Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/03417c93-1403-38dc-8124-6150acdfe4ab.roa
File: 03417c93-1403-38dc-8124-6150acdfe4ab.roa (raw, json)
Hash identifier: vIvVjLjIMHCWAq6a0H4oc1mOuDtHD8uN+PIzXNiOHAA=
Subject key identifier: 78:D1:3E:30:BE:55:5E:F1:50:5D:86:8C:EC:61:F9:ED:CD:E1:6E:10
Certificate issuer: /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial: 010D0C9F4328584505F2F72BD2E790BAA36D0746
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/03417c93-1403-38dc-8124-6150acdfe4ab.roa
Signing time: Mon 26 Feb 2024 20:54:40 +0000
ROA not before: Mon 26 Feb 2024 20:54:40 +0000
ROA not after: Sun 26 May 2024 19:54:40 +0000
asID: 400384
IP address blocks: 66.245.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 15:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:05:f2:f7:2b:d2:e7:90:ba:a3:6d:07:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Validity
Not Before: Feb 26 20:54:40 2024 GMT
Not After : May 26 19:54:40 2024 GMT
Subject: CN=35758924-af6c-4f0a-ab89-916638215191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:d7:b7:66:9d:aa:e3:a2:63:60:a7:97:57:
d2:6d:46:2c:ba:ad:1d:89:4a:a5:72:92:ad:1c:3c:
51:66:ab:53:4a:0e:32:02:44:3a:22:86:33:bf:90:
3d:cc:12:27:05:1b:63:f7:28:9b:fb:70:55:7d:eb:
ce:6c:61:26:9e:05:49:9a:d6:25:71:34:71:af:0d:
0c:69:c0:10:94:bd:39:5f:21:63:35:41:bf:55:83:
79:56:1c:16:db:6f:27:de:61:e8:8b:3b:0e:27:c6:
6e:33:a1:2d:85:69:e2:53:2b:43:46:65:10:e3:0f:
c1:b8:b5:be:6d:cb:bf:b6:fc:48:61:d0:7d:cd:6d:
ba:a4:69:95:c0:6d:61:56:c0:66:25:8d:8a:7a:66:
f7:d1:a0:1a:e2:4d:3c:52:01:74:ea:45:20:b4:1e:
65:9b:55:04:d7:ce:9d:32:73:4c:0a:00:b3:65:8f:
d5:c0:9a:95:a0:bf:c5:db:6a:a5:69:20:f2:f6:36:
21:87:65:65:9e:df:e8:8d:bd:32:e9:8b:a5:56:b1:
07:db:f0:ad:e8:f5:6e:07:39:89:ef:6f:b9:65:0f:
6e:a0:46:6e:d5:b2:75:5b:f8:b4:80:59:52:ff:68:
72:dd:09:be:fa:1d:70:2d:12:ad:33:36:e7:ca:12:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:3E:30:BE:55:5E:F1:50:5D:86:8C:EC:61:F9:ED:CD:E1:6E:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/03417c93-1403-38dc-8124-6150acdfe4ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl
X509v3 Authority Key Identifier:
keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
sbgp-ipAddrBlock: critical
IPv4:
66.245.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:6e:88:82:20:53:02:c4:ce:8f:78:d1:dd:5f:9c:39:22:f1:
0d:90:4c:a5:e1:11:ad:ce:0d:c3:1d:23:6f:4d:12:c9:8a:5e:
e0:d4:cb:b0:20:0a:70:95:2c:33:d4:c6:75:18:da:42:92:c5:
