Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61eaf004-e254-3ac9-89b7-1d700e56ae65.roa
File: 61eaf004-e254-3ac9-89b7-1d700e56ae65.roa (raw, json)
Hash identifier: HXrvHkoch1gQ8nHIXbezpeQiOWB73GopabIyR4HxKQg=
Subject key identifier: 52:3D:78:17:9D:1B:BD:E4:51:6C:24:72:AF:C1:50:87:0F:DA:DD:6C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858446BFE86D8CDCA69133E8FB980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61eaf004-e254-3ac9-89b7-1d700e56ae65.roa
Signing time: Tue 02 Jan 2024 17:23:28 +0000
ROA not before: Tue 02 Jan 2024 17:23:28 +0000
ROA not after: Mon 01 Apr 2024 16:23:28 +0000
asID: 5
IP address blocks: 66.32.88.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6b:fe:86:d8:cd:ca:69:13:3e:8f:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 2 17:23:28 2024 GMT
Not After : Apr 1 16:23:28 2024 GMT
Subject: CN=fc26d2db-9694-455b-b867-42c7f6e47789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c4:2a:21:2c:4c:da:84:6c:ec:c0:bc:dc:81:
39:02:ee:b6:10:02:26:b5:93:e2:9c:73:7f:8d:93:
5c:9a:58:e0:70:64:e2:37:64:dd:cb:d2:61:a9:e5:
40:61:33:9c:ff:27:0e:42:4e:28:4e:c1:bf:b6:3e:
0a:80:84:48:41:1f:5f:bf:ec:04:2c:36:47:4f:9f:
a9:25:e2:ad:b8:60:00:23:8a:80:70:12:90:0e:43:
53:6e:f5:05:a0:5f:09:cc:74:04:5e:7b:d0:8e:a0:
90:5c:26:88:04:ff:a4:58:98:87:1c:e7:13:77:67:
f7:51:3b:1c:5d:dd:07:09:c1:16:a6:87:b1:e3:82:
1e:8a:41:3a:e8:1b:ee:53:74:a4:8d:81:83:0b:03:
a2:2f:d2:d7:40:e6:db:fa:2c:68:65:f4:ec:d1:cb:
40:53:ad:52:71:18:8a:ec:37:b7:05:83:8e:74:18:
05:2b:87:3a:85:39:1e:6b:ff:08:52:89:3e:f6:74:
c8:31:02:ea:48:4a:eb:74:58:fc:2e:9c:b1:4f:a2:
9b:a2:c1:15:8e:fc:97:e9:ef:1b:f3:45:91:1d:59:
a4:b2:6f:e4:58:99:87:98:f7:ea:be:1d:a4:75:87:
71:7c:89:03:3c:9f:f9:17:3d:9e:1c:66:b4:e3:c7:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3D:78:17:9D:1B:BD:E4:51:6C:24:72:AF:C1:50:87:0F:DA:DD:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61eaf004-e254-3ac9-89b7-1d700e56ae65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.32.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:fc:17:98:17:28:c0:0a:2a:18:67:32:10:8f:a9:38:e2:cb:
41:0f:04:f5:71:d0:6d:ff:36:6f:80:f1:57:a8:8f:f8:66:2b:
d0:93:02:58:58:e1:77:e9:28:3c:33:06:85:7d:f8:6a:cd:dd:
5b:37:13:db:95:0d:2a:c8:78:bb:fb:1d:17:9f:6a:13:2e:3f:
7e:53:bc:05:c0:65:41:53:cf:27:20:01:0c:12:f7:1c:54:9c:
a1:bc:d4:97:ce:1f:75:91:b6:69:99:cd:af:f6:03:4e:e4:fe:
fa:95:61:e4:f5:33:1a:48:84:a8:55:52:a6:fb:ee:92:eb:bc:
3b:60:47:c1:5b:6f:49:fc:14:35:ef:66:4c:5c:8a:d9:3f:09:
d2:0f:5b:35:f5:b5:71:53:de:7b:8c:e0:2f:f3:0a:a2:ed:88:
90:95:d4:bb:43:95:a2:f7:94:40:e2:c2:ec:c3:33:fc:25:01:
10:5c:b3:76:d4:77:8d:57:7c:bf:9c:fc:f6:05:45:ce:e4:b7:
6d:05:60:c1:8e:d3:0a:9b:43:f6:e2:e4:80:ae:5e:29:29:d9:
0f:40:81:13:15:62:6e:22:ff:24:21:c7:e4:2d:15:ab:7f:93:
f3:a0:b6:6e:06:21:87:af:81:a0:e7:d9:fa:47:88:5f:6c:ec:
89:b3:de:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERr/obYzcppEz6PuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDEwMjE3MjMyOFoXDTI0MDQwMTE2MjMyOFowLzEtMCsGA1UEAxMk
ZmMyNmQyZGItOTY5NC00NTViLWI4NjctNDJjN2Y2ZTQ3Nzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMQqISxM2oRs7MC83IE5Au62EAImtZPinHN/
jZNcmljgcGTiN2Tdy9JhqeVAYTOc/ycOQk4oTsG/tj4KgIRIQR9fv+wELDZHT5+p
JeKtuGAAI4qAcBKQDkNTbvUFoF8JzHQEXnvQjqCQXCaIBP+kWJiHHOcTd2f3UTsc
Xd0HCcEWpoex44IeikE66BvuU3SkjYGDCwOiL9LXQObb+ixoZfTs0ctAU61ScRiK
7De3BYOOdBgFK4c6hTkea/8IUok+9nTIMQLqSErrdFj8LpyxT6KbosEVjvyX6e8b
80WRHVmksm/kWJmHmPfqvh2kdYdxfIkDPJ/5Fz2eHGa048cevQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFI9eBedG73kUWwkcq/BUIcP2t1sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjFlYWYwMDQtZTI1NC0z
YWM5LTg5YjctMWQ3MDBlNTZhZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADz8F5gXKMAKKhhnMhCPqTjiy0EPBPVx0G3/Nm+A8Veoj/hmK9CTAlhY
4XfpKDwzBoV9+GrN3Vs3E9uVDSrIeLv7HRefahMuP35TvAXAZUFTzycgAQwS9xxU
nKG81JfOH3WRtmmZza/2A07k/vqVYeT1MxpIhKhVUqb77pLrvDtgR8Fbb0n8FDXv
Zkxcitk/CdIPWzX1tXFT3nuM4C/zCqLtiJCV1LtDlaL3lEDiwuzDM/wlARBcs3bU
d41XfL+c/PYFRc7kt20FYMGO0wqbQ/bi5ICuXikp2Q9AgRMVYm4i/yQhx+QtFat/
k/Ogtm4GIYevgaDn2fpHiF9s7Imz3os=
-----END CERTIFICATE-----
Generated at Fri Jan 5 06:04:54 2024 by rpki-client on console-ams.rpki-client.org