Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/0d760629-9e67-3aea-8797-30abb722383d.roa
File: 0d760629-9e67-3aea-8797-30abb722383d.roa (raw, json)
Hash identifier: IcMDzkiZxCf6p4k0UGUFM8tzIBYasvtDq4utWz+bbvU=
Subject key identifier: 4E:D8:3A:DD:7E:F2:44:51:52:9C:2D:3D:CD:DD:E7:31:8B:21:B2:5F
Certificate issuer: /CN=d622ae28-b14e-4021-900a-c9182c5b5a2e
Certificate serial: 010D0C9F43285848EEFC65193945F9B8C3732B00
Authority key identifier: 8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/0d760629-9e67-3aea-8797-30abb722383d.roa
Signing time: Wed 19 Feb 2025 10:37:49 +0000
ROA not before: Wed 19 Feb 2025 10:37:49 +0000
ROA not after: Tue 20 May 2025 09:37:49 +0000
asID: 5065
IP address blocks: 23.133.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 10:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ee:fc:65:19:39:45:f9:b8:c3:73:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d622ae28-b14e-4021-900a-c9182c5b5a2e
Validity
Not Before: Feb 19 10:37:49 2025 GMT
Not After : May 20 09:37:49 2025 GMT
Subject: CN=b9ee13d1-b39e-457e-9bdb-8c5a1be4ed4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:9a:d5:04:38:07:8d:85:ca:78:80:5e:c6:
ac:7e:11:7e:10:f0:a4:6c:ad:f5:05:bb:ff:6f:b9:
12:27:a6:d3:11:49:8f:96:e6:db:1c:85:d9:57:e4:
20:a5:da:ca:ab:c8:d5:8b:de:30:87:07:8c:ee:b7:
45:c7:2b:1c:74:75:5c:e7:d8:ce:50:3d:04:ac:81:
e9:2e:cf:5d:2a:9c:c2:8b:ea:b7:53:c0:b0:8f:28:
8d:32:6d:11:3b:0c:0d:69:74:10:4e:4b:3d:57:58:
1f:b2:3d:ae:29:7a:b9:f4:da:73:0d:19:c6:10:42:
27:db:05:d4:d7:89:5d:a4:93:b5:f5:ed:ec:93:78:
59:40:83:33:b8:d7:64:78:b7:40:c7:43:99:77:bf:
4b:a1:72:9a:7f:c7:fc:ae:92:67:0d:3d:55:de:ff:
bf:2e:4f:23:c3:e0:df:ce:0d:b9:f6:4a:3e:a2:4c:
66:86:16:37:e3:70:7a:83:54:c0:c9:64:a0:d4:e8:
30:dc:2a:7a:12:6e:09:7c:7c:f1:17:89:15:2a:ca:
70:42:e6:e2:5d:be:6d:0e:d2:bc:61:93:22:8c:da:
25:b9:d7:af:0d:c1:06:24:27:44:ad:5e:4b:3c:25:
de:79:2a:01:58:16:fa:8c:46:72:48:8f:9a:12:23:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D8:3A:DD:7E:F2:44:51:52:9C:2D:3D:CD:DD:E7:31:8B:21:B2:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/0d760629-9e67-3aea-8797-30abb722383d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.crl
X509v3 Authority Key Identifier:
keyid:8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:70:8f:ea:36:ad:e4:0e:e5:36:f4:d7:08:49:a7:f0:ef:52:
c2:d2:c6:52:71:37:d9:bb:69:d6:ee:ab:06:c5:36:1d:a3:21:
6d:a2:bb:f2:6a:79:d8:55:f0:bb:1b:f8:35:10:7e:71:4b:de:
78:d7:ed:51:ee:8a:e3:32:c9:2c:d6:dd:51:9f:33:96:91:85:
45:4b:13:9b:85:ec:84:95:69:1e:f4:8b:ac:ca:2a:15:aa:23:
6a:55:a1:b5:7b:33:43:53:1a:f6:44:06:c7:13:c2:59:c9:fb:
fb:16:9d:ac:59:a6:6e:2f:b8:ad:83:72:74:68:9f:dd:f6:5f:
5e:23:f6:05:db:0d:65:b8:15:aa:97:d8:34:39:b5:28:0d:4d:
c2:0c:9c:c7:74:56:3c:4b:cc:c0:cd:8a:6d:73:10:2e:d6:f5:
57:5d:fe:94:16:e4:bc:0a:a0:c8:ba:02:b8:58:54:b8:6e:b6:
58:37:65:96:82:39:c9:e4:07:a7:0c:0d:3e:91:14:e7:5b:c7:
ea:44:ec:4c:20:f5:8d:f4:10:04:35:3b:2f:ed:8f:76:b7:61:
f0:31:23:0d:28:bf:c0:3d:21:33:1c:1d:0e:c7:65:79:56:44:
13:54:ff:ab:25:da:11:b7:e0:e6:d6:f1:8f:8a:60:88:53:c8:
6c:84:c0:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEju/GUZOUX5uMNzKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDYyMmFlMjgtYjE0ZS00MDIxLTkwMGEtYzkxODJjNWI1
YTJlMB4XDTI1MDIxOTEwMzc0OVoXDTI1MDUyMDA5Mzc0OVowLzEtMCsGA1UEAxMk
YjllZTEzZDEtYjM5ZS00NTdlLTliZGItOGM1YTFiZTRlZDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSGa1QQ4B42FyniAXsasfhF+EPCkbK31Bbv/
b7kSJ6bTEUmPlubbHIXZV+QgpdrKq8jVi94whweM7rdFxyscdHVc59jOUD0ErIHp
Ls9dKpzCi+q3U8CwjyiNMm0ROwwNaXQQTks9V1gfsj2uKXq59NpzDRnGEEIn2wXU
14ldpJO19e3sk3hZQIMzuNdkeLdAx0OZd79LoXKaf8f8rpJnDT1V3v+/Lk8jw+Df
zg259ko+okxmhhY343B6g1TAyWSg1Ogw3Cp6Em4JfHzxF4kVKspwQubiXb5tDtK8
YZMijNoludevDcEGJCdErV5LPCXeeSoBWBb6jEZySI+aEiMJewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7YOt1+8kRRUpwtPc3d5zGLIbJfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjIy
YWUyOC1iMTRlLTQwMjEtOTAwYS1jOTE4MmM1YjVhMmUvMGQ3NjA2MjktOWU2Ny0z
YWVhLTg3OTctMzBhYmI3MjIzODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDYyMmFlMjgtYjE0ZS00MDIxLTkw
MGEtYzkxODJjNWI1YTJlL2Q2MjJhZTI4LWIxNGUtNDAyMS05MDBhLWM5MTgyYzVi
NWEyZS5jcmwwHwYDVR0jBBgwFoAUjplOKS9UrsYSeNvncA7VBy/6lFcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjIyYWUyOC1iMTRlLTQwMjEtOTAwYS1jOTE4
MmM1YjVhMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4UMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtwj+o2reQO5Tb01whJp/DvUsLSxlJxN9m7adbuqwbFNh2jIW2iu/Jq
edhV8Lsb+DUQfnFL3njX7VHuiuMyySzW3VGfM5aRhUVLE5uF7ISVaR70i6zKKhWq
I2pVobV7M0NTGvZEBscTwlnJ+/sWnaxZpm4vuK2DcnRon932X14j9gXbDWW4FaqX
2DQ5tSgNTcIMnMd0VjxLzMDNim1zEC7W9Vdd/pQW5LwKoMi6ArhYVLhutlg3ZZaC
OcnkB6cMDT6RFOdbx+pE7Ewg9Y30EAQ1Oy/tj3a3YfAxIw0ov8A9ITMcHQ7HZXlW
RBNU/6sl2hG34ObW8Y+KYIhTyGyEwKk=
-----END CERTIFICATE-----
Generated at Sat May 10 21:44:44 2025 by rpki-client