Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c5b51f3f-1bbb-3635-974e-6d59665f39f7.roa
File: c5b51f3f-1bbb-3635-974e-6d59665f39f7.roa (raw, json)
Hash identifier: YGsYOOiFH54wZ6KzD5GGDUBz8tKQ9Wt9KVyOAeI/fgM=
Subject key identifier: 0A:CF:57:12:15:B8:01:8A:B6:88:D3:A9:DF:A5:32:A9:8D:0E:42:57
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285843DD38DC328E5A6D65BBA3F900
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c5b51f3f-1bbb-3635-974e-6d59665f39f7.roa
Signing time: Sun 12 Nov 2023 14:00:20 +0000
ROA not before: Sun 12 Nov 2023 14:00:20 +0000
ROA not after: Sat 10 Feb 2024 14:00:20 +0000
asID: 174
IP address blocks: 69.91.180.0/24 maxlen: 24
69.91.184.0/24 maxlen: 24
69.91.188.0/24 maxlen: 24
69.91.136.0/24 maxlen: 24
69.91.144.0/24 maxlen: 24
69.91.128.0/24 maxlen: 24
69.91.132.0/24 maxlen: 24
69.91.140.0/24 maxlen: 24
69.91.172.0/24 maxlen: 24
69.91.176.0/24 maxlen: 24
69.91.164.0/24 maxlen: 24
69.91.168.0/24 maxlen: 24
69.91.156.0/24 maxlen: 24
69.91.160.0/24 maxlen: 24
69.91.148.0/24 maxlen: 24
69.91.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 15:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:dd:38:dc:32:8e:5a:6d:65:bb:a3:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Nov 12 14:00:20 2023 GMT
Not After : Feb 10 14:00:20 2024 GMT
Subject: CN=2a2a35cf-0eab-4dd7-a816-5492203b99a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:ce:33:f5:50:87:8d:bd:ca:90:20:1f:b3:
6e:69:ce:44:21:19:a7:7c:de:3b:74:87:10:9a:4b:
2c:ed:d4:78:1e:3b:72:79:f3:19:84:bf:11:66:9e:
ee:85:3b:22:24:fe:26:14:38:4b:1d:43:9c:7a:ea:
88:60:b6:13:4e:37:6c:3e:c0:75:7a:39:7b:6b:c5:
fc:36:74:5e:67:38:1c:50:7e:c1:d6:63:0d:1f:22:
bd:4c:c7:12:cc:15:f0:00:e9:ec:8c:f3:77:d0:49:
f6:1e:2b:b9:33:f5:c7:2c:47:ad:85:26:38:b1:00:
d9:59:33:04:c4:1c:00:62:39:4e:00:f1:1f:c2:e5:
e6:54:ab:eb:55:aa:2a:0b:f7:cf:0f:6a:29:ba:1c:
c9:da:d0:a2:84:45:03:00:8b:e7:73:b7:0b:6c:f6:
11:01:33:08:23:8a:34:78:0a:5d:0e:6a:8b:5f:b8:
a1:8c:3e:99:3d:10:a6:4d:4d:9f:93:43:ad:94:44:
fb:f3:f5:a6:b3:3f:2b:6f:88:f8:5c:cd:1f:50:8a:
1f:fa:01:37:3e:07:a9:75:b4:73:26:38:70:49:00:
88:e0:a7:74:03:89:ff:a4:7c:0a:6a:d6:d8:fc:f3:
68:d0:5b:fb:75:83:5f:4c:ae:c9:b3:b4:2a:16:6c:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:57:12:15:B8:01:8A:B6:88:D3:A9:DF:A5:32:A9:8D:0E:42:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c5b51f3f-1bbb-3635-974e-6d59665f39f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
69.91.128.0/24
69.91.132.0/24
69.91.136.0/24
69.91.140.0/24
