Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a05d26ed-3c7e-3346-8d91-8ea446b9c880.roa
File: a05d26ed-3c7e-3346-8d91-8ea446b9c880.roa (raw, json)
Hash identifier: ChB6DwSOHKC8N5oBQT3I6KUySYZ3dQ8bW1DFIlYJ0eA=
Subject key identifier: E0:DE:DB:1B:CC:F2:4D:73:96:04:F6:95:35:D4:B8:76:AC:C6:69:2E
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F4328584902EC1867C74895E133855000
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a05d26ed-3c7e-3346-8d91-8ea446b9c880.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 63023
IP address blocks: 68.233.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 14:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:18:67:c7:48:95:e1:33:85:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=a556c407-dc5b-4151-bb9f-3f863584d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:cf:67:66:16:28:f7:19:e1:09:a5:29:d1:
fb:e2:72:48:c2:a0:3d:e4:b1:43:65:c2:55:fd:1c:
d1:c0:a3:77:8b:05:96:10:83:9c:b4:c0:0e:36:91:
f3:04:b4:c9:19:c4:d2:00:a7:ff:df:c3:c0:2c:b3:
f3:c2:24:5d:19:92:e5:19:f0:67:b0:0e:ac:15:9c:
80:5a:72:f5:2b:d4:9b:4a:6b:0f:0c:e9:44:e0:ce:
a5:90:c9:6c:b2:d1:3c:03:7e:6f:01:4b:e2:41:76:
b1:8d:45:e2:80:a0:d9:df:ef:77:e7:02:4d:b8:6d:
c3:09:bf:12:fd:0f:66:bf:48:b3:83:0b:b5:fe:3a:
92:ca:4b:32:d5:44:1b:38:9a:4f:5b:6e:ec:55:ac:
6b:88:ba:46:dc:f8:c5:4f:84:fe:ac:41:f3:25:c7:
75:ff:a6:d6:76:3c:5a:ea:5a:bc:10:1a:8a:5b:b2:
d2:a1:09:76:05:e8:18:e0:bf:64:1e:4a:1a:53:ec:
65:32:57:fc:b7:f0:3b:bb:bf:42:f3:52:db:c8:61:
ec:b8:fc:6f:a3:2c:1a:24:c1:31:f9:90:f3:d4:c2:
8a:35:ab:7e:93:6c:7b:65:fb:1f:ba:00:ad:c4:ce:
5f:e6:c3:75:eb:bf:0f:2e:43:f3:7f:06:7c:fd:33:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:DB:1B:CC:F2:4D:73:96:04:F6:95:35:D4:B8:76:AC:C6:69:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a05d26ed-3c7e-3346-8d91-8ea446b9c880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:42:c2:8f:01:4c:c2:e1:0c:e0:9d:f6:19:82:ce:07:84:a0:
95:b7:8a:f8:be:10:bf:1b:f8:dd:21:1f:a6:af:1a:64:14:3f:
fa:75:7d:9f:5e:b3:e5:43:e3:2a:3b:57:9a:bc:c7:14:60:bf:
5c:54:4c:64:8a:c3:8c:98:39:2d:64:37:09:56:b3:25:7b:da:
5e:93:55:f2:1c:79:07:0a:c5:f2:52:85:fc:76:98:84:c4:cc:
b3:9b:93:38:85:b0:e4:e4:81:84:7b:16:11:9c:e3:92:ad:c1:
15:aa:36:aa:fe:3c:4d:c3:8f:77:e9:d8:a7:18:b0:33:47:d6:
84:89:fe:6c:31:a2:54:74:ed:19:6e:b9:e0:31:8f:cf:27:2a:
6f:eb:41:d7:55:ec:b0:4a:90:c6:18:a4:c2:59:08:28:a3:c8:
4e:85:d3:9e:c9:25:a4:7f:f7:2f:30:0d:42:a7:79:5d:ee:8f:
81:d0:00:93:b4:a9:5e:92:a2:e0:c3:26:5c:2e:66:01:99:04:
6e:4b:d9:fe:e8:58:ce:2c:a8:d5:80:63:09:df:8f:6c:40:ea:
f5:39:51:93:b3:4f:b2:ee:c2:ec:a1:1a:dd:24:62:bc:2e:6d:
f4:fc:42:a6:25:0e:75:ea:0f:cf:2f:86:31:4b:46:2f:1c:e5:
61:32:41:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Bhnx0iV4TOFUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4
N2ZmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
YTU1NmM0MDctZGM1Yi00MTUxLWJiOWYtM2Y4NjM1ODRkNTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0zPZ2YWKPcZ4QmlKdH74nJIwqA95LFDZcJV
/RzRwKN3iwWWEIOctMAONpHzBLTJGcTSAKf/38PALLPzwiRdGZLlGfBnsA6sFZyA
WnL1K9SbSmsPDOlE4M6lkMlsstE8A35vAUviQXaxjUXigKDZ3+935wJNuG3DCb8S
/Q9mv0izgwu1/jqSyksy1UQbOJpPW27sVaxriLpG3PjFT4T+rEHzJcd1/6bWdjxa
6lq8EBqKW7LSoQl2BegY4L9kHkoaU+xlMlf8t/A7u79C81LbyGHsuPxvoywaJMEx
+ZDz1MKKNat+k2x7ZfsfugCtxM5f5sN1678PLkPzfwZ8/TPmDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODe2xvM8k1zlgT2lTXUuHasxmkuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1
YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYTA1ZDI2ZWQtM2M3ZS0z
MzQ2LThkOTEtOGVhNDQ2YjljODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5
NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl
ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi
OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROknMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9Cwo8BTMLhDOCd9hmCzgeEoJW3ivi+EL8b+N0hH6avGmQUP/p1fZ9e
s+VD4yo7V5q8xxRgv1xUTGSKw4yYOS1kNwlWsyV72l6TVfIceQcKxfJShfx2mITE
zLObkziFsOTkgYR7FhGc45KtwRWqNqr+PE3Dj3fp2KcYsDNH1oSJ/mwxolR07Rlu
ueAxj88nKm/rQddV7LBKkMYYpMJZCCijyE6F057JJaR/9y8wDUKneV3uj4HQAJO0
qV6SouDDJlwuZgGZBG5L2f7oWM4sqNWAYwnfj2xA6vU5UZOzT7LuwuyhGt0kYrwu
bfT8QqYlDnXqD88vhjFLRi8c5WEyQYk=
-----END CERTIFICATE-----
Generated at Sat May 10 22:29:10 2025 by rpki-client