1b:07:fc:d9:67:af:f1:25:05:4e:b6:66:a1:93:c2:12:94:33:
f2:56:df:53:75:4d:92:9f:01:79:50:2f:1b:2c:79:58:31:4b:
f1:dc:eb:11:20:a9:44:28:03:96:eb:ec:9a:26:bb:c5:08:00:
25:66:4b:85:0a:f7:a9:95:e9:dd:93:51:af:74:22:ef:d4:b8:
e7:96:ad:62:89:6e:e7:ee:5a:be:69:ab:9f:ce:fe:09:3e:c1:
32:51:ae:84:60:60:7e:c3:46:e3:61:e6:12:f0:c2:00:0b:10:
44:c6:75:f1:e7:96:9c:d0:2b:83:7f:77:bf:3c:33:d6:d1:79:
75:3b:c1:8e:ee:1f:91:66:93:4d:b7:7f:8f:3d:a6:89:4a:5a:
46:ac:39:39:89:d5:8c:81:d9:c3:b6:e7:bd:8f:fd:bc:b1:25:
a0:4b:d5:64:80:b7:c0:ac:cc:fd:51:9d:73:de:d1:d0:0f:f1:
e5:08:1f:53:6f:32:4f:90:ac:b2:e0:67:84:2a:12:7f:f5:54:
8f:39:47:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUF8vcr0ueQuqNtB0YwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY3MGE3OTQtNmNjYi00OTFkLWFlYjEtY2E4NDg1OWMz
OTUwMB4XDTI0MDIyNjIwNTQ0MFoXDTI0MDUyNjE5NTQ0MFowLzEtMCsGA1UEAxMk
MzU3NTg5MjQtYWY2Yy00ZjBhLWFiODktOTE2NjM4MjE1MTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOHXt2adquOiY2Cnl1fSbUYsuq0diUqlcpKt
HDxRZqtTSg4yAkQ6IoYzv5A9zBInBRtj9yib+3BVfevObGEmngVJmtYlcTRxrw0M
acAQlL05XyFjNUG/VYN5VhwW228n3mHoizsOJ8ZuM6EthWniUytDRmUQ4w/BuLW+
bcu/tvxIYdB9zW26pGmVwG1hVsBmJY2Kemb30aAa4k08UgF06kUgtB5lm1UE186d
MnNMCgCzZY/VwJqVoL/F22qlaSDy9jYhh2Vlnt/ojb0y6YulVrEH2/Ct6PVuBzmJ
72+5ZQ9uoEZu1bJ1W/i0gFlS/2hy3Qm++h1wLRKtMzbnyhL+cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjRPjC+VV7xUF2GjOxh+e3N4W4QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcw
YTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0ODU5YzM5NTAvMDM0MTdjOTMtMTQwMy0z
OGRjLTgxMjQtNjE1MGFjZGZlNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTY3MGE3OTQtNmNjYi00OTFkLWFl
YjEtY2E4NDg1OWMzOTUwL2U2NzBhNzk0LTZjY2ItNDkxZC1hZWIxLWNhODQ4NTlj
Mzk1MC5jcmwwHwYDVR0jBBgwFoAU6Lr0Qpc6EjYTGTvfCyac1GGi5yIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNjcwYTc5NC02Y2NiLTQ5MWQtYWViMS1jYTg0
ODU5YzM5NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvWmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBuiIIgUwLEzo940d1fnDki8Q2QTKXhEa3ODcMdI29NEsmKXuDUy7Ag
CnCVLDPUxnUY2kKSxRsH/Nlnr/ElBU62ZqGTwhKUM/JW31N1TZKfAXlQLxsseVgx
S/Hc6xEgqUQoA5br7Jomu8UIACVmS4UK96mV6d2TUa90Iu/UuOeWrWKJbufuWr5p
q5/O/gk+wTJRroRgYH7DRuNh5hLwwgALEETGdfHnlpzQK4N/d788M9bReXU7wY7u
H5Fmk023f489polKWkasOTmJ1YyB2cO2572P/byxJaBL1WSAt8CszP1RnXPe0dAP
8eUIH1NvMk+QrLLgZ4QqEn/1VI85R3E=
-----END CERTIFICATE-----
Generated at Thu Mar 7 19:38:38 2024 by rpki-client on console-ams.rpki-client.org