Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc8eb612-953e-3c29-901a-fe7cef30fdc8.roa
File: dc8eb612-953e-3c29-901a-fe7cef30fdc8.roa (raw, json)
Hash identifier: dmve9dooHkOafhKjuLJEGdccNNYthmYtyYrh4lvINfc=
Subject key identifier: B2:03:D4:87:4A:EE:66:08:52:FA:11:31:67:C7:5C:C0:EC:60:7D:31
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584992A346F3BA6B182BE4969880
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc8eb612-953e-3c29-901a-fe7cef30fdc8.roa
Signing time: Sat 19 Apr 2025 01:30:50 +0000
ROA not before: Sat 19 Apr 2025 01:30:50 +0000
ROA not after: Fri 18 Jul 2025 01:30:50 +0000
asID: 23470
IP address blocks: 23.150.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 04:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:92:a3:46:f3:ba:6b:18:2b:e4:96:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Apr 19 01:30:50 2025 GMT
Not After : Jul 18 01:30:50 2025 GMT
Subject: CN=67d6d412-834a-476a-af33-7d00e89e64cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:29:65:95:ff:bc:de:92:87:ee:71:82:ab:
63:db:b5:91:45:a2:7f:24:f5:c4:71:7d:ad:43:12:
a5:60:69:9f:e1:3a:4c:60:e8:dd:e0:c1:c0:cc:a9:
28:6b:00:a1:0c:6d:3f:a8:39:e1:c0:35:bb:3e:a5:
53:9f:a9:84:c7:de:e2:b6:b6:3a:05:4d:66:f0:5a:
ed:f3:8c:46:d5:ed:0a:1c:0f:a8:1f:3f:9d:4f:1a:
aa:d8:4d:38:32:75:9b:ae:1b:fa:99:90:ac:4d:f7:
5c:64:68:ad:ac:0d:0b:83:3e:38:96:58:b3:b6:69:
5d:30:36:7c:49:26:6f:5e:af:3e:80:cf:8d:64:b6:
30:fd:76:84:43:59:db:15:c3:ff:c5:c0:bb:b5:ef:
a4:4a:0f:d5:ce:c3:b5:4f:7a:b5:10:9b:01:4a:15:
a8:98:1c:6d:ce:3b:3d:e4:ff:6a:ca:d7:97:21:a5:
6c:1f:4e:33:4d:19:79:5f:87:13:56:52:cb:ca:30:
c2:80:eb:96:8c:7e:0a:fd:ca:ff:88:5e:0d:c7:73:
3f:86:ac:da:3b:cc:41:f2:bb:52:70:4e:58:0f:30:
f5:a3:07:75:a8:ba:37:c7:eb:b1:03:5b:88:58:cb:
81:e1:f4:5d:bf:fa:07:52:00:11:f5:2a:42:6e:5a:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:D4:87:4A:EE:66:08:52:FA:11:31:67:C7:5C:C0:EC:60:7D:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc8eb612-953e-3c29-901a-fe7cef30fdc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:1a:48:e0:b3:74:43:82:13:6a:d2:9d:92:43:62:2b:d2:9b:
3c:61:28:d5:91:0f:e6:52:52:cb:35:83:50:0b:1c:93:23:cd:
70:40:22:0a:b3:97:5f:7f:77:d1:5e:a4:f0:79:c9:4f:21:c0:
9f:06:b3:18:aa:54:2a:fd:f8:33:bb:e7:42:0d:d5:3a:76:bc:
27:e5:42:e4:4d:b3:bb:d2:28:54:4d:ad:11:c8:dd:d0:62:74:
ef:1e:73:ff:51:bc:71:62:79:d6:9d:bb:62:ff:13:34:f9:a8:
26:ca:11:c4:73:31:f8:c9:32:1d:89:ed:4f:8f:66:81:c6:3e:
80:c6:3b:6b:6e:19:95:be:1e:0c:46:1b:c4:62:d1:4c:21:21:
35:ca:87:cd:76:99:ba:38:75:ec:cd:99:de:05:05:9f:bb:9b:
53:6f:e8:2f:4a:4c:f1:53:79:cc:58:96:5b:08:a9:6b:a3:a6:
15:1d:f4:ad:6f:0c:b0:2d:40:3d:35:19:1d:f6:0a:a7:c0:8b:
62:32:5a:53:77:ee:81:22:2a:07:53:56:fc:14:8c:20:19:15:
72:82:3f:20:d7:29:97:0a:9a:fe:d3:5e:00:86:ed:5e:12:da:
45:bb:b8:62:f0:d7:70:d3:e1:d0:01:83:a0:40:62:bf:d6:f9:
da:72:a8:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSo0bzumsYK+SWmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI1MDQxOTAxMzA1MFoXDTI1MDcxODAxMzA1MFowLzEtMCsGA1UEAxMk
NjdkNmQ0MTItODM0YS00NzZhLWFmMzMtN2QwMGU4OWU2NGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TopZZX/vN6Sh+5xgqtj27WRRaJ/JPXEcX2t
QxKlYGmf4TpMYOjd4MHAzKkoawChDG0/qDnhwDW7PqVTn6mEx97itrY6BU1m8Frt
84xG1e0KHA+oHz+dTxqq2E04MnWbrhv6mZCsTfdcZGitrA0Lgz44lliztmldMDZ8
SSZvXq8+gM+NZLYw/XaEQ1nbFcP/xcC7te+kSg/VzsO1T3q1EJsBShWomBxtzjs9
5P9qyteXIaVsH04zTRl5X4cTVlLLyjDCgOuWjH4K/cr/iF4Nx3M/hqzaO8xB8rtS
cE5YDzD1owd1qLo3x+uxA1uIWMuB4fRdv/oHUgAR9SpCblrQjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLID1IdK7mYIUvoRMWfHXMDsYH0xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZGM4ZWI2MTItOTUzZS0z
YzI5LTkwMWEtZmU3Y2VmMzBmZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUaSOCzdEOCE2rSnZJDYivSmzxhKNWRD+ZSUss1g1ALHJMjzXBAIgqz
l19/d9FepPB5yU8hwJ8GsxiqVCr9+DO750IN1Tp2vCflQuRNs7vSKFRNrRHI3dBi
dO8ec/9RvHFiedadu2L/EzT5qCbKEcRzMfjJMh2J7U+PZoHGPoDGO2tuGZW+HgxG
G8Ri0UwhITXKh812mbo4dezNmd4FBZ+7m1Nv6C9KTPFTecxYllsIqWujphUd9K1v
DLAtQD01GR32CqfAi2IyWlN37oEiKgdTVvwUjCAZFXKCPyDXKZcKmv7TXgCG7V4S
2kW7uGLw13DT4dABg6BAYr/W+dpyqGc=
-----END CERTIFICATE-----
Generated at Mon May 12 09:18:49 2025 by rpki-client