Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/a344b63f-60d1-36bb-8f86-ff2f48ea2c62.roa
File: a344b63f-60d1-36bb-8f86-ff2f48ea2c62.roa (raw, json)
Hash identifier: OVVxO5bk+qBkdcfr88k0LxxciZi7b1qcy6Bt/rQZ2Dg=
Subject key identifier: 14:EE:9B:D7:F8:FA:5A:96:A1:B9:63:90:C9:6A:FF:02:EA:62:F5:0F
Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca
Certificate serial: 010D0C9F43285848FC71F88A29A01181125B9640
Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/a344b63f-60d1-36bb-8f86-ff2f48ea2c62.roa
Signing time: Mon 24 Feb 2025 06:20:14 +0000
ROA not before: Mon 24 Feb 2025 06:20:14 +0000
ROA not after: Sun 25 May 2025 05:20:14 +0000
asID: 3356
IP address blocks: 23.133.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 14:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fc:71:f8:8a:29:a0:11:81:12:5b:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca
Validity
Not Before: Feb 24 06:20:14 2025 GMT
Not After : May 25 05:20:14 2025 GMT
Subject: CN=fa721251-9c09-4e85-9890-369ae407fd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:e4:e7:2d:cf:4b:33:d6:fb:97:da:c9:b9:
30:6d:cd:33:ab:eb:07:aa:09:ba:59:51:32:7f:68:
a9:45:12:b0:8f:65:b4:28:79:f5:35:a7:dd:9e:41:
d3:09:a9:69:ae:3f:03:9b:73:4e:06:33:e1:68:55:
6c:67:ea:84:b1:41:52:f6:82:22:89:19:88:fc:73:
9a:6d:6b:2c:74:34:8d:59:36:5a:b8:ba:30:88:9c:
1f:ab:e4:c9:70:e0:5d:a5:c3:07:de:83:ec:df:96:
bc:9e:34:c7:3e:99:2c:58:ce:f9:55:cc:e7:12:af:
2d:2a:1b:90:c6:95:36:12:1c:b1:cd:0a:24:77:ad:
9f:dc:27:ae:93:b9:14:72:a9:24:5d:8b:14:c3:0a:
57:d0:89:f0:a1:d6:ce:79:61:be:a4:7d:36:b6:d6:
6a:f0:ad:29:14:27:4e:cd:b9:68:84:a6:e2:a9:26:
66:24:6b:c1:40:ec:4a:1b:12:76:9b:d2:71:d6:43:
fe:a5:70:3b:39:e6:9e:63:62:9f:07:c6:c9:36:29:
0a:d2:3a:33:fa:54:9d:98:64:c3:bb:8b:eb:b3:c0:
d4:74:5e:20:65:15:1c:7d:47:11:95:57:c6:b8:3e:
e4:56:c3:29:57:9b:9a:b8:7e:e5:12:dd:e9:72:60:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EE:9B:D7:F8:FA:5A:96:A1:B9:63:90:C9:6A:FF:02:EA:62:F5:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/a344b63f-60d1-36bb-8f86-ff2f48ea2c62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl
X509v3 Authority Key Identifier:
keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:26:a3:49:7d:6b:90:fd:b0:0a:f7:83:cf:a5:53:45:e5:7b:
0a:96:56:0f:11:cf:dd:d7:43:3e:0e:55:d6:46:69:21:e8:c4:
bf:56:40:2a:fc:29:18:06:96:b4:88:dd:4c:3d:d6:ac:cf:ac:
07:8d:bc:08:70:34:ba:f4:bf:93:2c:e5:9f:45:bc:d2:19:6a:
f8:d5:9e:58:bb:17:8f:d4:ed:a0:22:7a:d3:c3:ee:ed:e4:03:
02:32:04:e9:5d:e7:5c:7b:17:a2:b2:fc:0d:13:ff:01:82:ce:
ad:42:9c:18:02:60:41:86:e8:bb:0b:1e:28:8f:4e:d0:64:4e:
3d:4c:93:b1:1c:6b:ad:2d:6a:16:a3:e2:97:77:ae:c6:77:a8:
5e:f0:63:a4:42:62:cd:98:31:51:04:82:aa:7e:51:91:63:04:
e4:e5:62:e8:39:b3:55:8f:ac:94:b1:5e:45:a4:0a:5a:fe:b2:
5d:e0:b2:b1:7f:c6:a2:1c:1a:34:77:04:0b:88:87:d9:b1:b0:
ad:ed:8a:19:60:54:e6:64:85:c7:58:c4:3a:5a:af:88:eb:14:
60:c2:34:f2:d7:dd:a6:bf:ca:3c:6c:f4:4d:62:aa:9a:a6:48:
7d:e6:b6:c0:59:78:d7:02:9f:91:f0:77:07:3c:2d:10:33:6e:
9c:ea:ec:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj8cfiKKaARgRJblkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2
ZWNhMB4XDTI1MDIyNDA2MjAxNFoXDTI1MDUyNTA1MjAxNFowLzEtMCsGA1UEAxMk
ZmE3MjEyNTEtOWMwOS00ZTg1LTk4OTAtMzY5YWU0MDdmZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IHk5y3PSzPW+5faybkwbc0zq+sHqgm6WVEy
f2ipRRKwj2W0KHn1NafdnkHTCalprj8Dm3NOBjPhaFVsZ+qEsUFS9oIiiRmI/HOa
bWssdDSNWTZauLowiJwfq+TJcOBdpcMH3oPs35a8njTHPpksWM75VcznEq8tKhuQ
xpU2EhyxzQokd62f3Ceuk7kUcqkkXYsUwwpX0InwodbOeWG+pH02ttZq8K0pFCdO
zblohKbiqSZmJGvBQOxKGxJ2m9Jx1kP+pXA7OeaeY2KfB8bJNikK0joz+lSdmGTD
u4vrs8DUdF4gZRUcfUcRlVfGuD7kVsMpV5uauH7lEt3pcmA2fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTum9f4+lqWobljkMlq/wLqYvUPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz
MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvYTM0NGI2M2YtNjBkMS0z
NmJiLThmODYtZmYyZjQ4ZWEyYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl
NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi
NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1
NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEmo0l9a5D9sAr3g8+lU0XlewqWVg8Rz93XQz4OVdZGaSHoxL9WQCr8
KRgGlrSI3Uw91qzPrAeNvAhwNLr0v5Ms5Z9FvNIZavjVnli7F4/U7aAietPD7u3k
AwIyBOld51x7F6Ky/A0T/wGCzq1CnBgCYEGG6LsLHiiPTtBkTj1Mk7Eca60tahaj
4pd3rsZ3qF7wY6RCYs2YMVEEgqp+UZFjBOTlYug5s1WPrJSxXkWkClr+sl3gsrF/
xqIcGjR3BAuIh9mxsK3tihlgVOZkhcdYxDpar4jrFGDCNPLX3aa/yjxs9E1iqpqm
SH3mtsBZeNcCn5Hwdwc8LRAzbpzq7Dc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:16 2025 by rpki-client