Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20386469-8e5e-3ad1-a344-56bd260630ea.roa
File: 20386469-8e5e-3ad1-a344-56bd260630ea.roa (raw, json)
Hash identifier: hw+4cXfk4nqsW2e2FI4dG/fJbvBlFr+tA4MmZ3YgIqA=
Subject key identifier: D8:D3:9E:2C:18:CB:91:BC:F8:72:2E:46:A5:AF:60:71:C6:88:78:32
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858418BFA73F9A8219F2C5F0C2940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20386469-8e5e-3ad1-a344-56bd260630ea.roa
Signing time: Wed 12 Apr 2023 12:00:00 +0000
ROA not before: Wed 12 Apr 2023 12:00:00 +0000
ROA not after: Tue 15 Jul 2025 04:00:00 +0000
asID: 11344
IP address blocks: 34.126.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:8b:fa:73:f9:a8:21:9f:2c:5f:0c:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 12 12:00:00 2023 GMT
Not After : Jul 15 04:00:00 2025 GMT
Subject: CN=8f4f97f5-993c-4d37-b96b-c5a4bb276bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:af:ad:03:23:3e:4c:a0:a2:9b:a8:29:dd:
5e:ca:5c:4c:30:05:55:3a:4d:74:3e:a4:b4:c8:84:
a9:9f:57:9c:98:47:fc:79:49:d4:34:72:87:17:20:
b0:5c:35:7f:d3:df:e4:5b:27:56:b5:de:a2:80:d1:
0a:37:5f:79:cb:67:db:db:41:c1:28:59:c8:25:4a:
67:84:cb:3f:3e:38:36:c9:9d:55:85:0b:0b:58:2b:
8f:7a:47:db:35:9a:03:5a:26:94:7c:ee:a7:ad:cb:
aa:fb:f8:56:11:74:19:22:c8:5f:f6:f3:29:88:05:
c0:a1:76:14:d5:6c:1b:ee:e9:3e:3d:67:2e:29:e3:
35:2d:ea:ad:4c:51:05:b3:ab:df:a6:9d:5b:32:df:
f2:52:75:60:a7:5d:a5:54:86:f2:3a:a5:3f:b2:75:
d8:0b:c6:9f:21:6b:d0:99:ae:3a:98:7a:7b:6f:29:
43:c5:ff:16:de:5f:6e:df:cf:47:7f:31:93:22:39:
36:05:bb:6d:f3:b3:7f:8d:ea:4c:6d:e3:83:56:76:
59:1c:65:61:e8:bc:a5:8e:4c:c8:b2:89:0f:40:00:
8f:94:55:ea:fb:e3:aa:a1:4e:bc:61:6d:8b:e8:26:
0b:99:cb:df:ab:e4:cc:97:2d:92:df:25:6d:c0:d8:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:9E:2C:18:CB:91:BC:F8:72:2E:46:A5:AF:60:71:C6:88:78:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20386469-8e5e-3ad1-a344-56bd260630ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.126.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:87:1f:ed:98:90:cc:67:e0:09:0c:8b:cc:95:27:60:7e:eb:
03:54:d9:37:f7:e6:9f:1a:1c:c5:ff:26:06:4b:14:80:b0:bc:
fd:9f:aa:dd:65:20:2b:ae:4e:7c:bf:57:dd:2c:6b:72:3c:b2:
f0:3f:b2:2a:3f:a3:e3:02:64:c9:ed:aa:92:49:1d:56:e1:8a:
4f:23:30:56:44:3f:9e:bc:e5:a0:e7:e8:f4:9f:7d:93:74:7f:
96:58:21:04:18:09:f6:b7:58:cf:45:84:72:2d:c9:a0:91:96:
bf:2d:7c:37:1d:4b:10:33:84:40:ef:09:88:a2:29:c1:84:24:
2b:1a:c1:8f:d6:04:69:f3:a9:3e:4b:51:87:59:55:e3:8d:2c:
fe:91:80:61:da:3b:62:31:81:ee:4d:48:f7:4e:fb:e5:39:04:
16:4c:d1:ff:f7:34:c0:dc:b5:c3:00:24:d6:fa:73:81:e6:e1:
2c:0f:b1:01:e5:bf:cb:e4:0e:63:26:bd:5e:51:3d:8e:5d:25:
b2:fe:9f:57:d5:fe:6b:f8:34:93:a5:c8:ff:29:ab:30:8d:c4:
4b:62:4f:8d:30:07:7b:e9:5e:d0:2e:77:cf:12:d5:b3:d0:42:
8b:cc:bd:16:b9:34:ad:c7:f8:c6:0c:f6:68:6d:33:21:a2:e2:
f0:65:40:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGL+nP5qCGfLF8MKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDQxMjEyMDAwMFoXDTI1MDcxNTA0MDAwMFowLzEtMCsGA1UEAxMk
OGY0Zjk3ZjUtOTkzYy00ZDM3LWI5NmItYzVhNGJiMjc2YmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpivrQMjPkygopuoKd1eylxMMAVVOk10PqS0
yISpn1ecmEf8eUnUNHKHFyCwXDV/09/kWydWtd6igNEKN195y2fb20HBKFnIJUpn
hMs/Pjg2yZ1VhQsLWCuPekfbNZoDWiaUfO6nrcuq+/hWEXQZIshf9vMpiAXAoXYU
1Wwb7uk+PWcuKeM1LeqtTFEFs6vfpp1bMt/yUnVgp12lVIbyOqU/snXYC8afIWvQ
ma46mHp7bylDxf8W3l9u389HfzGTIjk2Bbtt87N/jepMbeODVnZZHGVh6LyljkzI
sokPQACPlFXq++OqoU68YW2L6CYLmcvfq+TMly2S3yVtwNhadQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjTniwYy5G8+HIuRqWvYHHGiHgyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjAzODY0NjktOGU1ZS0z
YWQxLWEzNDQtNTZiZDI2MDYzMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWHH+2YkMxn4AkMi8yVJ2B+6wNU2Tf35p8aHMX/JgZLFICwvP2fqt1l
ICuuTny/V90sa3I8svA/sio/o+MCZMntqpJJHVbhik8jMFZEP5685aDn6PSffZN0
f5ZYIQQYCfa3WM9FhHItyaCRlr8tfDcdSxAzhEDvCYiiKcGEJCsawY/WBGnzqT5L
UYdZVeONLP6RgGHaO2Ixge5NSPdO++U5BBZM0f/3NMDctcMAJNb6c4Hm4SwPsQHl
v8vkDmMmvV5RPY5dJbL+n1fV/mv4NJOlyP8pqzCNxEtiT40wB3vpXtAud88S1bPQ
QovMvRa5NK3H+MYM9mhtMyGi4vBlQK4=
-----END CERTIFICATE-----
Generated at Sat May 10 12:52:02 2025 by rpki-client