69.91.144.0/24
69.91.148.0/24
69.91.152.0/24
69.91.156.0/24
69.91.160.0/24
69.91.164.0/24
69.91.168.0/24
69.91.172.0/24
69.91.176.0/24
69.91.180.0/24
69.91.184.0/24
69.91.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:26:42:e1:72:1c:6e:80:e1:01:ad:10:a0:31:6c:9d:85:e2:
c2:d2:e0:b4:0e:3e:02:4b:19:f3:ae:09:1f:aa:89:9c:55:9d:
30:2f:d9:75:29:6d:d8:aa:96:d7:dc:06:d6:12:7c:e7:a6:65:
af:b7:eb:05:bc:37:21:1c:d0:dc:f9:4a:16:5d:a6:70:98:e2:
9e:60:26:20:0d:38:c4:f1:0e:80:f5:2b:3a:dc:d6:ed:50:b9:
3c:76:8d:59:6e:67:cf:72:d4:50:64:e8:ed:52:b7:84:d4:97:
df:d3:54:b7:8a:87:dd:94:1f:45:43:4d:33:3a:6b:4f:92:e2:
c0:16:bb:ce:40:a2:0d:c0:db:14:8a:59:c3:12:80:c4:3b:e1:
16:44:6c:16:12:e3:65:75:53:6b:f5:6d:2b:2b:67:4c:13:d8:
a3:c1:58:22:1c:44:ba:c2:f1:5b:a3:c5:cf:39:c0:2e:fa:29:
72:93:b6:c8:16:38:41:85:0c:57:28:51:d3:29:52:4b:05:91:
b2:71:5a:bf:d6:db:17:44:2e:b5:ea:45:8f:f6:96:79:7c:7a:
d5:e2:55:8b:15:24:18:32:28:0b:49:44:ea:23:94:62:36:ce:
0c:e5:86:54:ab:3d:ec:30:3e:34:40:c0:b2:c8:0e:08:7a:80:
81:65:8e:98
-----BEGIN CERTIFICATE-----
MIIGnTCCBYWgAwIBAgIUAQ0Mn0MoWEPdONwyjlptZbuj+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTIzMTExMjE0MDAyMFoXDTI0MDIxMDE0MDAyMFowLzEtMCsGA1UEAxMk
MmEyYTM1Y2YtMGVhYi00ZGQ3LWE4MTYtNTQ5MjIwM2I5OWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSDOM/VQh429ypAgH7Nuac5EIRmnfN47dIcQ
mkss7dR4HjtyefMZhL8RZp7uhTsiJP4mFDhLHUOceuqIYLYTTjdsPsB1ejl7a8X8
NnReZzgcUH7B1mMNHyK9TMcSzBXwAOnsjPN30En2Hiu5M/XHLEethSY4sQDZWTME
xBwAYjlOAPEfwuXmVKvrVaoqC/fPD2opuhzJ2tCihEUDAIvnc7cLbPYRATMII4o0
eApdDmqLX7ihjD6ZPRCmTU2fk0OtlET78/Wmsz8rb4j4XM0fUIof+gE3PgepdbRz
JjhwSQCI4Kd0A4n/pHwKatbY/PNo0Fv7dYNfTK7Js7QqFmwVOwIDAQABo4IDrzCC
A6swHQYDVR0OBBYEFArPVxIVuAGKtojTqd+lMqmNDkJXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYzViNTFmM2YtMWJiYi0z
NjM1LTk3NGUtNmQ1OTY2NWYzOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQARVuAAwQA
RVuEAwQARVuIAwQARVuMAwQARVuQAwQARVuUAwQARVuYAwQARVucAwQARVugAwQA
RVukAwQARVuoAwQARVusAwQARVuwAwQARVu0AwQARVu4AwQARVu8MFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AIMmQuFyHG6A4QGtEKAxbJ2F4sLS4LQOPgJLGfOuCR+qiZxVnTAv2XUpbdiqltfc
BtYSfOemZa+36wW8NyEc0Nz5ShZdpnCY4p5gJiANOMTxDoD1Kzrc1u1QuTx2jVlu
Z89y1FBk6O1St4TUl9/TVLeKh92UH0VDTTM6a0+S4sAWu85Aog3A2xSKWcMSgMQ7
4RZEbBYS42V1U2v1bSsrZ0wT2KPBWCIcRLrC8Vujxc85wC76KXKTtsgWOEGFDFco
UdMpUksFkbJxWr/W2xdELrXqRY/2lnl8etXiVYsVJBgyKAtJROojlGI2zgzlhlSr
PewwPjRAwLLIDgh6gIFljpg=
-----END CERTIFICATE-----
Generated at Sat Jan 20 19:00:36 2024 by rpki-client on console-fra.rpki-client.org