:36:
73:2d:70:9b:0b:68:cb:3e:25:71:ab:06:af:26:e0:45:27:d6:
0a:b5:af:98:bc:fd:f4:68:6a:e0:3a:2b:b3:88:14:77:42:ef:
79:4d:d2:30:d1:5f:db:4d:22:1d:3b:7e:59:f5:b7:a2:ef:19:
9f:16:d3:cb:97:2c:43:1e:b0:06:8d:0e:2e:d5:27:f7:38:f1:
1f:ed:f2:e4:d5:38:6d:5f:0d:e2:80:56:52:7f:5d:8b:dc:96:
86:2a:50:d5:17:17:78:9d:d2:ba:ce:0c:4b:b5:4d:8d:d4:cb:
08:63:75:ca:df:d1:16:a7:a8:38:1b:73:0e:17:47:d5:c2:73:
e8:4d:bf:78:a9:dc:84:42:1e:8c:43:4c:cb:73:7b:2c:28:ac:
3e:34:14:87:48:ed:b4:dc:c8:1c:27:be:bc:d1:c6:3b:56:b2:
fb:13:03:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElD4x5I3s1CD9LcuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2MWI0MDAtNzZkZS00ZDQ3LTkzZGEtYjA0YzMzYjVh
NTA0MB4XDTI1MDMyMTIwMzAzNloXDTI1MDYxOTIwMzAzNlowLzEtMCsGA1UEAxMk
NTJkZTI5MWQtMWNjNS00NTUwLWEzMjItMDFmMjg2ZjY1NzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgOu1DVrboY3+etC6lWoSgV7JFEzfPHKQVnw
MWA0QwkdulKAmd0SSWDoduE4RKWKLD9fuNG8tqTXpcT00K0vtlclLA/5M6inmatI
Ok/5rOzLbzoOGGdB1pmDkvo4mkguOUmZpgdrOwZ5bIKs3QBm8pM9Zw4ynOf2uOLu
DVjrhPPSZ5xN2qdzzz1oTF3I/9W2+KOPirP+qAttwrF/RUVSjAeIvFTTD+XO1M+l
S1IKUCAV/tLhq2cw9WSaGCDgxpLUJXGhRfL/UyZkKSPVDl+XRs7YZ9q9UavZuzhf
KK6geJOoYleR9TkMqne6hQrDNHoalUs08yJ1Qlz9EvSxPXMBIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbjTVtGnjoqiAQGnGF3cJtxiTlHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYx
YjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNiNWE1MDQvMjAwYjhjNTQtYzhkNy0z
ODM1LTgzY2MtNTI0MGFjNTIxNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y2MWI0MDAtNzZkZS00ZDQ3LTkz
ZGEtYjA0YzMzYjVhNTA0LzNmNjFiNDAwLTc2ZGUtNGQ0Ny05M2RhLWIwNGMzM2I1
YTUwNC5jcmwwHwYDVR0jBBgwFoAUJrkmWgYvEjfu8GnUFNufdDpqgD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRj
MzNiNWE1MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEMHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMWcsJuVxqHjymx/FUFBe7KAD0+qzfDxsJI+LrTj3l50OzJMUFiJzr1
p/r66KDA7nfC+/a9B45EqXbfRyrgPmvXUTmlu0JFykB25Ay/3e/H6OhB5M7V2+J8
NnMtcJsLaMs+JXGrBq8m4EUn1gq1r5i8/fRoauA6K7OIFHdC73lN0jDRX9tNIh07
fln1t6LvGZ8W08uXLEMesAaNDi7VJ/c48R/t8uTVOG1fDeKAVlJ/XYvcloYqUNUX
F3id0rrODEu1TY3Uywhjdcrf0RanqDgbcw4XR9XCc+hNv3ip3IRCHoxDTMtzeywo
rD40FIdI7bTcyBwnvrzRxjtWsvsTA9k=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:56 2025 by rpki-client