Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e874f23-faff-3eaf-9bd8-431791eef235.roa
File: 0e874f23-faff-3eaf-9bd8-431791eef235.roa (raw, json)
Hash identifier: Qzdyzx7OKrz1vngQQgzQucF0DNcteNU8ONzrvaBjNYs=
Subject key identifier: 16:E0:84:3D:84:B3:F0:8B:F7:D9:6E:24:FA:3A:45:7B:32:32:D4:1F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848907610573EB07C4290D9D380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e874f23-faff-3eaf-9bd8-431791eef235.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 20940
IP address blocks: 23.197.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 12:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:10:57:3e:b0:7c:42:90:d9:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=0e2acfc0-b39c-4996-8aed-1862251d9240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:de:93:41:c9:e9:e2:05:45:ca:91:d8:68:
45:8d:43:0b:0a:be:45:c5:c1:b2:ec:cc:5d:99:39:
91:01:8c:ca:44:83:79:9f:e5:14:30:8b:70:d4:3b:
68:d3:16:3c:a1:07:1d:f6:40:ad:b8:7e:36:b4:fb:
86:83:06:1c:95:d2:a8:31:8d:6a:5a:26:f8:9b:5a:
80:7c:e0:e9:cc:e5:7a:f5:a4:e8:c2:31:c4:55:ad:
d3:f8:e6:c2:66:af:cc:e2:db:5f:41:b4:e1:d4:80:
70:10:5e:36:b9:05:47:59:ef:be:6a:81:8d:93:81:
51:fc:67:c8:20:83:42:31:86:57:f8:98:2d:6a:79:
07:24:cb:1e:c1:ea:72:3d:4b:e6:17:c2:38:99:f4:
26:3d:bd:15:ce:b9:a0:f8:bb:18:55:d4:2b:e3:a3:
a8:c4:c6:b7:da:8f:eb:29:31:a8:c6:61:ad:84:17:
6d:0e:8e:4c:6d:47:4d:67:24:6d:99:c4:17:e2:c0:
8b:5c:fa:b0:6f:18:5d:91:8c:1f:2c:65:68:f5:e3:
3d:c0:d8:72:d2:80:de:a2:ae:45:61:4a:f6:53:df:
27:fc:56:45:80:29:50:58:b3:65:9f:25:db:39:4d:
28:65:a9:0b:36:ac:63:96:33:10:54:51:33:ae:40:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:84:3D:84:B3:F0:8B:F7:D9:6E:24:FA:3A:45:7B:32:32:D4:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e874f23-faff-3eaf-9bd8-431791eef235.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:58:7b:0d:51:88:bb:c1:91:ce:3d:9b:a6:c0:a2:da:95:03:
da:c7:d4:12:b9:63:3e:35:1b:c3:1d:d5:11:b3:86:bd:48:d3:
fc:b7:47:ad:01:19:17:1c:14:66:ed:b2:91:55:9d:72:85:38:
3c:b2:80:47:e2:2d:9e:63:3e:96:7c:2b:a1:f9:3a:70:22:95:
29:3b:dc:52:a5:91:1c:52:70:58:04:8f:f0:ec:cf:c1:93:a7:
a6:00:49:ac:1a:2b:6b:fa:7e:ff:48:5f:5e:47:94:6d:ab:c5:
2a:96:c7:8e:94:fc:fe:50:8a:3c:77:a0:d1:c4:93:c8:c1:86:
aa:a4:4f:d5:0e:4c:c8:04:22:4d:9b:95:2e:7c:69:f0:06:b4:
59:77:e2:5c:af:ab:0a:12:10:87:d5:01:92:16:13:e7:a8:36:
73:b5:ac:44:c1:92:ca:19:40:55:b9:ec:fd:61:d5:ed:14:3c:
64:ee:db:34:af:78:1d:0d:0a:d4:9c:e7:44:d1:42:2f:10:16:
5e:f5:1e:4b:5e:9c:75:1e:00:51:16:e5:ca:ce:eb:58:ab:2f:
5f:b3:22:08:94:c0:ba:bf:c5:1b:4d:2b:e6:ca:3d:4c:50:e4:
52:64:bc:5a:4a:3d:7e:c5:59:de:1b:89:5d:9c:23:8e:54:f9:
08:a5:bd:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdhBXPrB8QpDZ04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
MGUyYWNmYzAtYjM5Yy00OTk2LThhZWQtMTg2MjI1MWQ5MjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn7ek0HJ6eIFRcqR2GhFjUMLCr5FxcGy7Mxd
mTmRAYzKRIN5n+UUMItw1Dto0xY8oQcd9kCtuH42tPuGgwYcldKoMY1qWib4m1qA
fODpzOV69aTowjHEVa3T+ObCZq/M4ttfQbTh1IBwEF42uQVHWe++aoGNk4FR/GfI
IINCMYZX+JgtankHJMsewepyPUvmF8I4mfQmPb0Vzrmg+LsYVdQr46OoxMa32o/r
KTGoxmGthBdtDo5MbUdNZyRtmcQX4sCLXPqwbxhdkYwfLGVo9eM9wNhy0oDeoq5F
YUr2U98n/FZFgClQWLNlnyXbOU0oZakLNqxjljMQVFEzrkAzMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbghD2Es/CL99luJPo6RXsyMtQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU4NzRmMjMtZmFmZi0z
ZWFmLTliZDgtNDMxNzkxZWVmMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVYew1RiLvBkc49m6bAotqVA9rH1BK5Yz41G8Md1RGzhr1I0/y3R60B
GRccFGbtspFVnXKFODyygEfiLZ5jPpZ8K6H5OnAilSk73FKlkRxScFgEj/Dsz8GT
p6YASawaK2v6fv9IX15HlG2rxSqWx46U/P5Qijx3oNHEk8jBhqqkT9UOTMgEIk2b
lS58afAGtFl34lyvqwoSEIfVAZIWE+eoNnO1rETBksoZQFW57P1h1e0UPGTu2zSv
eB0NCtSc50TRQi8QFl71HktenHUeAFEW5crO61irL1+zIgiUwLq/xRtNK+bKPUxQ
5FJkvFpKPX7FWd4biV2cI45U+QilvTU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:50:05 2025 by rpki-client