Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/a0df0a77-21f5-3d8a-ab15-9e95e72015b3.roa
File: a0df0a77-21f5-3d8a-ab15-9e95e72015b3.roa (raw, json)
Hash identifier: akqNnhy0pcgDzkWInGGKD3OXNLJfcewIfsTCP6Zx7Rg=
Subject key identifier: BE:33:F5:5F:AD:71:C2:E5:E0:73:E9:7F:BF:0D:38:74:CD:0D:7F:55
Certificate issuer: /CN=9c74a627-7577-4f11-89e0-589500621344
Certificate serial: 010D0C9F43285848FC6D446F048FB6498CA85B00
Authority key identifier: D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/a0df0a77-21f5-3d8a-ab15-9e95e72015b3.roa
Signing time: Mon 24 Feb 2025 06:10:45 +0000
ROA not before: Mon 24 Feb 2025 06:10:45 +0000
ROA not after: Sun 25 May 2025 05:10:45 +0000
asID: 3356
IP address blocks: 23.133.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fc:6d:44:6f:04:8f:b6:49:8c:a8:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c74a627-7577-4f11-89e0-589500621344
Validity
Not Before: Feb 24 06:10:45 2025 GMT
Not After : May 25 05:10:45 2025 GMT
Subject: CN=f11ec643-39e8-43e0-886e-14bda3fea3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:4d:85:cd:71:77:cb:f2:e9:35:d0:5a:17:
30:05:17:f5:cd:21:d7:61:04:1d:8d:56:58:e7:1d:
c1:7c:20:87:0e:ad:17:a9:1f:21:b1:c1:9a:3e:30:
24:94:eb:22:a5:ad:50:cb:11:31:e9:bd:ad:78:31:
a0:dc:6b:f7:e9:46:32:c2:77:9d:63:da:85:ba:db:
be:de:d4:85:9c:19:b8:f2:c4:10:c4:ad:ac:1b:16:
0a:07:37:04:67:9d:f0:92:57:f3:fe:1e:e4:d3:8b:
4d:33:22:4c:f6:58:ea:84:69:6a:bd:b2:5a:d6:af:
4c:f9:ca:ed:d5:09:22:a8:ff:7e:97:53:f3:22:04:
e7:0c:c3:90:f8:73:d0:fb:d0:3b:89:a2:68:de:7c:
b1:c4:4a:41:57:c4:4b:0f:b3:53:6b:99:f9:21:2d:
7e:69:4a:63:d0:d3:1a:9d:20:a0:fd:f6:99:ad:f9:
5b:1a:ad:74:05:38:00:31:f1:38:f0:f2:48:c8:8e:
5c:6f:a8:62:ea:9e:0b:cb:b8:85:64:01:58:b5:ac:
c1:24:d1:11:b1:13:84:57:46:7f:9a:90:83:0a:36:
7f:1f:10:a2:70:71:84:fb:6a:9a:ed:4c:eb:04:eb:
1d:46:c2:7a:ab:33:9b:78:d2:68:16:31:cc:66:e7:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:F5:5F:AD:71:C2:E5:E0:73:E9:7F:BF:0D:38:74:CD:0D:7F:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/a0df0a77-21f5-3d8a-ab15-9e95e72015b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.crl
X509v3 Authority Key Identifier:
keyid:D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:60:20:54:ca:0e:40:89:3d:e1:ec:5c:0f:d3:d5:93:6d:21:
b3:db:c8:ee:b7:4c:e1:24:dc:5e:f8:b9:92:d3:da:91:4d:fd:
