Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f0291f7a-4d76-3783-9a38-2bd655062efc.roa
File: f0291f7a-4d76-3783-9a38-2bd655062efc.roa (raw, json)
Hash identifier: g++ytI2l2RzHUlqQWq+9BP6a52rGUeeukFDL0pzSRBI=
Subject key identifier: E8:BF:A7:0F:0F:2B:BD:1E:6F:5C:94:E2:DD:1F:CF:C4:27:33:0D:81
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849B3458348E13C1738FF832680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f0291f7a-4d76-3783-9a38-2bd655062efc.roa
Signing time: Wed 30 Apr 2025 18:03:35 +0000
ROA not before: Wed 30 Apr 2025 18:03:35 +0000
ROA not after: Tue 29 Jul 2025 18:03:35 +0000
asID: 19905
IP address blocks: 173.27.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 05 May 2025 12:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b3:45:83:48:e1:3c:17:38:ff:83:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 30 18:03:35 2025 GMT
Not After : Jul 29 18:03:35 2025 GMT
Subject: CN=24b62aca-2666-4894-b21a-cfe46f9bc7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:87:7d:f0:e6:7d:51:22:4b:73:d2:7e:bf:
de:07:f1:1c:bf:c1:7b:21:fc:8d:79:2d:48:11:ca:
64:12:7d:c9:52:1d:d9:9b:18:f5:d2:3c:ce:f4:02:
c3:20:d9:9a:a8:d3:01:25:0b:91:d2:9e:df:7a:24:
37:d7:99:12:0d:15:de:2d:5a:ca:bf:c1:c1:de:76:
f5:da:ea:b8:93:ea:c5:d1:89:f4:f2:11:a2:ae:be:
34:99:f0:78:5c:42:02:87:27:9d:2a:71:98:8c:61:
74:fa:5b:02:0d:f1:32:d9:b5:29:91:13:9f:5e:d3:
19:7c:fd:1e:00:98:09:61:36:82:1d:49:37:67:e6:
48:1f:7c:f9:8e:a8:fc:3d:da:53:d7:fb:9c:86:df:
09:34:f9:90:b0:98:61:a5:78:e9:1c:9f:28:6b:b1:
80:6c:bc:b3:04:a2:b7:dd:ba:74:b8:2a:8b:cb:0f:
c5:72:c0:fc:dc:45:11:10:9d:fa:bf:da:4c:44:36:
3a:b0:2a:7c:11:19:11:ed:71:e6:2a:7a:61:49:af:
32:98:1d:79:4d:82:d3:00:59:29:bc:e1:c8:3a:9f:
28:de:ae:eb:34:b9:45:db:31:9d:e6:21:f2:b6:3e:
52:2a:33:7f:68:a3:a0:20:e8:70:3e:a3:e9:6d:93:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:A7:0F:0F:2B:BD:1E:6F:5C:94:E2:DD:1F:CF:C4:27:33:0D:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f0291f7a-4d76-3783-9a38-2bd655062efc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.27.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:6e:05:9f:13:88:84:48:91:a1:ae:fb:5f:11:43:c0:52:5e:
a9:1f:0d:3f:e3:07:b5:00:12:27:d0:d8:3f:0f:12:ba:57:55:
a6:65:11:43:66:58:7e:1c:1a:56:ce:3e:ed:86:11:bd:a1:c7:
9c:5d:11:89:1a:00:78:72:8e:dc:d7:87:d3:1a:0e:ed:98:3c:
25:07:24:16:f7:eb:e8:34:c9:0a:af:85:29:55:44:06:4c:50:
40:47:ef:b1:41:f7:69:e7:1a:14:8e:31:6a:13:b3:41:a2:2b:
b4:d6:82:e7:28:c9:7c:7c:99:7c:cb:f8:8f:02:9a:27:a3:56:
5d:d1:3d:cc:5d:12:67:8c:82:ee:d2:e1:6b:01:15:ab:6c:68:
18:56:64:62:16:d1:b2:2b:a4:af:ea:05:5d:56:44:0a:bf:6d:
ab:44:3e:fb:7f:88:e1:30:a8:9a:52:b2:06:1a:85:5b:e6:df:
52:e5:62:4b:b2:e8:cb:7c:22:55:6f:64:48:d6:63:d7:7c:4d:
f0:69:76:f9:aa:54:87:50:3d:fd:bc:c0:01:5a:39:9e:00:da:
2e:ee:cd:10:57:0a:4d:21:b1:11:e0:7b:0c:0f:62:6a:8b:1c:
25:83:60:ba:39:10:7a:3a:b3:02:6e:fd:9b:1e:f0:8c:99:eb:
f3:10:e3:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmzRYNI4TwXOP+DJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQzMDE4MDMzNVoXDTI1MDcyOTE4MDMzNVowLzEtMCsGA1UEAxMk
MjRiNjJhY2EtMjY2Ni00ODk0LWIyMWEtY2ZlNDZmOWJjN2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIeHffDmfVEiS3PSfr/eB/Ecv8F7IfyNeS1I
EcpkEn3JUh3Zmxj10jzO9ALDINmaqNMBJQuR0p7feiQ315kSDRXeLVrKv8HB3nb1
2uq4k+rF0Yn08hGirr40mfB4XEIChyedKnGYjGF0+lsCDfEy2bUpkROfXtMZfP0e
AJgJYTaCHUk3Z+ZIH3z5jqj8PdpT1/ucht8JNPmQsJhhpXjpHJ8oa7GAbLyzBKK3
3bp0uCqLyw/FcsD83EUREJ36v9pMRDY6sCp8ERkR7XHmKnphSa8ymB15TYLTAFkp
vOHIOp8o3q7rNLlF2zGd5iHytj5SKjN/aKOgIOhwPqPpbZPZ/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOi/pw8PK70eb1yU4t0fz8QnMw2BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjAyOTFmN2EtNGQ3Ni0z
NzgzLTlhMzgtMmJkNjU1MDYyZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRuQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9uBZ8TiIRIkaGu+18RQ8BSXqkfDT/jB7UAEifQ2D8PErpXVaZlEUNm
WH4cGlbOPu2GEb2hx5xdEYkaAHhyjtzXh9MaDu2YPCUHJBb36+g0yQqvhSlVRAZM
UEBH77FB92nnGhSOMWoTs0GiK7TWgucoyXx8mXzL+I8CmiejVl3RPcxdEmeMgu7S
4WsBFatsaBhWZGIW0bIrpK/qBV1WRAq/batEPvt/iOEwqJpSsgYahVvm31LlYkuy
6Mt8IlVvZEjWY9d8TfBpdvmqVIdQPf28wAFaOZ4A2i7uzRBXCk0hsRHgewwPYmqL
HCWDYLo5EHo6swJu/Zse8IyZ6/MQ42o=
-----END CERTIFICATE-----
Generated at Thu May 8 23:18:15 2025 by rpki-client