Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a41cb6a-1d6e-3703-a07e-fcf81de07150.roa
File: 7a41cb6a-1d6e-3703-a07e-fcf81de07150.roa (raw, json)
Hash identifier: SOTJmJYGgSppIQ77XYNOlNpltmWzO9F36ie3Ukn+fnE=
Subject key identifier: D6:45:3F:DC:79:ED:9B:5A:8A:C9:FB:15:61:B9:12:A8:4D:62:78:AE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858446C68D8B7AC295B4642EE0300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a41cb6a-1d6e-3703-a07e-fcf81de07150.roa
Signing time: Tue 02 Jan 2024 20:57:41 +0000
ROA not before: Tue 02 Jan 2024 20:57:41 +0000
ROA not after: Mon 01 Apr 2024 19:57:41 +0000
asID: 834
IP address blocks: 166.0.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6c:68:d8:b7:ac:29:5b:46:42:ee:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 2 20:57:41 2024 GMT
Not After : Apr 1 19:57:41 2024 GMT
Subject: CN=d1e6acf7-a0fb-431a-b092-9406238cc2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:13:93:65:19:76:0d:8a:88:2a:7a:72:3e:
f8:37:0a:42:68:62:db:91:89:1f:40:b5:0d:49:b3:
ee:61:8a:0e:50:e3:67:6a:92:49:f0:75:ec:24:10:
bc:75:51:d9:67:bc:9c:9d:d2:fd:a9:5a:08:cd:31:
2d:7e:c6:14:ed:8d:38:5b:b9:98:d5:4f:22:3e:1c:
f2:98:98:be:eb:9d:de:5e:d1:de:7b:9e:1d:af:6a:
9b:5c:da:7e:fa:b2:34:a1:7a:b4:ab:64:8c:89:e4:
6b:f1:25:5a:cf:13:83:13:48:dc:03:58:ea:3a:81:
72:d1:22:30:d1:30:d2:aa:17:dd:1c:b9:3c:a7:2b:
33:0c:a3:f7:6b:95:b8:c4:5a:84:ae:cc:46:c8:65:
ec:1a:56:fb:61:3f:9e:ec:07:ac:74:f5:28:3a:c7:
ad:af:8e:0e:71:f3:f7:df:df:ea:d8:88:cd:62:27:
60:76:a5:8f:be:13:d1:84:f5:1c:a6:aa:46:85:e2:
16:e5:11:29:cd:9b:bc:72:a7:b7:6c:d3:69:df:35:
f0:d7:25:d8:bf:72:f2:28:ef:ea:74:b1:a3:50:06:
fd:36:bf:95:cd:a6:96:8b:47:6c:7a:e4:00:7a:b3:
22:81:4e:9a:aa:e5:8d:ba:9e:ca:df:f5:c8:81:b0:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:3F:DC:79:ED:9B:5A:8A:C9:FB:15:61:B9:12:A8:4D:62:78:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a41cb6a-1d6e-3703-a07e-fcf81de07150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:37:fd:1a:9a:54:37:75:38:ba:a3:4f:62:d9:7c:48:a4:9f:
45:b6:21:c1:5a:79:f7:31:44:d7:1b:03:e8:f8:3d:a8:b0:f6:
66:fc:93:98:89:d7:88:e1:b4:6d:20:a2:b9:5d:62:83:86:85:
54:fd:f9:51:6d:60:df:ee:d5:41:80:bf:64:aa:fb:dc:22:e7:
e2:d4:09:7b:54:e6:03:6c:a6:fa:f0:a6:b8:8d:0d:6a:e0:01:
1f:59:59:61:36:f7:96:ae:ef:04:02:a1:b6:80:c6:37:83:2c:
87:a0:e5:fa:f4:c8:4e:78:0a:55:bb:ac:21:83:a5:49:62:eb:
c5:96:6b:cd:37:b6:02:9f:04:a8:36:66:fa:d0:a6:ce:f9:21:
55:ea:ae:c5:72:15:18:b5:04:89:1f:b4:d1:b3:17:bd:8b:97:
79:16:00:72:1a:86:40:93:ec:4c:e7:81:01:7c:3d:cb:38:de:
b7:bc:49:d3:d2:2a:9f:39:48:d9:c2:13:e4:41:3a:5f:be:20:
21:0b:b9:d4:2e:b0:58:35:8b:8d:63:9a:21:11:21:33:b7:a2:
82:39:e8:f1:9d:5e:8c:5b:6d:c9:0d:7c:f2:f4:2f:cb:59:e6:
c7:3e:f0:86:50:39:c3:72:48:61:d3:01:2a:c7:a2:71:72:74:
9e:3a:98:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERsaNi3rClbRkLuAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDEwMjIwNTc0MVoXDTI0MDQwMTE5NTc0MVowLzEtMCsGA1UEAxMk
ZDFlNmFjZjctYTBmYi00MzFhLWIwOTItOTQwNjIzOGNjMmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHoTk2UZdg2KiCp6cj74NwpCaGLbkYkfQLUN
SbPuYYoOUONnapJJ8HXsJBC8dVHZZ7ycndL9qVoIzTEtfsYU7Y04W7mY1U8iPhzy
mJi+653eXtHee54dr2qbXNp++rI0oXq0q2SMieRr8SVazxODE0jcA1jqOoFy0SIw
0TDSqhfdHLk8pyszDKP3a5W4xFqErsxGyGXsGlb7YT+e7AesdPUoOsetr44OcfP3
39/q2IjNYidgdqWPvhPRhPUcpqpGheIW5REpzZu8cqe3bNNp3zXw1yXYv3LyKO/q
dLGjUAb9Nr+VzaaWi0dseuQAerMigU6aquWNup7K3/XIgbAHpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZFP9x57Ztaisn7FWG5EqhNYniuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2E0MWNiNmEtMWQ2ZS0z
NzAzLWEwN2UtZmNmODFkZTA3MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG43/RqaVDd1OLqjT2LZfEikn0W2IcFaefcxRNcbA+j4Paiw9mb8k5iJ
14jhtG0gorldYoOGhVT9+VFtYN/u1UGAv2Sq+9wi5+LUCXtU5gNspvrwpriNDWrg
AR9ZWWE295au7wQCobaAxjeDLIeg5fr0yE54ClW7rCGDpUli68WWa803tgKfBKg2
ZvrQps75IVXqrsVyFRi1BIkftNGzF72Ll3kWAHIahkCT7EzngQF8Pcs43re8SdPS
Kp85SNnCE+RBOl++ICELudQusFg1i41jmiERITO3ooI56PGdXoxbbckNfPL0L8tZ
5sc+8IZQOcNySGHTASrHonFydJ46mIE=
-----END CERTIFICATE-----
Generated at Wed Jan 3 20:26:16 2024 by rpki-client on console-fra.rpki-client.org