Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9f24215d-8a03-3085-84a8-aa9173c9d2db.roa
File: 9f24215d-8a03-3085-84a8-aa9173c9d2db.roa (raw, json)
Hash identifier: WYON9gTrp2im/RfY9NZPoBRe4iiNZZ1irKCTLpx5q/s=
Subject key identifier: C1:23:AF:FC:F7:87:C1:31:DF:DE:AA:BE:8E:93:3D:5B:4C:1D:B5:86
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858440183BC865405473063722780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9f24215d-8a03-3085-84a8-aa9173c9d2db.roa
Signing time: Sat 25 Nov 2023 14:00:21 +0000
ROA not before: Sat 25 Nov 2023 14:00:21 +0000
ROA not after: Fri 23 Feb 2024 14:00:21 +0000
asID: 61317
IP address blocks: 50.114.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 23:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:01:83:bc:86:54:05:47:30:63:72:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 25 14:00:21 2023 GMT
Not After : Feb 23 14:00:21 2024 GMT
Subject: CN=605c47a8-8e4b-41b7-ae53-1d26d493c85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:6d:dd:f8:14:3c:83:21:24:9b:39:87:c1:
10:34:c9:0f:c9:fd:ac:f2:c8:f6:e8:4b:f7:37:1e:
10:2d:b1:1c:e6:7c:5b:f3:12:a4:4a:ea:e7:87:fa:
be:f6:8f:09:45:8a:a8:96:67:ce:40:05:bd:49:83:
3b:f0:8c:6c:5a:66:2b:af:24:4f:3b:d3:e9:30:32:
be:46:ab:9e:0a:41:99:04:3b:7d:97:65:08:01:21:
0c:44:26:9c:31:0d:ef:12:36:f1:dc:36:ac:88:95:
1d:f1:da:2b:49:4b:76:3a:16:1b:3b:d9:4f:a3:97:
7a:27:08:40:11:36:98:34:7c:36:0f:0f:35:39:51:
7e:da:74:d2:f3:f7:85:02:c1:15:9a:d2:60:78:30:
b6:30:39:09:f6:14:50:2a:41:bd:cc:08:5d:9d:40:
47:50:2a:cb:13:bc:fb:56:7b:cb:8e:5c:35:3a:88:
c4:1c:2c:c5:31:f8:c7:ca:9a:34:23:58:da:04:fd:
c7:f0:26:70:80:f3:06:ce:97:b7:49:12:c4:2d:75:
71:b3:ca:7c:01:8d:8f:70:4b:2e:af:86:f8:78:f8:
b3:73:84:86:6b:0c:75:b4:ee:32:f4:b5:3a:50:de:
24:61:34:ce:7c:d1:46:f6:d6:d9:29:50:60:6a:68:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:AF:FC:F7:87:C1:31:DF:DE:AA:BE:8E:93:3D:5B:4C:1D:B5:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9f24215d-8a03-3085-84a8-aa9173c9d2db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:1f:c7:af:55:73:01:48:fe:f9:8a:7f:ae:48:b5:be:b8:4d:
7e:32:3c:38:6e:7a:70:83:e5:a6:c5:f6:0b:1d:80:64:6f:88:
a8:38:8a:be:08:3b:1e:dd:7a:e1:46:40:db:2d:4c:b9:d3:d6:
25:eb:dc:c1:52:5b:34:de:d0:50:1a:d8:12:be:c6:50:d9:7f:
b7:9a:ef:e9:3a:82:db:2f:a2:37:f5:6c:97:25:f7:80:9c:ab:
35:00:6d:c6:90:9d:93:7d:f7:b1:7a:ce:aa:c5:6a:d5:34:a6:
a2:07:64:9d:da:04:0d:75:9c:67:5e:e2:29:8a:6e:94:b6:61:
d5:bf:8e:8d:47:36:ef:57:f2:ac:d7:82:54:65:a7:49:cf:12:
0f:79:c9:18:3a:ff:1b:c1:77:8a:ab:cd:2c:ce:f7:9e:8b:d7:
d9:bf:34:f5:01:d2:a5:df:58:50:e5:3e:10:05:6a:94:6d:8f:
b0:7b:80:d2:a3:16:ae:02:57:c0:1f:f1:ad:cf:c3:1b:01:88:
63:69:c0:27:b5:82:76:e0:b4:c5:60:23:99:04:45:57:2f:f8:
3a:9d:41:f7:9b:b7:51:73:57:5c:e3:39:ad:cd:e2:32:2c:30:
89:e0:98:35:ee:01:62:40:1d:c6:b6:b1:bb:13:a3:09:fe:38:
1d:83:47:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQBg7yGVAVHMGNyJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTEyNTE0MDAyMVoXDTI0MDIyMzE0MDAyMVowLzEtMCsGA1UEAxMk
NjA1YzQ3YTgtOGU0Yi00MWI3LWFlNTMtMWQyNmQ0OTNjODVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTht3fgUPIMhJJs5h8EQNMkPyf2s8sj26Ev3
Nx4QLbEc5nxb8xKkSurnh/q+9o8JRYqolmfOQAW9SYM78IxsWmYrryRPO9PpMDK+
RqueCkGZBDt9l2UIASEMRCacMQ3vEjbx3DasiJUd8dorSUt2OhYbO9lPo5d6JwhA
ETaYNHw2Dw81OVF+2nTS8/eFAsEVmtJgeDC2MDkJ9hRQKkG9zAhdnUBHUCrLE7z7
VnvLjlw1OojEHCzFMfjHypo0I1jaBP3H8CZwgPMGzpe3SRLELXVxs8p8AY2PcEsu
r4b4ePizc4SGawx1tO4y9LU6UN4kYTTOfNFG9tbZKVBgamhZ3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEjr/z3h8Ex396qvo6TPVtMHbWGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWYyNDIxNWQtOGEwMy0z
MDg1LTg0YTgtYWE5MTczYzlkMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALEfx69VcwFI/vmKf65Itb64TX4yPDhuenCD5abF9gsdgGRviKg4ir4I
Ox7deuFGQNstTLnT1iXr3MFSWzTe0FAa2BK+xlDZf7ea7+k6gtsvojf1bJcl94Cc
qzUAbcaQnZN997F6zqrFatU0pqIHZJ3aBA11nGde4imKbpS2YdW/jo1HNu9X8qzX
glRlp0nPEg95yRg6/xvBd4qrzSzO956L19m/NPUB0qXfWFDlPhAFapRtj7B7gNKj
Fq4CV8Af8a3PwxsBiGNpwCe1gnbgtMVgI5kERVcv+DqdQfebt1FzV1zjOa3N4jIs
MIngmDXuAWJAHca2sbsTown+OB2DR1E=
-----END CERTIFICATE-----
Generated at Sun Feb 4 23:48:56 2024 by rpki-client on console-fra.rpki-client.org