Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5110d29d-b5a7-3f6d-a96f-19c90b66957c.roa
File: 5110d29d-b5a7-3f6d-a96f-19c90b66957c.roa (raw, json)
Hash identifier: mfih1hGh8pzYGPFVgqaYKFxigUPH6kARlKreMod8KhU=
Subject key identifier: A0:4A:9C:2A:45:66:9E:12:B1:B7:BB:D3:CB:F1:EF:11:97:62:21:4A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858451FAAE3AC5E3108A414429360
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5110d29d-b5a7-3f6d-a96f-19c90b66957c.roa
Signing time: Thu 07 Mar 2024 02:00:25 +0000
ROA not before: Thu 07 Mar 2024 02:00:25 +0000
ROA not after: Wed 05 Jun 2024 01:00:25 +0000
asID: 393449
IP address blocks: 166.0.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 04:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1f:aa:e3:ac:5e:31:08:a4:14:42:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 7 02:00:25 2024 GMT
Not After : Jun 5 01:00:25 2024 GMT
Subject: CN=5d06e91e-69ac-4c19-8330-78fc28350ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:cc:17:65:86:de:a7:d8:3a:5d:4f:28:78:
5a:05:8b:c1:78:08:78:be:97:df:73:ef:85:84:46:
f5:a0:f2:3e:c8:ed:ed:eb:ad:38:ee:56:7e:7e:38:
c8:b0:91:b7:3e:05:54:59:c3:0a:f4:1b:28:2c:c9:
7a:a6:ee:fc:8f:ee:c9:e7:c0:c1:d0:fc:e7:82:3c:
f8:9e:32:13:96:85:db:e0:d9:94:6e:a0:30:94:4d:
84:6f:46:73:f2:0b:5f:93:9b:78:57:52:4f:f6:9d:
b9:c5:26:6a:c0:9d:54:90:9c:3e:b1:71:8f:0c:1b:
d6:dc:cd:fe:bb:72:7d:e7:3e:25:54:82:42:c0:9e:
f7:22:b3:69:44:82:ff:7b:cb:28:e2:f9:f4:79:5e:
a0:ed:45:ea:31:be:8c:88:1e:c1:60:ed:53:2a:69:
62:ea:8e:e4:86:a4:df:86:1e:1d:f6:be:18:e4:35:
82:8c:20:ac:21:97:ba:38:94:37:2b:f3:5a:36:3a:
e0:5c:a8:ad:26:aa:b3:55:9f:f8:18:fd:fd:34:ae:
b4:ce:ee:18:f0:44:bc:e3:72:d9:7e:93:83:17:96:
f1:bf:cd:02:16:27:a4:7d:8c:4c:f4:b1:5b:8c:e1:
b9:2b:ea:90:87:cd:e0:92:16:a2:27:cb:23:a5:d7:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:9C:2A:45:66:9E:12:B1:B7:BB:D3:CB:F1:EF:11:97:62:21:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5110d29d-b5a7-3f6d-a96f-19c90b66957c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:39:9a:56:a1:ff:6b:f2:31:a3:b5:5d:4e:59:77:3b:62:3a:
7d:52:a4:44:66:d1:7f:c3:18:af:86:33:e8:ee:e6:22:90:8d:
2e:e1:e4:ee:0c:09:b7:82:37:77:c6:14:d5:c9:30:81:12:b9:
9d:54:2c:55:bb:9e:7d:4e:ce:8a:07:9b:db:3a:72:cd:73:d1:
ee:4d:9b:50:09:61:ef:5a:a8:77:8e:1b:6f:1b:dd:16:dd:61:
71:48:fe:54:76:38:2d:c6:8e:ed:42:12:4a:3d:cb:5c:27:97:
5e:f2:cb:d0:26:56:4d:2a:a8:89:f0:19:f4:4b:5c:64:e6:d5:
f6:a3:54:7a:26:93:a0:92:f6:dc:91:f9:c1:0a:ee:f6:5b:52:
68:5d:25:e4:4b:fa:8c:68:4c:92:a8:0c:30:68:48:4c:93:d9:
20:ce:aa:6e:d3:6a:2d:ed:5c:23:79:5e:29:e3:b3:1c:85:dd:
0e:e0:14:62:e4:69:8f:c4:4a:c4:60:a0:01:27:ea:dc:2e:de:
50:cb:d0:a0:2e:89:66:81:8e:86:ad:f5:94:f1:24:8e:2e:19:
14:be:e6:94:0b:19:7e:64:3a:77:23:45:ea:7c:28:ae:4d:43:
82:cd:2e:23:0e:05:46:0f:5d:49:63:d9:94:a0:7e:25:0b:a3:
85:03:a5:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfquOsXjEIpBRCk2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NWQwNmU5MWUtNjlhYy00YzE5LTgzMzAtNzhmYzI4MzUwZmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmzMF2WG3qfYOl1PKHhaBYvBeAh4vpffc++F
hEb1oPI+yO3t66047lZ+fjjIsJG3PgVUWcMK9BsoLMl6pu78j+7J58DB0Pzngjz4
njITloXb4NmUbqAwlE2Eb0Zz8gtfk5t4V1JP9p25xSZqwJ1UkJw+sXGPDBvW3M3+
u3J95z4lVIJCwJ73IrNpRIL/e8so4vn0eV6g7UXqMb6MiB7BYO1TKmli6o7khqTf
hh4d9r4Y5DWCjCCsIZe6OJQ3K/NaNjrgXKitJqqzVZ/4GP39NK60zu4Y8ES843LZ
fpODF5bxv80CFiekfYxM9LFbjOG5K+qQh83gkhaiJ8sjpdfHEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBKnCpFZp4Ssbe708vx7xGXYiFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTExMGQyOWQtYjVhNy0z
ZjZkLWE5NmYtMTljOTBiNjY5NTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgC9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKc5mlah/2vyMaO1XU5ZdztiOn1SpERm0X/DGK+GM+ju5iKQjS7h5O4M
CbeCN3fGFNXJMIESuZ1ULFW7nn1OzooHm9s6cs1z0e5Nm1AJYe9aqHeOG28b3Rbd
YXFI/lR2OC3Gju1CEko9y1wnl17yy9AmVk0qqInwGfRLXGTm1fajVHomk6CS9tyR
+cEK7vZbUmhdJeRL+oxoTJKoDDBoSEyT2SDOqm7Tai3tXCN5XinjsxyF3Q7gFGLk
aY/ESsRgoAEn6twu3lDL0KAuiWaBjoat9ZTxJI4uGRS+5pQLGX5kOncjRep8KK5N
Q4LNLiMOBUYPXUlj2ZSgfiULo4UDpSs=
-----END CERTIFICATE-----
Generated at Sun Mar 17 07:49:21 2024 by rpki-client on console-ams.rpki-client.org