Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/dbe27f5f-ced7-335f-baa5-01d5ece83b70.roa
File: dbe27f5f-ced7-335f-baa5-01d5ece83b70.roa (raw, json)
Hash identifier: OUl5scRur8Bg4JNNqmqSYVNMgZFYw3peT/MTW6IRi0Q=
Subject key identifier: E2:C2:80:54:CC:15:AD:82:AC:E9:E0:04:C6:1F:F6:E8:3C:1F:76:BF
Certificate issuer: /CN=9caf23fc-9cbc-4f40-aea8-07653211f665
Certificate serial: 010D0C9F43285848FC700D0E19BF00BF0CF4F430
Authority key identifier: 4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/dbe27f5f-ced7-335f-baa5-01d5ece83b70.roa
Signing time: Mon 24 Feb 2025 06:16:22 +0000
ROA not before: Mon 24 Feb 2025 06:16:22 +0000
ROA not after: Sun 25 May 2025 05:16:22 +0000
asID: 3356
IP address blocks: 23.134.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fc:70:0d:0e:19:bf:00:bf:0c:f4:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9caf23fc-9cbc-4f40-aea8-07653211f665
Validity
Not Before: Feb 24 06:16:22 2025 GMT
Not After : May 25 05:16:22 2025 GMT
Subject: CN=9f3b8a86-37be-4407-98fe-6dd99a679eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:8b:5c:80:47:bd:c6:a8:6c:6e:f3:a2:dc:
7c:32:6a:9f:e0:61:08:d7:60:97:8c:9f:69:5d:2e:
cb:7c:99:55:ef:d4:18:4f:0d:4b:66:57:a0:df:19:
0b:ed:8d:0c:de:5a:38:09:ed:5e:9f:b5:72:29:0f:
ea:ba:41:c1:8e:76:5e:18:9a:0e:2a:2f:20:0c:e8:
99:57:6d:50:5e:66:36:db:7b:25:0e:d4:62:fe:e7:
4f:a9:2f:08:dc:84:06:e1:da:81:ef:f5:f0:12:94:
f5:1a:d1:aa:bf:10:6d:2d:1c:71:bf:94:32:b0:07:
2a:0b:3b:c5:6a:94:d9:02:bc:3a:3c:31:7b:97:81:
77:24:ce:56:25:b5:c8:ef:62:6d:67:be:2b:87:41:
88:05:58:06:44:4d:4b:01:a0:29:c4:79:05:c7:de:
2f:92:38:49:23:50:26:df:4e:3f:70:e0:6f:cb:cf:
f9:9e:0b:2c:c6:6c:77:be:13:29:87:cb:4f:25:83:
3d:fa:45:08:13:99:64:a0:4b:aa:88:42:c1:18:43:
3a:e5:f3:b6:12:af:b6:80:c8:f4:7c:a3:22:44:d6:
72:43:7f:e5:e0:9a:99:b6:52:e1:df:55:41:40:0a:
17:c2:37:e7:94:40:73:83:5e:ac:a1:9b:22:82:69:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C2:80:54:CC:15:AD:82:AC:E9:E0:04:C6:1F:F6:E8:3C:1F:76:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/dbe27f5f-ced7-335f-baa5-01d5ece83b70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.crl
X509v3 Authority Key Identifier:
keyid:4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:4a:77:8d:bf:ef:84:23:5e:5a:73:5b:ed:92:60:2c:02:7a:
b0:83:d1:cc:48:20:68:9f:9a:d4:2b:d7:4a:3a:02:6d:7d:4f:
d4:7a:77:70:c6:f3:21:6a:47:07:f3:7c:d0:e4:d4:27:13:7a:
