Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7eca91e-4278-3371-b2ac-09cb7aaf0395.roa
File: e7eca91e-4278-3371-b2ac-09cb7aaf0395.roa (raw, json)
Hash identifier: sNDMp8Pf2/P9ZzM1/EcKZbVPGmGnB4e9sSHSmVMGzwU=
Subject key identifier: 16:18:1D:FA:7B:38:F5:CD:3F:0F:F9:63:64:A4:C7:E4:3B:37:63:05
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848EF096515A5688C6FA0C6B8C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7eca91e-4278-3371-b2ac-09cb7aaf0395.roa
Signing time: Wed 19 Feb 2025 11:04:01 +0000
ROA not before: Wed 19 Feb 2025 11:04:01 +0000
ROA not after: Tue 20 May 2025 10:04:01 +0000
asID: 329007
IP address blocks: 172.111.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 11:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:09:65:15:a5:68:8c:6f:a0:c6:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 19 11:04:01 2025 GMT
Not After : May 20 10:04:01 2025 GMT
Subject: CN=0e522e9d-a2e2-4900-9494-ec84809e1d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:9c:92:6d:42:cb:be:c9:7a:dc:f6:60:ca:
6e:3b:e1:82:1e:b0:21:2a:36:9b:7c:c7:b5:46:dd:
10:63:fb:08:63:5a:5d:64:c4:41:94:2c:31:79:b4:
28:64:e9:52:f1:b6:d0:c0:61:e8:d5:08:ff:64:ab:
f9:9a:90:ed:35:92:3f:d3:5a:6a:1b:8c:df:38:e1:
06:cb:fb:42:d7:c5:20:25:1f:9e:4e:91:e6:d0:89:
87:fd:aa:73:2e:12:a4:22:52:ed:55:c6:19:d4:07:
79:5e:d7:68:d8:d7:7d:71:66:27:51:f9:b1:be:32:
67:19:b7:8a:ce:7a:43:80:b5:00:59:12:fe:7a:03:
97:97:26:df:5a:c8:c4:76:d9:8f:72:46:d3:3a:6c:
64:52:f4:43:18:30:17:a0:50:2f:50:49:31:63:a6:
a4:fa:ad:32:19:c9:f3:c5:5a:d5:d2:d2:f9:86:8d:
ca:ca:89:a4:dd:60:96:87:82:84:d5:21:33:11:d9:
4c:f7:4b:a9:d9:8d:45:c9:10:0a:d3:21:65:38:0b:
f4:10:79:1d:e1:fe:fd:44:1b:5a:99:35:ad:f5:01:
93:29:5b:ca:7b:0c:d3:1c:b1:ce:9e:a1:88:4f:c3:
6a:b3:0d:24:66:dd:3d:9e:04:b9:35:f1:e0:4a:72:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:18:1D:FA:7B:38:F5:CD:3F:0F:F9:63:64:A4:C7:E4:3B:37:63:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7eca91e-4278-3371-b2ac-09cb7aaf0395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:8e:b9:25:4d:a1:de:4d:f0:cb:20:34:c6:b3:cb:e1:b7:b8:
5e:47:d5:e5:79:e1:2c:90:54:d7:29:0f:ea:46:b5:8c:e2:d3:
60:49:b2:ec:0a:dd:d1:f5:34:64:2a:b8:96:81:70:d6:59:63:
cd:2d:6b:f5:69:83:c9:60:86:37:0f:34:e2:cd:bf:de:7d:e7:
76:9a:b3:76:34:68:99:cf:d8:cf:91:c0:fe:b8:b1:94:76:6a:
e0:d5:ba:f9:b2:0a:c0:ea:56:90:c8:94:99:71:b2:1d:72:02:
88:17:2c:64:ef:ee:07:7e:c8:d3:c6:5d:3a:fc:58:6e:16:8d:
a9:a7:9a:de:45:7f:a1:23:f4:b8:1f:d4:db:1b:56:a4:21:17:
3d:23:9a:e1:ac:5a:d6:12:7c:e6:81:f2:8d:52:7f:2e:82:2f:
8d:f3:43:a7:63:bb:fe:69:37:fc:aa:c5:d0:c8:c6:78:53:5f:
ba:5c:99:7e:65:22:63:5d:58:b5:5f:d8:99:5f:89:4d:a5:d2:
f9:56:cd:75:76:ad:b6:27:00:1c:2e:00:68:a3:22:46:2a:71:
04:16:0c:70:20:9b:6e:05:e9:05:f4:9a:0b:45:94:ef:5c:8c:
e2:51:b1:66:c7:62:b0:7a:14:26:b6:90:08:55:10:cf:25:fe:
09:98:1f:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvCWUVpWiMb6DGuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIxOTExMDQwMVoXDTI1MDUyMDEwMDQwMVowLzEtMCsGA1UEAxMk
MGU1MjJlOWQtYTJlMi00OTAwLTk0OTQtZWM4NDgwOWUxZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhWckm1Cy77Jetz2YMpuO+GCHrAhKjabfMe1
Rt0QY/sIY1pdZMRBlCwxebQoZOlS8bbQwGHo1Qj/ZKv5mpDtNZI/01pqG4zfOOEG
y/tC18UgJR+eTpHm0ImH/apzLhKkIlLtVcYZ1Ad5Xtdo2Nd9cWYnUfmxvjJnGbeK
znpDgLUAWRL+egOXlybfWsjEdtmPckbTOmxkUvRDGDAXoFAvUEkxY6ak+q0yGcnz
xVrV0tL5ho3Kyomk3WCWh4KE1SEzEdlM90up2Y1FyRAK0yFlOAv0EHkd4f79RBta
mTWt9QGTKVvKewzTHLHOnqGIT8Nqsw0kZt09ngS5NfHgSnI+KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYYHfp7OPXNPw/5Y2Skx+Q7N2MFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTdlY2E5MWUtNDI3OC0z
MzcxLWIyYWMtMDljYjdhYWYwMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2OuSVNod5N8MsgNMazy+G3uF5H1eV54SyQVNcpD+pGtYzi02BJsuwK
3dH1NGQquJaBcNZZY80ta/Vpg8lghjcPNOLNv95953aas3Y0aJnP2M+RwP64sZR2
auDVuvmyCsDqVpDIlJlxsh1yAogXLGTv7gd+yNPGXTr8WG4Wjamnmt5Ff6Ej9Lgf
1NsbVqQhFz0jmuGsWtYSfOaB8o1Sfy6CL43zQ6dju/5pN/yqxdDIxnhTX7pcmX5l
ImNdWLVf2JlfiU2l0vlWzXV2rbYnABwuAGijIkYqcQQWDHAgm24F6QX0mgtFlO9c
jOJRsWbHYrB6FCa2kAhVEM8l/gmYH34=
-----END CERTIFICATE-----
Generated at Mon May 12 01:32:15 2025 by rpki-client