b9:b1:99:bd:fa:35:82:9a:52:a2:c0:ea:13:78:4a:40:9a:67:
1a:8d:32:0a:7a:eb:dc:61:8a:e6:ec:e2:88:d3:18:9d:06:9e:
7e:c5:de:f7:c1:16:0e:c0:d6:62:c0:3b:0d:d3:48:be:67:2e:
ed:f7:06:6b:96:a0:03:4b:7b:f9:92:f4:0a:77:1c:27:ca:a3:
bd:4c:8f:81:27:3a:90:26:bc:20:0c:c3:c7:03:a7:31:24:2f:
f8:9d:a7:83:c5:bc:25:6c:89:d2:0e:0c:01:2c:07:82:b6:09:
0b:29:a1:9d:29:68:24:33:d7:3b:c9:6b:79:e2:9c:f3:c5:74:
05:68:c7:98:8b:5f:b2:11:92:ae:f1:fa:ea:78:fb:b4:16:ef:
1e:e8:1c:72:ae:46:87:e5:5d:cd:09:f2:dc:06:f1:34:72:9a:
73:de:24:1b:79:45:05:56:e6:0e:92:ec:57:ee:70:ab:86:c1:
69:33:64:21:8f:1e:27:40:cc:97:d6:a4:f2:d0:9f:ee:1b:68:
41:59:7a:91:89:89:6c:a8:0a:be:7a:58:e0:42:69:71:0d:46:
bd:b6:cc:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj8bURvBI+2SYyoWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM3NGE2MjctNzU3Ny00ZjExLTg5ZTAtNTg5NTAwNjIx
MzQ0MB4XDTI1MDIyNDA2MTA0NVoXDTI1MDUyNTA1MTA0NVowLzEtMCsGA1UEAxMk
ZjExZWM2NDMtMzllOC00M2UwLTg4NmUtMTRiZGEzZmVhM2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyVNhc1xd8vy6TXQWhcwBRf1zSHXYQQdjVZY
5x3BfCCHDq0XqR8hscGaPjAklOsipa1QyxEx6b2teDGg3Gv36UYywnedY9qFutu+
3tSFnBm48sQQxK2sGxYKBzcEZ53wklfz/h7k04tNMyJM9ljqhGlqvbJa1q9M+crt
1QkiqP9+l1PzIgTnDMOQ+HPQ+9A7iaJo3nyxxEpBV8RLD7NTa5n5IS1+aUpj0NMa
nSCg/faZrflbGq10BTgAMfE48PJIyI5cb6hi6p4Ly7iFZAFYtazBJNERsROEV0Z/
mpCDCjZ/HxCicHGE+2qa7UzrBOsdRsJ6qzObeNJoFjHMZucvgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL4z9V+tccLl4HPpf78NOHTNDX9VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Yzc0
YTYyNy03NTc3LTRmMTEtODllMC01ODk1MDA2MjEzNDQvYTBkZjBhNzctMjFmNS0z
ZDhhLWFiMTUtOWU5NWU3MjAxNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWM3NGE2MjctNzU3Ny00ZjExLTg5
ZTAtNTg5NTAwNjIxMzQ0LzljNzRhNjI3LTc1NzctNGYxMS04OWUwLTU4OTUwMDYy
MTM0NC5jcmwwHwYDVR0jBBgwFoAU1kS4MuADN/2hamLerkLPVidKobgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85Yzc0YTYyNy03NTc3LTRmMTEtODllMC01ODk1
MDA2MjEzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJgIFTKDkCJPeHsXA/T1ZNtIbPbyO63TOEk3F74uZLT2pFN/bmxmb36
NYKaUqLA6hN4SkCaZxqNMgp669xhiubs4ojTGJ0Gnn7F3vfBFg7A1mLAOw3TSL5n
Lu33BmuWoANLe/mS9Ap3HCfKo71Mj4EnOpAmvCAMw8cDpzEkL/idp4PFvCVsidIO
DAEsB4K2CQspoZ0paCQz1zvJa3ninPPFdAVox5iLX7IRkq7x+up4+7QW7x7oHHKu
RoflXc0J8twG8TRymnPeJBt5RQVW5g6S7FfucKuGwWkzZCGPHidAzJfWpPLQn+4b
aEFZepGJiWyoCr56WOBCaXENRr22zL8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:31 2025 by rpki-client