Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/914cfa8e-18e8-3b09-bcd7-83b9fe573121.roa
File: 914cfa8e-18e8-3b09-bcd7-83b9fe573121.roa (raw, json)
Hash identifier: Jh1++bEGX+Fb5VPamFMWEGaw9OUkBDsOUBVg4c7jrcg=
Subject key identifier: 74:37:37:58:14:F9:CB:66:74:C6:BC:D9:4C:2D:A0:95:DE:91:96:FA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584843BEA964835CA5384A9A48A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/914cfa8e-18e8-3b09-bcd7-83b9fe573121.roa
Signing time: Fri 20 Dec 2024 02:30:12 +0000
ROA not before: Fri 20 Dec 2024 02:30:12 +0000
ROA not after: Thu 20 Mar 2025 01:30:12 +0000
asID: 200736
IP address blocks: 2001:470:21f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Jan 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:be:a9:64:83:5c:a5:38:4a:9a:48:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 20 02:30:12 2024 GMT
Not After : Mar 20 01:30:12 2025 GMT
Subject: CN=70bddfdc-277e-4763-bf8f-46c602a4a3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:90:07:2f:ec:22:62:dd:4a:3f:e4:8f:fe:
2b:aa:39:eb:80:61:ef:d5:05:eb:ed:fd:b1:dc:5b:
8a:7c:b4:08:9d:15:91:c6:da:93:7f:f6:14:84:53:
e8:51:c9:45:4d:7d:09:52:bd:4a:c1:44:2c:1e:da:
56:20:1d:c7:9d:b2:43:21:b4:3c:d8:96:17:08:49:
e8:34:c7:29:f8:2d:d0:3d:0c:2d:e4:f1:70:5b:4c:
13:5d:db:af:6c:d7:d9:c0:e3:3f:6c:8c:6f:24:2f:
ad:89:d3:a6:f0:7f:64:3e:dc:9b:6a:98:c7:de:b9:
0b:37:61:7d:03:8d:9e:53:2c:13:65:14:94:2a:3e:
f9:a9:d4:00:d7:94:7d:5f:c0:0e:05:70:15:9c:27:
5a:f1:e5:f3:5e:2e:a4:0d:e0:5e:5f:10:2d:65:ed:
cc:6e:42:1c:7c:17:67:50:ab:b4:1a:77:a4:9b:a9:
a1:b7:7e:bd:1a:41:c3:c0:b3:08:bb:a2:eb:c3:e6:
c7:a6:bd:3c:37:0c:dc:cb:4b:16:20:01:93:94:b8:
82:bb:9c:f6:35:ad:a6:fb:7d:0c:d1:ad:b3:80:9f:
de:c1:de:c4:10:9b:8c:ff:26:79:77:50:e2:f7:a3:
1b:ef:41:2e:53:a0:da:4d:84:83:8b:c0:b8:12:c7:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:37:58:14:F9:CB:66:74:C6:BC:D9:4C:2D:A0:95:DE:91:96:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/914cfa8e-18e8-3b09-bcd7-83b9fe573121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:21f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:4c:5f:f4:0c:e6:61:87:b9:25:7d:f3:10:62:eb:09:90:37:
d6:9b:b0:c9:f0:c9:2a:35:0c:fe:cc:c7:79:3d:12:ca:af:e2:
4d:2e:9d:c5:de:58:46:28:5a:f2:12:fc:2b:96:50:97:ff:a8:
ac:b0:a2:41:fd:48:f0:4b:14:83:2d:72:a3:5b:af:22:e0:65:
b4:d3:b9:68:bc:e2:1e:63:83:25:e6:8e:87:07:c4:e7:aa:73:
cf:a9:30:f2:db:04:5f:93:29:b7:b5:68:59:75:ab:7d:70:3d:
07:33:f6:26:3a:27:93:d8:a3:5e:cd:65:ec:19:a9:e2:6a:a8:
c2:73:a5:d2:7e:ff:25:de:c6:96:26:23:b4:ea:08:cc:15:79:
18:70:49:9f:a1:26:11:82:53:29:92:d1:4d:12:b6:4e:78:44:
57:18:c5:a0:23:9e:44:11:e9:aa:b6:9c:72:0a:49:e4:2f:3a:
f8:69:76:8e:09:69:b3:23:df:73:7b:b1:81:f4:66:3a:09:a8:
cb:d1:2e:8f:3b:1d:73:e7:3d:05:c9:f9:db:a5:49:3a:53:11:
67:63:d7:86:e2:6b:22:a2:db:92:8b:3b:f8:3a:b3:fc:96:80:
51:dd:ab:8b:2a:95:f5:29:09:77:d7:3c:bf:f6:40:e8:43:5c:
42:b6:c2:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhDvqlkg1ylOEqaSKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIyMDAyMzAxMloXDTI1MDMyMDAxMzAxMlowLzEtMCsGA1UEAxMk
NzBiZGRmZGMtMjc3ZS00NzYzLWJmOGYtNDZjNjAyYTRhM2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB2QBy/sImLdSj/kj/4rqjnrgGHv1QXr7f2x
3FuKfLQInRWRxtqTf/YUhFPoUclFTX0JUr1KwUQsHtpWIB3HnbJDIbQ82JYXCEno
NMcp+C3QPQwt5PFwW0wTXduvbNfZwOM/bIxvJC+tidOm8H9kPtybapjH3rkLN2F9
A42eUywTZRSUKj75qdQA15R9X8AOBXAVnCda8eXzXi6kDeBeXxAtZe3MbkIcfBdn
UKu0Gnekm6mht369GkHDwLMIu6Lrw+bHpr08Nwzcy0sWIAGTlLiCu5z2Na2m+30M
0a2zgJ/ewd7EEJuM/yZ5d1Di96Mb70EuU6DaTYSDi8C4EsePpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHQ3N1gU+ctmdMa82UwtoJXekZb6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTE0Y2ZhOGUtMThlOC0z
YjA5LWJjZDctODNiOWZlNTczMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACpMX/QM5mGHuSV98xBi6wmQN9absMnwySo1DP7Mx3k9Esqv4k0u
ncXeWEYoWvIS/CuWUJf/qKywokH9SPBLFIMtcqNbryLgZbTTuWi84h5jgyXmjocH
xOeqc8+pMPLbBF+TKbe1aFl1q31wPQcz9iY6J5PYo17NZewZqeJqqMJzpdJ+/yXe
xpYmI7TqCMwVeRhwSZ+hJhGCUymS0U0Stk54RFcYxaAjnkQR6aq2nHIKSeQvOvhp
do4JabMj33N7sYH0ZjoJqMvRLo87HXPnPQXJ+dulSTpTEWdj14biayKi25KLO/g6
s/yWgFHdq4sqlfUpCXfXPL/2QOhDXEK2wrw=
-----END CERTIFICATE-----
Generated at Wed Feb 5 04:53:54 2025 by rpki-client