67:50:1d:a5:d9:80:c5:9a:58:99:81:02:c3:36:7d:bd:2d:1a:
66:46:fd:93:24:26:50:92:3f:b8:b1:73:b1:48:3e:f8:eb:ce:
5e:68:13:37:77:66:92:00:5a:38:86:70:5a:29:f7:66:f6:33:
6e:7f:d4:81:ab:31:f1:11:7f:19:b9:9c:30:70:a6:6b:fc:44:
c4:82:e2:fa:2f:6f:a9:0b:b9:4b:ff:46:ab:54:3a:7f:e5:5f:
d6:13:2b:3d:85:fe:e5:57:61:69:96:e0:3c:f0:19:0b:d8:bc:
e9:7f:1a:4d:ce:87:03:21:58:f4:60:c8:3f:75:11:be:3c:a4:
24:37:5d:b3:94:c8:86:05:05:a5:9d:f5:e4:9c:91:b6:64:87:
fa:e7:1b:82:fc:93:58:58:e6:98:24:dc:ad:c4:cf:22:a7:72:
6b:2f:8e:8c:c3:1a:53:b3:af:03:8c:c9:58:af:e5:56:99:a1:
6a:04:08:87:be:5d:81:ce:8a:e8:f1:be:73:7f:ed:17:80:9c:
5a:51:13:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj8cA0OGb8Avwz09DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNhZjIzZmMtOWNiYy00ZjQwLWFlYTgtMDc2NTMyMTFm
NjY1MB4XDTI1MDIyNDA2MTYyMloXDTI1MDUyNTA1MTYyMlowLzEtMCsGA1UEAxMk
OWYzYjhhODYtMzdiZS00NDA3LTk4ZmUtNmRkOTlhNjc5ZWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMCLXIBHvcaobG7zotx8Mmqf4GEI12CXjJ9p
XS7LfJlV79QYTw1LZleg3xkL7Y0M3lo4Ce1en7VyKQ/qukHBjnZeGJoOKi8gDOiZ
V21QXmY223slDtRi/udPqS8I3IQG4dqB7/XwEpT1GtGqvxBtLRxxv5QysAcqCzvF
apTZArw6PDF7l4F3JM5WJbXI72JtZ74rh0GIBVgGRE1LAaApxHkFx94vkjhJI1Am
304/cOBvy8/5ngssxmx3vhMph8tPJYM9+kUIE5lkoEuqiELBGEM65fO2Eq+2gMj0
fKMiRNZyQ3/l4JqZtlLh31VBQAoXwjfnlEBzg16soZsigmnyFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLCgFTMFa2CrOngBMYf9ug8H3a/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Y2Fm
MjNmYy05Y2JjLTRmNDAtYWVhOC0wNzY1MzIxMWY2NjUvZGJlMjdmNWYtY2VkNy0z
MzVmLWJhYTUtMDFkNWVjZTgzYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWNhZjIzZmMtOWNiYy00ZjQwLWFl
YTgtMDc2NTMyMTFmNjY1LzljYWYyM2ZjLTljYmMtNGY0MC1hZWE4LTA3NjUzMjEx
ZjY2NS5jcmwwHwYDVR0jBBgwFoAUTOyTsaGO9chQAq5XQJjzIZhzHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85Y2FmMjNmYy05Y2JjLTRmNDAtYWVhOC0wNzY1
MzIxMWY2NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4YkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdKd42/74QjXlpzW+2SYCwCerCD0cxIIGifmtQr10o6Am19T9R6d3DG
8yFqRwfzfNDk1CcTemdQHaXZgMWaWJmBAsM2fb0tGmZG/ZMkJlCSP7ixc7FIPvjr
zl5oEzd3ZpIAWjiGcFop92b2M25/1IGrMfERfxm5nDBwpmv8RMSC4vovb6kLuUv/
RqtUOn/lX9YTKz2F/uVXYWmW4DzwGQvYvOl/Gk3OhwMhWPRgyD91Eb48pCQ3XbOU
yIYFBaWd9eSckbZkh/rnG4L8k1hY5pgk3K3EzyKncmsvjozDGlOzrwOMyViv5VaZ
oWoECIe+XYHOiujxvnN/7ReAnFpREwo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:49 2025 by rpki-client