Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6d676a9a-27b9-362f-98eb-9c0780dafd15.roa
File: 6d676a9a-27b9-362f-98eb-9c0780dafd15.roa (raw, json)
Hash identifier: 1aqaKeUO+9S1wpZ4c1zb45quvmgRrx553Pp721ggsvQ=
Subject key identifier: B6:2F:88:C9:13:65:02:FA:68:5A:AB:A8:C9:4F:60:C1:9E:B6:A6:2F
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F43285848F8E7CA5BA45FB6A1B38DAA00
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6d676a9a-27b9-362f-98eb-9c0780dafd15.roa
Signing time: Sat 22 Feb 2025 23:54:23 +0000
ROA not before: Sat 22 Feb 2025 23:54:23 +0000
ROA not after: Fri 23 May 2025 22:54:23 +0000
asID: 26042
IP address blocks: 64.20.208.0/24 maxlen: 24
66.248.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 05:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f8:e7:ca:5b:a4:5f:b6:a1:b3:8d:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Feb 22 23:54:23 2025 GMT
Not After : May 23 22:54:23 2025 GMT
Subject: CN=94f39726-3050-454d-b8cd-06b8258f402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:df:12:2b:22:b6:c6:c9:33:d7:53:56:77:
f4:3c:28:9c:57:b7:92:b0:a2:ce:f4:c1:33:65:6a:
31:fd:3f:54:ab:b0:06:97:3f:45:d8:d0:1d:ca:59:
28:01:b1:8d:70:98:fb:36:bc:98:e4:ea:d0:c7:a9:
6d:7a:1e:ac:70:4f:00:80:85:fa:ff:5d:b2:7f:1b:
a2:00:75:ef:a7:b6:03:34:3c:2a:f2:33:59:9c:7b:
bf:90:03:20:19:ab:43:ca:47:66:26:03:c2:78:f0:
6c:cd:49:7a:19:70:8d:42:9a:b5:ba:a3:88:d6:d6:
d1:2e:00:8d:f4:a1:5b:33:4e:15:e4:82:c7:ad:c7:
be:5f:a8:eb:1c:e0:ec:99:34:55:43:bd:d5:fe:29:
17:ab:c0:25:bf:3f:a7:24:10:ac:12:74:dc:f7:16:
56:94:b5:cd:77:8f:29:7b:b4:85:a0:c1:c0:be:51:
52:28:fa:13:16:fc:d5:e4:4c:b4:a7:a1:da:48:93:
6c:a2:c1:f9:b5:2f:25:aa:f0:64:b2:5a:13:04:fc:
e8:2d:2d:e1:e8:c1:8c:e7:6d:87:80:1e:97:f4:61:
91:86:0d:29:a5:cc:21:fe:93:e8:bc:05:c1:10:1d:
f3:4f:35:99:2f:d5:a8:01:84:81:25:a0:e1:1d:c4:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2F:88:C9:13:65:02:FA:68:5A:AB:A8:C9:4F:60:C1:9E:B6:A6:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6d676a9a-27b9-362f-98eb-9c0780dafd15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.208.0/24
66.248.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:2d:54:8c:e7:9b:50:ce:d6:e4:4a:61:b9:6e:ac:d1:25:b5:
c5:ff:01:23:6d:56:d7:5e:18:e4:0b:da:d1:22:6e:39:ff:a0:
2b:87:59:1d:3e:80:3a:d9:c8:44:81:ba:97:f4:6f:46:aa:64:
4f:4e:08:97:17:54:3e:7a:51:44:47:2d:f5:38:d6:5b:26:3a:
89:b8:d7:f4:05:9e:1e:5d:c4:be:af:23:24:10:0f:5b:94:ea:
bb:de:81:f7:64:ca:48:d2:e8:10:04:7d:dc:44:bb:79:ab:33:
9b:9a:2d:1d:cf:fc:c7:8c:fe:d1:a1:26:76:7b:a1:e9:a1:e5:
a1:9c:d5:fd:c9:64:8d:bf:9b:bf:de:56:eb:15:d4:a5:57:d5:
1d:3c:a4:a9:4e:58:d5:df:8a:28:2a:bc:c6:b3:0a:b7:7e:3d:
1b:8b:9f:ab:28:8c:ce:0f:b3:e5:7e:b7:75:d1:3c:5b:1d:da:
9f:14:34:c0:a7:37:a2:86:5c:40:fd:05:cf:ac:8e:69:5f:48:
d9:be:11:bd:84:b3:e5:49:19:07:97:77:da:ed:97:ed:7e:ea:
e6:ea:58:79:b5:a3:0d:b7:79:0e:a9:fb:03:41:b5:92:7a:a1:
b2:c8:db:c9:4c:e2:57:ba:42:7a:45:c6:59:1c:08:44:45:36:
6e:5f:b9:ff
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj458pbpF+2obONqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk
M2RmMB4XDTI1MDIyMjIzNTQyM1oXDTI1MDUyMzIyNTQyM1owLzEtMCsGA1UEAxMk
OTRmMzk3MjYtMzA1MC00NTRkLWI4Y2QtMDZiODI1OGY0MDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY3fEisitsbJM9dTVnf0PCicV7eSsKLO9MEz
ZWox/T9Uq7AGlz9F2NAdylkoAbGNcJj7NryY5OrQx6lteh6scE8AgIX6/12yfxui
AHXvp7YDNDwq8jNZnHu/kAMgGatDykdmJgPCePBszUl6GXCNQpq1uqOI1tbRLgCN
9KFbM04V5ILHrce+X6jrHODsmTRVQ73V/ikXq8Alvz+nJBCsEnTc9xZWlLXNd48p
e7SFoMHAvlFSKPoTFvzV5Ey0p6HaSJNsosH5tS8lqvBksloTBPzoLS3h6MGM522H
gB6X9GGRhg0ppcwh/pPovAXBEB3zTzWZL9WoAYSBJaDhHcT5+QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLYviMkTZQL6aFqrqMlPYMGetqYvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm
YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvNmQ2NzZhOWEtMjdiOS0z
NjJmLTk4ZWItOWMwNzgwZGFmZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5
MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1
ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx
MzBjNWQzZGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBTQAwQA
QvjwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHYtVIznm1DO1uRKYblurNEltcX/ASNtVtdeGOQL2tEibjn/
oCuHWR0+gDrZyESBupf0b0aqZE9OCJcXVD56UURHLfU41lsmOom41/QFnh5dxL6v
IyQQD1uU6rvegfdkykjS6BAEfdxEu3mrM5uaLR3P/MeM/tGhJnZ7oemh5aGc1f3J
ZI2/m7/eVusV1KVX1R08pKlOWNXfiigqvMazCrd+PRuLn6sojM4Ps+V+t3XRPFsd
2p8UNMCnN6KGXED9Bc+sjmlfSNm+Eb2Es+VJGQeXd9rtl+1+6ubqWHm1ow23eQ6p
+wNBtZJ6obLI28lM4le6QnpFxlkcCERFNm5fuf8=
-----END CERTIFICATE-----
Generated at Sun May 11 21:17:32 2025 by rpki-client