Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/7b51c930-f822-335b-8753-570e54243dec.roa
File: 7b51c930-f822-335b-8753-570e54243dec.roa (raw, json)
Hash identifier: Te+UpbsZgPSuvhRb51+cdGhwganAP3JpZ72lY88hvkg=
Subject key identifier: E3:66:BA:1B:60:6D:55:51:2A:52:A3:B6:6F:BC:EB:A9:B5:E7:B6:6A
Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial: 010D0C9F4328584476C47370F62A2A0C693C9400
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/7b51c930-f822-335b-8753-570e54243dec.roa
Signing time: Sat 06 Jan 2024 14:00:20 +0000
ROA not before: Sat 06 Jan 2024 14:00:20 +0000
ROA not after: Fri 05 Apr 2024 13:00:20 +0000
asID: 204857
IP address blocks: 128.254.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 22:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:76:c4:73:70:f6:2a:2a:0c:69:3c:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Validity
Not Before: Jan 6 14:00:20 2024 GMT
Not After : Apr 5 13:00:20 2024 GMT
Subject: CN=3e6c7729-3de5-482c-9197-8fea15fd47ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:a4:1f:b3:fd:76:d0:71:fb:70:43:f7:fe:
23:c1:5e:a5:7a:41:43:4a:ec:53:ad:f1:29:27:10:
49:dd:c3:2d:dd:26:2d:6e:0f:dc:f5:bc:0d:0d:58:
8d:fb:44:9d:03:a7:41:b7:58:95:98:53:d3:f8:e3:
de:2a:78:51:d7:ac:37:4e:10:e9:14:14:2d:dc:b0:
8e:4f:9d:4b:93:8d:e2:ae:ad:c0:ac:db:f3:01:fd:
a5:13:90:cc:fe:f5:f9:07:e6:7d:d0:b1:36:c1:65:
98:6b:a3:48:a4:8a:c7:4c:d2:59:67:c1:8b:11:4a:
d9:88:97:84:c4:4c:99:17:da:21:54:27:97:63:e2:
cf:c1:a5:d0:47:11:16:f6:0c:bc:57:c4:62:25:87:
29:b2:5f:49:e0:d2:f5:0b:bd:6d:cb:7e:b8:d4:ca:
34:47:2e:93:95:0a:1b:af:1d:c4:73:2e:0d:fa:61:
6d:1f:3f:61:23:94:13:6d:14:09:30:2b:55:31:54:
78:ab:37:5b:7e:87:ee:e5:f6:e7:d3:88:fe:e7:e0:
2e:89:18:bc:7b:ae:b6:31:ec:c7:38:a0:bb:82:e8:
8b:50:a7:19:d5:2d:dd:ea:09:93:83:d3:18:85:b6:
c1:09:35:91:3d:81:09:0f:03:ee:98:7b:37:c1:23:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:66:BA:1B:60:6D:55:51:2A:52:A3:B6:6F:BC:EB:A9:B5:E7:B6:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/7b51c930-f822-335b-8753-570e54243dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
X509v3 Authority Key Identifier:
keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a3:4b:2b:a4:e4:c9:4b:18:e7:8a:d8:d6:e0:70:63:ba:a4:
f9:2e:d5:8a:6d:da:d9:e0:f7:68:7e:8b:2a:e0:9e:e1:a7:19:
fa:27:10:bb:10:31:3f:e4:73:93:25:6e:35:3a:e5:6d:c7:3d:
cf:42:d1:9f:05:70:58:c2:44:49:53:30:55:92:cd:fb:39:93:
17:41:ee:4b:42:0a:8b:5b:63:29:c3:7f:35:1e:05:1b:c6:3a:
ee:73:3e:79:46:e5:97:71:0c:71:74:a2:25:a7:2a:fc:d9:72:
7c:a5:9e:a8:d3:6a:74:04:44:18:69:22:66:5f:a4:e3:98:14:
26:61:3a:6e:da:76:dd:04:12:50:ee:04:6b:cf:98:da:42:51:
38:5c:86:e2:2f:ac:0b:ce:21:2a:a9:e7:59:c8:9a:78:11:f5:
ef:0d:64:1f:17:b8:59:60:25:18:74:92:c2:ee:1b:e2:75:90:
3f:6f:59:be:02:9e:95:69:f9:3f:3e:44:c8:32:7f:4a:41:7f:
7e:3d:7f:81:0e:b6:ed:87:bd:1c:89:5e:a4:21:60:60:6d:f7:
09:85:1a:86:98:42:00:79:bf:77:c2:ed:ea:d7:0b:45:bf:61:
ee:36:b4:71:68:c1:99:fa:1c:a7:56:2a:55:c2:d2:40:32:f8:
f8:06:90:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWER2xHNw9ioqDGk8lAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTUxMTUxNDMtMTFjOC00YjA2LTgwYTEtYTk5MWZhNTBm
MmZhMB4XDTI0MDEwNjE0MDAyMFoXDTI0MDQwNTEzMDAyMFowLzEtMCsGA1UEAxMk
M2U2Yzc3MjktM2RlNS00ODJjLTkxOTctOGZlYTE1ZmQ0N2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuakH7P9dtBx+3BD9/4jwV6lekFDSuxTrfEp
JxBJ3cMt3SYtbg/c9bwNDViN+0SdA6dBt1iVmFPT+OPeKnhR16w3ThDpFBQt3LCO
T51Lk43irq3ArNvzAf2lE5DM/vX5B+Z90LE2wWWYa6NIpIrHTNJZZ8GLEUrZiJeE
xEyZF9ohVCeXY+LPwaXQRxEW9gy8V8RiJYcpsl9J4NL1C71ty3641Mo0Ry6TlQob
rx3Ecy4N+mFtHz9hI5QTbRQJMCtVMVR4qzdbfofu5fbn04j+5+AuiRi8e662MezH
OKC7guiLUKcZ1S3d6gmTg9MYhbbBCTWRPYEJDwPumHs3wSOFlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFONmuhtgbVVRKlKjtm+866m157ZqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTEx
NTE0My0xMWM4LTRiMDYtODBhMS1hOTkxZmE1MGYyZmEvN2I1MWM5MzAtZjgyMi0z
MzViLTg3NTMtNTcwZTU0MjQzZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxMTUxNDMtMTFjOC00YjA2LTgw
YTEtYTk5MWZhNTBmMmZhLzE1MTE1MTQzLTExYzgtNGIwNi04MGExLWE5OTFmYTUw
ZjJmYS5jcmwwHwYDVR0jBBgwFoAUVxb9oR0aCplObiedKLlylvm9hkQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTExNTE0My0xMWM4LTRiMDYtODBhMS1hOTkx
ZmE1MGYyZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFajSyuk5MlLGOeK2NbgcGO6pPku1Ypt2tng92h+iyrgnuGnGfonELsQ
MT/kc5MlbjU65W3HPc9C0Z8FcFjCRElTMFWSzfs5kxdB7ktCCotbYynDfzUeBRvG
Ou5zPnlG5ZdxDHF0oiWnKvzZcnylnqjTanQERBhpImZfpOOYFCZhOm7adt0EElDu
BGvPmNpCUThchuIvrAvOISqp51nImngR9e8NZB8XuFlgJRh0ksLuG+J1kD9vWb4C
npVp+T8+RMgyf0pBf349f4EOtu2HvRyJXqQhYGBt9wmFGoaYQgB5v3fC7erXC0W/
Ye42tHFowZn6HKdWKlXC0kAy+PgGkMs=
-----END CERTIFICATE-----
Generated at Wed Feb 7 03:15:18 2024 by rpki-client on console-ams.rpki-client.org