Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/b2697a9e-b7c0-3ca3-ad9e-2ca227e52c6f.roa
File: b2697a9e-b7c0-3ca3-ad9e-2ca227e52c6f.roa (raw, json)
Hash identifier: O6xT52SVqzTGczt+X1ACuJ1CvzJGKnkB8wZrMM2y59s=
Subject key identifier: D2:6E:5B:CC:16:C0:13:B5:31:96:16:7B:13:2B:68:66:B3:F7:B8:86
Certificate issuer: /CN=2986bb3e-67f0-4efd-a00e-a8ad659aa836
Certificate serial: 010D0C9F432858492D324991B74A1D39CB2229C0
Authority key identifier: D5:7D:F2:86:2A:59:9E:2F:7B:45:7A:E6:27:B1:14:23:FD:AC:4C:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/b2697a9e-b7c0-3ca3-ad9e-2ca227e52c6f.roa
Signing time: Thu 13 Mar 2025 17:26:31 +0000
ROA not before: Thu 13 Mar 2025 17:26:31 +0000
ROA not after: Wed 11 Jun 2025 17:26:31 +0000
asID: 3090
IP address blocks: 103.141.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 13:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2d:32:49:91:b7:4a:1d:39:cb:22:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2986bb3e-67f0-4efd-a00e-a8ad659aa836
Validity
Not Before: Mar 13 17:26:31 2025 GMT
Not After : Jun 11 17:26:31 2025 GMT
Subject: CN=20449645-dab4-403c-b3db-6ba09d97ecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:a8:8b:4e:7d:43:48:85:8d:a0:68:fd:e6:
da:26:d4:7b:ba:bb:36:65:7f:ae:1a:1b:a5:29:f9:
9b:76:c0:1b:54:53:75:a5:66:de:2f:83:67:cd:96:
ae:f6:9e:f7:df:27:10:cc:39:0b:58:b9:82:23:47:
74:52:56:e4:a1:e6:71:24:3a:14:cd:aa:13:10:7c:
1f:30:be:19:8d:af:4e:a0:5f:50:90:02:97:98:4f:
81:11:86:64:1f:58:9b:ee:57:e2:85:b4:a9:ba:ac:
39:65:a6:0e:f7:ee:7c:0c:90:1c:43:a0:57:cd:35:
78:06:50:55:62:a7:2a:ca:ec:92:56:06:03:59:56:
65:1c:2a:03:dc:e6:f9:b5:6d:04:d5:cb:c2:36:ba:
7c:60:d2:c0:0a:d8:2f:2d:8d:23:27:bc:5b:46:95:
d7:a8:a4:2f:18:f9:a4:53:ed:bb:14:d2:2e:4b:ef:
f3:67:ce:29:c8:0f:17:12:64:29:f6:55:e0:0c:61:
7f:d5:46:9b:2e:40:7b:73:d6:5a:6c:e3:05:ef:1f:
56:d1:4a:01:dd:c6:4f:28:00:2e:64:76:d8:41:75:
55:a4:76:e7:36:38:4c:d5:0d:32:3b:c2:03:88:f0:
74:0b:b7:73:89:14:05:38:24:d2:ec:27:90:62:a0:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:5B:CC:16:C0:13:B5:31:96:16:7B:13:2B:68:66:B3:F7:B8:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/b2697a9e-b7c0-3ca3-ad9e-2ca227e52c6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836/2986bb3e-67f0-4efd-a00e-a8ad659aa836.crl
X509v3 Authority Key Identifier:
keyid:D5:7D:F2:86:2A:59:9E:2F:7B:45:7A:E6:27:B1:14:23:FD:AC:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2986bb3e-67f0-4efd-a00e-a8ad659aa836.cer
sbgp-ipAddrBlock: critical
IPv4:
