Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b6b43d4-4eb8-3cc4-9065-cef79e60ccab.roa
File: 3b6b43d4-4eb8-3cc4-9065-cef79e60ccab.roa (raw, json)
Hash identifier: EUK0+MTEVY2vkv7YATszT9TwtgPFBg65Ffto/lf8prc=
Subject key identifier: 52:BC:59:30:BC:07:40:AB:63:66:AE:FA:A4:3B:2A:15:EB:B9:C0:ED
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FA98E1CB774062240508500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b6b43d4-4eb8-3cc4-9065-cef79e60ccab.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 207.95.144.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:a9:8e:1c:b7:74:06:22:40:50:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=b2f3c632-aaa0-4b72-bcd2-6180d49bbf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:c4:9d:56:5c:04:9a:08:58:dd:48:0d:78:
e7:27:69:cc:6d:5f:7e:8f:90:38:03:73:c1:8a:b4:
20:54:af:8a:62:7c:40:85:48:bc:bc:e8:9c:23:06:
e0:d6:72:4d:ac:f1:d8:e5:af:4c:c6:8b:87:ed:11:
97:d8:54:7b:32:02:98:b2:bf:45:72:63:01:aa:98:
65:9e:9d:3a:3f:4a:d6:6a:47:cc:3d:8f:5e:1b:f3:
15:9e:27:a4:1e:86:f4:58:60:92:e1:4e:c8:a4:9f:
0b:9a:a9:65:e1:e7:05:de:d7:3c:d0:e4:84:2f:83:
c2:22:a5:2f:03:63:e7:9e:59:ca:94:17:92:0d:f0:
67:02:0c:e8:27:70:c0:68:63:b9:51:ff:11:f5:64:
f0:a1:88:e1:32:5f:97:8e:b1:50:6a:74:1c:37:66:
b3:73:94:d9:f5:2a:e1:c6:ce:dd:f4:22:9e:b4:00:
71:78:96:39:c0:25:e0:a1:84:6d:4a:b9:26:ba:7a:
ba:71:4c:5c:5a:ae:10:65:71:a8:4a:18:ff:cf:9f:
25:94:e6:b8:56:30:72:81:cc:3b:30:f1:46:a2:e8:
22:f8:79:8a:2b:2f:f8:cb:bb:94:d4:b4:35:fc:74:
4a:f5:6d:8a:8d:ba:85:dd:fe:28:05:44:07:f8:ee:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:59:30:BC:07:40:AB:63:66:AE:FA:A4:3B:2A:15:EB:B9:C0:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b6b43d4-4eb8-3cc4-9065-cef79e60ccab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.95.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:cd:5f:74:06:54:43:ca:05:72:a6:4d:61:eb:16:ba:78:9d:
c2:aa:7b:2e:f9:62:41:39:e3:b5:fa:28:8c:77:63:2d:dd:3a:
dd:4b:a2:62:db:37:eb:dc:a8:b6:59:cc:de:f6:34:e7:b1:f2:
5b:11:bb:ce:56:d1:2b:af:b8:bd:c3:d6:b1:88:63:12:a0:9f:
5f:6e:6d:05:a4:a1:2e:46:ae:0f:3e:01:a0:03:bd:36:21:24:
ec:a3:b9:aa:bd:e0:4b:5a:9d:3d:1a:65:21:97:98:f8:29:ef:
12:ae:d9:d2:c2:64:5b:bb:4c:ef:bc:95:52:f0:fc:d3:40:ed:
d9:e4:b5:f0:e6:e5:f3:7e:63:70:71:7d:e6:43:33:5f:fb:56:
89:e3:bb:fc:52:c4:90:89:a7:dc:b9:88:0d:f5:81:8b:c6:cb:
a3:f5:6a:c7:e9:db:1a:45:9d:75:91:5b:13:cc:9e:9f:0d:1f:
2a:80:fa:0c:b8:05:be:1c:7f:14:71:fd:94:77:a2:b7:15:4a:
10:ad:23:88:e5:09:23:03:a6:d2:0c:84:ee:3b:dd:f1:52:a0:
b3:65:55:29:48:bf:85:6b:c8:93:3e:2f:d0:87:cf:c5:fb:dc:
31:a0:f5:3d:af:92:7e:03:f4:d2:44:dd:6b:f8:8e:cc:bf:5f:
f0:59:d5:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1PqY4ct3QGIkBQhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
YjJmM2M2MzItYWFhMC00YjcyLWJjZDItNjE4MGQ0OWJiZjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2/EnVZcBJoIWN1IDXjnJ2nMbV9+j5A4A3PB
irQgVK+KYnxAhUi8vOicIwbg1nJNrPHY5a9MxouH7RGX2FR7MgKYsr9FcmMBqphl
np06P0rWakfMPY9eG/MVniekHob0WGCS4U7IpJ8Lmqll4ecF3tc80OSEL4PCIqUv
A2PnnlnKlBeSDfBnAgzoJ3DAaGO5Uf8R9WTwoYjhMl+XjrFQanQcN2azc5TZ9Srh
xs7d9CKetABxeJY5wCXgoYRtSrkmunq6cUxcWq4QZXGoShj/z58llOa4VjBygcw7
MPFGougi+HmKKy/4y7uU1LQ1/HRK9W2KjbqF3f4oBUQH+O760wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK8WTC8B0CrY2au+qQ7KhXrucDtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I2YjQzZDQtNGViOC0z
Y2M0LTkwNjUtY2VmNzllNjBjY2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz1+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvNX3QGVEPKBXKmTWHrFrp4ncKqey75YkE547X6KIx3Yy3dOt1LomLb
N+vcqLZZzN72NOex8lsRu85W0SuvuL3D1rGIYxKgn19ubQWkoS5Grg8+AaADvTYh
JOyjuaq94EtanT0aZSGXmPgp7xKu2dLCZFu7TO+8lVLw/NNA7dnktfDm5fN+Y3Bx
feZDM1/7Vonju/xSxJCJp9y5iA31gYvGy6P1asfp2xpFnXWRWxPMnp8NHyqA+gy4
Bb4cfxRx/ZR3orcVShCtI4jlCSMDptIMhO473fFSoLNlVSlIv4VryJM+L9CHz8X7
3DGg9T2vkn4D9NJE3Wv4jsy/X/BZ1WQ=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:57 2024 by rpki-client on console-fra.rpki-client.org