Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e98e2406-038f-3fd2-bedf-ddec55842666.roa
File: e98e2406-038f-3fd2-bedf-ddec55842666.roa (raw, json)
Hash identifier: sL4PFu8VlC4oi4toTH+WzDQJZyn+4e7EIbDtqyMvUEE=
Subject key identifier: 93:27:C5:E5:B7:29:95:2A:F0:E6:3E:63:35:C4:AC:2A:BF:14:02:F0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858447CD88DEDC96B5E5975ACFA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e98e2406-038f-3fd2-bedf-ddec55842666.roa
Signing time: Mon 08 Jan 2024 18:15:42 +0000
ROA not before: Mon 08 Jan 2024 18:15:42 +0000
ROA not after: Sun 07 Apr 2024 17:15:42 +0000
asID: 21859
IP address blocks: 108.165.232.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 18:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7c:d8:8d:ed:c9:6b:5e:59:75:ac:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 8 18:15:42 2024 GMT
Not After : Apr 7 17:15:42 2024 GMT
Subject: CN=67e2a735-cb19-47d4-9467-06349d675ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:10:a2:95:06:2d:cc:c7:f5:ad:1a:b0:2c:
2c:d7:d0:c9:54:3e:d5:8d:bf:35:22:96:4d:d5:79:
0f:c5:c7:3c:16:80:9e:25:cc:aa:ab:a2:45:4c:7e:
f2:25:14:93:fd:6c:75:5e:56:d3:71:29:2d:bf:f5:
25:8c:64:65:c8:29:55:b6:30:24:90:d3:e7:8c:71:
ff:84:c0:85:89:01:76:eb:64:72:29:55:1e:5b:09:
01:b7:cf:20:8b:0e:38:85:65:69:2e:6d:af:be:1b:
1e:de:49:9e:95:01:6b:41:fb:80:89:8f:e0:82:e4:
da:f1:91:5c:fa:b3:92:75:fa:30:c0:2e:c2:12:06:
da:c8:da:b4:0a:dc:74:e6:b0:29:e3:fa:f3:a0:af:
1f:d1:81:39:5b:d5:9c:54:84:f0:52:9b:7a:9c:8d:
d0:2e:66:c5:18:ca:83:79:df:29:f3:da:18:bc:26:
16:e8:fd:05:ce:9c:b5:0b:4c:7d:bf:4e:58:e0:f6:
68:9c:d6:97:c2:2f:bf:6a:29:87:fc:01:79:fb:15:
f7:d0:af:9f:73:44:16:d1:75:65:83:d7:80:5c:16:
8e:63:43:a2:ef:64:66:b7:ee:c2:2b:9c:a1:51:c3:
0e:4f:b5:44:6f:4e:15:fd:37:b2:3c:be:75:ad:f9:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:C5:E5:B7:29:95:2A:F0:E6:3E:63:35:C4:AC:2A:BF:14:02:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e98e2406-038f-3fd2-bedf-ddec55842666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:c0:82:41:1c:e0:75:46:d2:b8:25:4e:f3:47:09:62:3a:1d:
10:50:1c:cc:1b:83:6f:f6:9b:00:1e:93:39:b1:57:c2:e1:ae:
0c:cb:07:8c:90:1a:12:7b:47:5b:dd:fc:35:8d:26:b4:9a:2f:
9f:8f:83:b6:61:f7:21:83:83:eb:f7:56:2e:ee:0c:37:79:7b:
20:19:b5:fc:4f:18:16:ba:7d:70:c8:52:4a:ac:32:5b:4c:88:
9b:63:1e:02:81:6b:42:3b:77:2b:24:41:fa:04:de:dd:60:ca:
07:58:5f:fc:b3:59:7c:8b:2d:82:88:a9:9e:e5:68:a2:71:a1:
ed:e7:ca:d4:f6:4f:77:7d:cf:6d:df:c1:60:a9:1b:b9:9a:40:
33:03:bc:8a:a9:b1:34:4d:bf:e5:1b:e5:ff:d1:ff:36:93:2a:
53:ec:be:3f:f6:c3:96:7f:8e:52:74:8e:fb:b1:4e:3d:be:ab:
e2:80:ad:7d:cc:e9:7a:ba:97:4f:f9:c3:e9:a6:26:14:b4:23:
8a:78:a4:c3:4c:6c:33:95:03:05:c9:dc:2c:3d:20:fe:6d:c8:
74:94:2f:cc:bf:f5:4b:5f:3f:11:c7:eb:57:79:ef:c6:0b:ac:
02:e7:36:0c:f3:17:47:b2:da:12:cc:28:89:3e:50:e8:5e:0c:
41:70:28:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWER82I3tyWteWXWs+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDEwODE4MTU0MloXDTI0MDQwNzE3MTU0MlowLzEtMCsGA1UEAxMk
NjdlMmE3MzUtY2IxOS00N2Q0LTk0NjctMDYzNDlkNjc1YmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqocQopUGLczH9a0asCws19DJVD7Vjb81IpZN
1XkPxcc8FoCeJcyqq6JFTH7yJRST/Wx1XlbTcSktv/UljGRlyClVtjAkkNPnjHH/
hMCFiQF262RyKVUeWwkBt88giw44hWVpLm2vvhse3kmelQFrQfuAiY/gguTa8ZFc
+rOSdfowwC7CEgbayNq0Ctx05rAp4/rzoK8f0YE5W9WcVITwUpt6nI3QLmbFGMqD
ed8p89oYvCYW6P0Fzpy1C0x9v05Y4PZonNaXwi+/aimH/AF5+xX30K+fc0QW0XVl
g9eAXBaOY0Oi72Rmt+7CK5yhUcMOT7VEb04V/TeyPL51rfm/MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJMnxeW3KZUq8OY+YzXErCq/FALwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTk4ZTI0MDYtMDM4Zi0z
ZmQyLWJlZGYtZGRlYzU1ODQyNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKXoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3AgkEc4HVG0rglTvNHCWI6HRBQHMwbg2/2mwAekzmxV8LhrgzLB4yQ
GhJ7R1vd/DWNJrSaL5+Pg7Zh9yGDg+v3Vi7uDDd5eyAZtfxPGBa6fXDIUkqsMltM
iJtjHgKBa0I7dyskQfoE3t1gygdYX/yzWXyLLYKIqZ7laKJxoe3nytT2T3d9z23f
wWCpG7maQDMDvIqpsTRNv+Ub5f/R/zaTKlPsvj/2w5Z/jlJ0jvuxTj2+q+KArX3M
6Xq6l0/5w+mmJhS0I4p4pMNMbDOVAwXJ3Cw9IP5tyHSUL8y/9UtfPxHH61d578YL
rALnNgzzF0ey2hLMKIk+UOheDEFwKIc=
-----END CERTIFICATE-----
Generated at Thu Feb 8 21:03:00 2024 by rpki-client on console-fra.rpki-client.org