Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ad37f5c-494c-3ddf-b1c5-e5a984b6e027.roa
File: 5ad37f5c-494c-3ddf-b1c5-e5a984b6e027.roa (raw, json)
Hash identifier: zw7LY9tFLc4p/ULt80h/FdNpt66bmsRKaJjboZPqMXs=
Subject key identifier: 2D:68:3A:6D:73:38:95:27:FF:7A:2F:2F:63:CB:AD:2A:60:F4:62:83
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C150DDA6202B064C2DF47280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ad37f5c-494c-3ddf-b1c5-e5a984b6e027.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 6167
IP address blocks: 174.214.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 07 Feb 2025 17:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:dd:a6:20:2b:06:4c:2d:f4:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=05ec7a38-974a-4603-ba1c-bedf5d4b6c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:36:af:00:06:4a:99:48:fe:47:01:1d:51:
51:e7:b2:8f:a6:f3:aa:23:09:54:db:9f:ea:60:fa:
f3:87:f7:a4:e1:15:26:e7:f8:13:25:59:aa:36:f4:
a3:7d:4f:a5:7f:0c:58:84:19:92:aa:4c:db:c6:9c:
19:15:86:32:29:8e:75:bc:ce:82:7f:c7:cb:c2:00:
94:78:8f:4f:ec:4a:62:f9:a7:ee:3b:d4:84:16:0b:
74:72:8f:dc:c3:1c:51:c6:66:68:35:04:48:a8:9f:
4b:62:34:db:13:c4:79:8c:16:ed:58:45:10:f0:cd:
ec:9d:77:a7:6b:80:62:b8:36:52:3f:f8:00:3f:0a:
c8:52:1d:a3:99:ca:c7:89:d6:a1:ae:ab:24:1a:11:
0d:19:1c:b7:43:40:56:61:73:cd:47:ee:a2:e1:e9:
f7:0d:c0:02:8e:86:41:8a:d3:06:a4:78:33:26:d0:
92:8c:2e:bc:8c:47:98:f5:e6:8c:64:5b:cc:c1:26:
15:9f:20:f5:df:49:11:2d:97:3c:84:c7:b6:35:f3:
eb:d4:cb:5d:c0:1f:05:87:0e:45:d6:9c:cd:67:22:
11:2b:8f:8e:25:6f:66:91:10:0b:7f:c1:d1:42:be:
7b:71:35:7c:04:ba:4c:94:9e:9c:11:b5:78:3a:31:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:68:3A:6D:73:38:95:27:FF:7A:2F:2F:63:CB:AD:2A:60:F4:62:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ad37f5c-494c-3ddf-b1c5-e5a984b6e027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.214.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e0:84:7a:ca:bc:7f:26:db:20:f6:10:de:32:44:23:7f:98:
5e:30:44:b0:32:a1:83:3d:82:9f:a2:dc:c3:89:42:ee:f3:66:
87:44:a1:86:f7:50:b6:5d:fb:63:65:1c:5b:6e:f4:34:e8:33:
18:14:74:92:38:9f:a8:56:9c:aa:7e:38:d5:52:e3:b9:c7:98:
97:63:d3:de:8b:05:a5:8a:9c:b5:bf:fe:2c:0e:c5:b9:9b:4d:
e0:e5:7f:b3:30:3b:a2:1c:18:be:43:53:26:31:73:f4:d0:e7:
a4:e5:42:0f:f4:e7:aa:70:e1:8f:09:b2:c6:0e:8e:a1:78:ae:
8f:8c:55:22:00:00:cc:ec:30:3c:ef:c1:d6:88:95:52:65:fd:
5d:c0:20:2d:b2:f1:ed:f5:33:14:20:cc:dd:29:ed:a1:6d:e5:
77:1f:84:cb:40:97:f7:94:6e:e1:a7:d2:a8:c2:1e:7b:d1:25:
6d:7f:b5:e7:0e:2c:b8:85:9e:40:c9:65:e7:40:8f:d2:c7:8c:
5c:5b:a7:19:fc:0a:1f:ae:0c:96:bc:9f:fc:df:ce:35:2b:ff:
12:73:40:9e:a9:01:b2:a7:4d:e7:35:a7:ca:9a:06:25:1a:79:
98:3e:47:b4:10:f5:9b:34:99:56:28:45:a6:5a:47:4c:7f:30:
8a:dd:52:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUN2mICsGTC30coAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDVlYzdhMzgtOTc0YS00NjAzLWJhMWMtYmVkZjVkNGI2YzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0E2rwAGSplI/kcBHVFR57KPpvOqIwlU25/q
YPrzh/ek4RUm5/gTJVmqNvSjfU+lfwxYhBmSqkzbxpwZFYYyKY51vM6Cf8fLwgCU
eI9P7Epi+afuO9SEFgt0co/cwxxRxmZoNQRIqJ9LYjTbE8R5jBbtWEUQ8M3snXen
a4BiuDZSP/gAPwrIUh2jmcrHidahrqskGhENGRy3Q0BWYXPNR+6i4en3DcACjoZB
itMGpHgzJtCSjC68jEeY9eaMZFvMwSYVnyD130kRLZc8hMe2NfPr1MtdwB8Fhw5F
1pzNZyIRK4+OJW9mkRALf8HRQr57cTV8BLpMlJ6cEbV4OjG6MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1oOm1zOJUn/3ovL2PLrSpg9GKDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWFkMzdmNWMtNDk0Yy0z
ZGRmLWIxYzUtZTVhOTg0YjZlMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvghHrKvH8m2yD2EN4yRCN/mF4wRLAyoYM9gp+i3MOJQu7zZodEoYb3
ULZd+2NlHFtu9DToMxgUdJI4n6hWnKp+ONVS47nHmJdj096LBaWKnLW//iwOxbmb
TeDlf7MwO6IcGL5DUyYxc/TQ56TlQg/056pw4Y8JssYOjqF4ro+MVSIAAMzsMDzv
wdaIlVJl/V3AIC2y8e31MxQgzN0p7aFt5XcfhMtAl/eUbuGn0qjCHnvRJW1/tecO
LLiFnkDJZedAj9LHjFxbpxn8Ch+uDJa8n/zfzjUr/xJzQJ6pAbKnTec1p8qaBiUa
eZg+R7QQ9Zs0mVYoRaZaR0x/MIrdUnc=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:44:44 2025 by rpki-client