Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b79a45d-1a5e-3db1-b966-c68ff0003778.roa
File: 9b79a45d-1a5e-3db1-b966-c68ff0003778.roa (raw, json)
Hash identifier: GEavOfiiZvG1Bky/OcPUzcGSFV09vBTstePA57c89gE=
Subject key identifier: AA:9E:15:C0:3E:90:B6:FD:4C:25:CB:E7:0F:A7:89:5C:D6:FC:1F:0B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285841CAC940E4E610C545C8EFA0A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b79a45d-1a5e-3db1-b966-c68ff0003778.roa
Signing time: Fri 05 May 2023 12:00:00 +0000
ROA not before: Fri 05 May 2023 12:00:00 +0000
ROA not after: Thu 07 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 34.0.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ca:c9:40:e4:e6:10:c5:45:c8:ef:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 5 12:00:00 2023 GMT
Not After : Aug 7 04:00:00 2025 GMT
Subject: CN=595b66cb-f5b7-43e3-a098-4683bc6e0a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:b1:90:f4:1c:ed:12:91:2c:b7:7d:2f:63:
7e:93:a5:20:58:8d:50:a6:b5:53:65:72:7b:27:86:
8a:04:4d:7a:af:5c:4d:ff:20:70:db:d3:93:34:84:
7d:73:93:d1:c2:ab:2b:b2:89:ef:27:ef:ea:b3:d6:
2b:06:62:da:f8:b4:15:48:2f:44:e0:45:22:70:eb:
b8:35:cb:b9:55:a0:db:8f:a9:99:d8:d6:9b:50:47:
1a:3a:4b:7c:84:cc:49:89:d0:88:24:86:81:01:70:
29:1f:ba:e1:b2:70:85:f6:21:32:3a:31:13:5e:6e:
c7:49:f6:2f:f3:8c:4a:c8:a2:f8:85:82:fe:6b:15:
18:af:82:cc:6c:9d:c6:90:b0:b8:ee:33:10:3b:88:
48:30:1b:b6:fb:a5:49:e2:94:00:18:ee:76:ef:36:
7c:b4:64:bc:3e:c6:24:4c:45:63:3b:53:51:c9:e3:
f0:07:9a:7d:2c:a0:73:3d:4a:46:f7:41:e2:2c:3f:
f3:8d:3e:e0:7b:d4:6d:2d:03:df:53:48:bb:64:d1:
33:42:eb:a1:cc:d0:a2:f7:1b:b6:d3:86:0f:28:da:
0a:99:d3:fb:7c:1a:2b:7e:53:61:de:54:96:1d:85:
84:a1:da:63:3b:d2:57:37:1e:c5:17:0d:bc:18:9c:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:15:C0:3E:90:B6:FD:4C:25:CB:E7:0F:A7:89:5C:D6:FC:1F:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b79a45d-1a5e-3db1-b966-c68ff0003778.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:5e:15:dd:af:3e:5a:7f:0f:42:89:10:74:94:16:30:6f:20:
0d:b6:56:10:81:ff:8c:64:dc:a7:05:3a:80:b6:e1:b5:a6:06:
0c:94:7e:ca:21:cb:ad:1b:21:01:bc:b4:f7:b5:97:39:c0:55:
1f:40:23:a5:d9:d9:76:51:fb:9a:65:ce:db:61:95:72:1f:3b:
92:ec:b0:a0:b0:11:b4:e7:ac:0d:43:0f:6b:a2:84:1c:21:0d:
53:eb:6a:da:3b:fa:a5:86:14:c7:b4:90:4e:69:bf:68:1d:0e:
f6:a4:5f:ff:49:86:33:94:1b:16:87:96:cf:84:7e:b1:a3:8f:
b8:64:8f:55:e2:7d:00:7a:b8:62:77:72:7a:34:d5:46:59:60:
6e:1d:9d:9c:3f:75:ec:97:0d:22:9c:86:bd:fb:2d:d4:b2:34:
53:15:9e:52:bc:60:cf:b4:0e:2d:30:67:6e:ed:82:60:e8:f2:
63:61:ca:70:9c:5b:b0:51:72:9a:3e:55:b2:a4:95:5d:8e:21:
68:f7:5c:6d:94:20:ec:02:99:45:36:41:ec:b5:cd:76:2c:3b:
e0:09:64:3d:c0:e6:a4:6c:58:84:c7:6c:15:26:04:d0:5b:46:
2e:18:54:1a:b4:01:4f:b0:7e:6c:b6:99:e3:d5:62:e9:56:cc:
cd:ee:9e:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHKyUDk5hDFRcjvoKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDUwNTEyMDAwMFoXDTI1MDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk
NTk1YjY2Y2ItZjViNy00M2UzLWEwOTgtNDY4M2JjNmUwYTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKCxkPQc7RKRLLd9L2N+k6UgWI1QprVTZXJ7
J4aKBE16r1xN/yBw29OTNIR9c5PRwqsrsonvJ+/qs9YrBmLa+LQVSC9E4EUicOu4
Ncu5VaDbj6mZ2NabUEcaOkt8hMxJidCIJIaBAXApH7rhsnCF9iEyOjETXm7HSfYv
84xKyKL4hYL+axUYr4LMbJ3GkLC47jMQO4hIMBu2+6VJ4pQAGO527zZ8tGS8PsYk
TEVjO1NRyePwB5p9LKBzPUpG90HiLD/zjT7ge9RtLQPfU0i7ZNEzQuuhzNCi9xu2
04YPKNoKmdP7fBorflNh3lSWHYWEodpjO9JXNx7FFw28GJyApwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqeFcA+kLb9TCXL5w+niVzW/B8LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWI3OWE0NWQtMWE1ZS0z
ZGIxLWI5NjYtYzY4ZmYwMDAzNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBeFd2vPlp/D0KJEHSUFjBvIA22VhCB/4xk3KcFOoC24bWmBgyUfsoh
y60bIQG8tPe1lznAVR9AI6XZ2XZR+5plztthlXIfO5LssKCwEbTnrA1DD2uihBwh
DVPrato7+qWGFMe0kE5pv2gdDvakX/9JhjOUGxaHls+EfrGjj7hkj1XifQB6uGJ3
cno01UZZYG4dnZw/deyXDSKchr37LdSyNFMVnlK8YM+0Di0wZ27tgmDo8mNhynCc
W7BRcpo+VbKklV2OIWj3XG2UIOwCmUU2Qey1zXYsO+AJZD3A5qRsWITHbBUmBNBb
Ri4YVBq0AU+wfmy2mePVYulWzM3unmU=
-----END CERTIFICATE-----
Generated at Sat May 10 14:46:02 2025 by rpki-client