Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8ab7dcc-701e-37fb-a72b-ca08a820de6e.roa
File: b8ab7dcc-701e-37fb-a72b-ca08a820de6e.roa (raw, json)
Hash identifier: 3fgV+INc2/4lC77jgJy6qnXDde0Odqo/U7LsvRhYva8=
Subject key identifier: FD:03:1D:59:A3:9D:68:95:74:35:18:A0:D4:D9:EB:C4:4B:4D:77:00
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BB1456F6817F00D1BC41FA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8ab7dcc-701e-37fb-a72b-ca08a820de6e.roa
Signing time: Mon 31 Jul 2023 15:42:24 +0000
ROA not before: Mon 31 Jul 2023 15:42:24 +0000
ROA not after: Sun 29 Oct 2023 15:42:24 +0000
asID: 834
IP address blocks: 50.114.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bb:14:56:f6:81:7f:00:d1:bc:41:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 31 15:42:24 2023 GMT
Not After : Oct 29 15:42:24 2023 GMT
Subject: CN=b9a64bbd-1cab-44aa-8aae-b37faddd1150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:82:47:66:10:53:b2:7f:0e:81:8c:f6:94:15:
f3:c2:1c:b8:3e:88:cc:ac:06:a5:47:11:4e:18:49:
5d:91:e0:c5:fd:e5:56:ca:a5:ea:cc:e7:7f:ba:f6:
12:4c:49:b0:3a:f8:59:67:2f:9e:63:97:0c:4a:3c:
5d:fa:f4:c0:ab:82:82:f6:43:c4:af:24:c5:89:7f:
e5:72:fa:6f:5c:b4:b9:c3:c1:0b:03:80:71:c7:4a:
20:c0:70:80:22:58:32:49:c2:9e:93:da:8b:c9:b5:
23:85:ac:e3:8d:40:51:ec:5b:9d:a0:d3:a0:6e:f6:
44:92:95:48:9e:9b:48:7b:ff:03:0e:64:ea:12:ca:
0f:b7:00:95:80:17:38:16:31:e5:4a:f2:50:5e:90:
ce:52:5a:d1:88:b6:40:b1:92:ad:a4:28:39:c9:f0:
98:a1:cd:ae:b6:45:67:a7:aa:c5:ba:21:d3:74:e1:
71:ac:53:c8:90:49:b8:11:ce:b7:61:8a:5f:6a:73:
a6:b0:9e:91:4b:b6:7e:d7:10:9b:25:14:8a:12:48:
ec:9a:ac:a1:b0:69:73:76:7f:70:a4:c0:41:ab:2e:
54:8d:4d:62:96:b2:4c:8f:59:ef:c4:67:a9:55:f7:
ab:86:4f:f0:64:07:df:f2:c3:af:81:bd:64:a6:fa:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:1D:59:A3:9D:68:95:74:35:18:A0:D4:D9:EB:C4:4B:4D:77:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8ab7dcc-701e-37fb-a72b-ca08a820de6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:74:69:f0:a0:6c:44:65:2c:3b:f6:f1:50:ed:88:f7:f5:32:
f7:52:fe:21:8c:98:ec:1b:4e:cb:ef:f0:9b:05:e9:46:b1:ef:
b2:99:f1:dc:16:e3:1d:e4:2c:6c:ad:31:c3:6f:a3:3c:fe:bb:
53:96:0e:07:96:7f:63:25:37:11:7b:ea:13:60:b7:59:f6:64:
0a:55:b5:c7:5c:4d:8f:5c:8e:df:bc:1f:fd:70:95:d0:01:93:
6a:ff:45:bf:f6:82:93:bf:95:9e:ed:75:d6:36:d9:7c:ef:9b:
18:e9:07:b9:52:63:34:8b:f1:c5:60:4b:a4:0a:a1:bf:97:b4:
3a:b0:34:29:14:6c:b4:f3:3f:18:36:1c:15:17:c6:99:6a:d4:
71:19:46:41:1a:bf:69:8e:33:12:37:94:e0:f0:71:c0:54:ff:
62:e3:8f:43:b4:f6:64:d7:7d:83:01:6a:64:e9:e1:cf:e3:b9:
cc:dc:a9:0e:b9:5a:df:48:cc:42:36:c6:6d:bd:9b:6b:0e:f3:
59:85:99:b3:ad:83:fb:dd:09:e2:8a:8c:ab:0e:d4:b2:8d:fe:
75:5b:95:f3:50:52:83:a9:87:82:36:08:15:2d:b2:a9:11:33:
07:6c:a9:eb:6c:04:45:8c:00:c8:f7:05:55:2f:0c:41:4f:29:
66:92:87:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEK7FFb2gX8A0bxB+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDczMTE1NDIyNFoXDTIzMTAyOTE1NDIyNFowLzEtMCsGA1UEAxMk
YjlhNjRiYmQtMWNhYi00NGFhLThhYWUtYjM3ZmFkZGQxMTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4JHZhBTsn8OgYz2lBXzwhy4PojMrAalRxFO
GEldkeDF/eVWyqXqzOd/uvYSTEmwOvhZZy+eY5cMSjxd+vTAq4KC9kPEryTFiX/l
cvpvXLS5w8ELA4Bxx0ogwHCAIlgyScKek9qLybUjhazjjUBR7FudoNOgbvZEkpVI
nptIe/8DDmTqEsoPtwCVgBc4FjHlSvJQXpDOUlrRiLZAsZKtpCg5yfCYoc2utkVn
p6rFuiHTdOFxrFPIkEm4Ec63YYpfanOmsJ6RS7Z+1xCbJRSKEkjsmqyhsGlzdn9w
pMBBqy5UjU1ilrJMj1nvxGepVferhk/wZAff8sOvgb1kpvqQAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0DHVmjnWiVdDUYoNTZ68RLTXcAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjhhYjdkY2MtNzAxZS0z
N2ZiLWE3MmItY2EwOGE4MjBkZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnInMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG50afCgbERlLDv28VDtiPf1MvdS/iGMmOwbTsvv8JsF6Uax77KZ8dwW
4x3kLGytMcNvozz+u1OWDgeWf2MlNxF76hNgt1n2ZApVtcdcTY9cjt+8H/1wldAB
k2r/Rb/2gpO/lZ7tddY22XzvmxjpB7lSYzSL8cVgS6QKob+XtDqwNCkUbLTzPxg2
HBUXxplq1HEZRkEav2mOMxI3lODwccBU/2Ljj0O09mTXfYMBamTp4c/juczcqQ65
Wt9IzEI2xm29m2sO81mFmbOtg/vdCeKKjKsO1LKN/nVblfNQUoOph4I2CBUtsqkR
MwdsqetsBEWMAMj3BVUvDEFPKWaSh6A=
-----END CERTIFICATE-----
Generated at Thu Aug 3 16:39:46 2023 by rpki-client on console-fra.rpki-client.org