103.141.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:05:6d:32:c8:01:13:76:0f:b6:9d:dd:13:37:77:26:2e:30:
35:0c:b0:c3:00:69:29:79:8b:ca:0e:eb:ad:e9:45:8a:02:de:
c6:ff:dc:21:57:e0:a4:6c:0f:71:81:67:ee:37:ed:05:b6:47:
21:6a:ef:8d:54:d8:12:99:4d:86:49:e4:a1:d4:66:ce:1f:db:
bd:7d:c3:f7:4a:f3:dd:50:64:9e:e8:68:70:e6:1c:06:e8:ea:
48:c8:b7:3f:d3:ea:5f:5f:83:e3:1b:d1:09:79:78:83:8f:c4:
45:cd:2f:24:10:6e:fa:48:ef:8c:2d:45:fb:46:fc:10:07:4b:
8c:92:4e:e3:f6:63:a0:a3:d0:c5:2f:ef:72:e5:8c:8d:ca:ec:
2d:6b:e2:e8:25:d4:34:65:41:eb:3c:ae:bd:c2:a0:c8:dd:51:
7e:77:a0:84:09:c7:bd:10:8d:f9:c1:c5:47:ff:b3:70:ec:46:
36:99:e3:f7:a9:a6:4c:ab:d9:f7:40:a3:2a:69:46:81:a9:8d:
c9:91:82:8c:ad:46:4f:fa:5d:a7:4e:27:a5:4b:b5:53:35:aa:
d2:aa:c2:7a:eb:f0:13:7e:fe:56:61:be:c0:60:51:0f:73:3c:
9d:bf:8e:52:cd:41:20:f8:47:ec:d6:42:46:3c:1e:50:a6:f7:
fb:c9:00:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEktMkmRt0odOcsiKcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk4NmJiM2UtNjdmMC00ZWZkLWEwMGUtYThhZDY1OWFh
ODM2MB4XDTI1MDMxMzE3MjYzMVoXDTI1MDYxMTE3MjYzMVowLzEtMCsGA1UEAxMk
MjA0NDk2NDUtZGFiNC00MDNjLWIzZGItNmJhMDlkOTdlY2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlioi059Q0iFjaBo/ebaJtR7urs2ZX+uGhul
KfmbdsAbVFN1pWbeL4NnzZau9p733ycQzDkLWLmCI0d0UlbkoeZxJDoUzaoTEHwf
ML4Zja9OoF9QkAKXmE+BEYZkH1ib7lfihbSpuqw5ZaYO9+58DJAcQ6BXzTV4BlBV
YqcqyuySVgYDWVZlHCoD3Ob5tW0E1cvCNrp8YNLACtgvLY0jJ7xbRpXXqKQvGPmk
U+27FNIuS+/zZ84pyA8XEmQp9lXgDGF/1UabLkB7c9ZabOMF7x9W0UoB3cZPKAAu
ZHbYQXVVpHbnNjhM1Q0yO8IDiPB0C7dziRQFOCTS7CeQYqCvyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJuW8wWwBO1MZYWexMraGaz97iGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yOTg2
YmIzZS02N2YwLTRlZmQtYTAwZS1hOGFkNjU5YWE4MzYvYjI2OTdhOWUtYjdjMC0z
Y2EzLWFkOWUtMmNhMjI3ZTUyYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjk4NmJiM2UtNjdmMC00ZWZkLWEw
MGUtYThhZDY1OWFhODM2LzI5ODZiYjNlLTY3ZjAtNGVmZC1hMDBlLWE4YWQ2NTlh
YTgzNi5jcmwwHwYDVR0jBBgwFoAU1X3yhipZni97RXrmJ7EUI/2sTEQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yOTg2YmIzZS02N2YwLTRlZmQtYTAwZS1hOGFk
NjU5YWE4MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ43jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsFbTLIARN2D7ad3RM3dyYuMDUMsMMAaSl5i8oO663pRYoC3sb/3CFX
4KRsD3GBZ+437QW2RyFq741U2BKZTYZJ5KHUZs4f2719w/dK891QZJ7oaHDmHAbo
6kjItz/T6l9fg+Mb0Ql5eIOPxEXNLyQQbvpI74wtRftG/BAHS4ySTuP2Y6Cj0MUv
73LljI3K7C1r4ugl1DRlQes8rr3CoMjdUX53oIQJx70QjfnBxUf/s3DsRjaZ4/ep
pkyr2fdAoyppRoGpjcmRgoytRk/6XadOJ6VLtVM1qtKqwnrr8BN+/lZhvsBgUQ9z
PJ2/jlLNQSD4R+zWQkY8HlCm9/vJAD4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:55:34 2025 by rpki-client