Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbfa1c9-c59d-3b10-a11f-4b1bb93a337e.roa
File: 9cbfa1c9-c59d-3b10-a11f-4b1bb93a337e.roa (raw, json)
Hash identifier: LB07+/L7HNVAYpGaG5jJB4HVTVsxJ24sywcnrjYbQuE=
Subject key identifier: 54:00:52:68:E6:F3:CC:9C:B4:96:D0:46:2D:72:44:59:5D:44:95:2A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D1AFDB4DB9FA84013293D7640
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbfa1c9-c59d-3b10-a11f-4b1bb93a337e.roa
Signing time: Wed 02 Mar 2022 05:00:00 +0000
ROA not before: Wed 02 Mar 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2028 05:00:00 +0000
asID: 7029
IP address blocks: 40.138.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1a:fd:b4:db:9f:a8:40:13:29:3d:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 2 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2028 GMT
Subject: CN=4353e6b2-164f-4cf6-aa35-e34292c1b7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:81:aa:40:5b:98:aa:85:b6:86:db:c7:64:
4c:ff:f1:85:21:f4:51:26:c3:d0:2b:e2:ae:6f:ed:
98:ca:a4:3f:48:51:38:32:21:0d:0e:1e:7a:7e:86:
13:5e:dd:53:65:9a:22:5e:ab:2c:7f:b9:72:cc:75:
a7:a7:5a:e7:b2:9a:02:5e:09:2d:a1:30:3f:7d:f9:
ba:a1:cb:36:86:a4:4c:b3:ed:47:3e:5b:26:9d:25:
c0:6f:e6:8c:b5:fb:7f:95:a1:99:59:16:96:f2:26:
62:b2:f1:e8:1b:3d:3d:76:62:f5:5d:d7:01:e1:5e:
88:4a:3f:38:b6:0c:b5:4d:30:fa:04:2e:7b:26:49:
76:7b:93:f7:02:d6:5d:3a:93:d3:db:e2:2a:42:3a:
34:38:30:a6:98:41:af:cd:fa:15:84:ec:a4:7d:a2:
2c:7f:ae:7a:58:ba:c0:2f:27:e0:04:3b:f5:6a:35:
89:85:5d:23:a7:5a:51:57:13:19:d0:ae:10:22:3c:
47:62:6b:18:ab:50:36:2b:a3:54:78:5a:de:35:88:
da:bd:17:4f:69:d3:4b:43:ba:58:24:71:8b:3d:6b:
1d:dc:e4:5c:f1:5a:f1:4f:ac:c4:47:e5:de:99:f1:
d6:1e:43:92:35:c9:5c:cc:07:12:d9:e9:88:d3:ea:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:52:68:E6:F3:CC:9C:B4:96:D0:46:2D:72:44:59:5D:44:95:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbfa1c9-c59d-3b10-a11f-4b1bb93a337e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.138.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:be:e6:6f:a3:38:15:71:1f:37:e1:83:78:88:f4:48:a0:f9:
b8:28:93:4b:47:23:e8:1b:19:b8:bc:c7:3f:6a:26:6a:c3:ba:
b6:71:af:d6:7a:6d:df:d0:52:e6:7d:f0:4d:05:6b:31:36:dc:
7f:48:4d:a8:c2:e7:80:8e:88:c3:e7:93:a9:30:06:bd:f2:f1:
d1:86:19:9a:26:d3:a9:ec:ed:32:ca:ca:d6:3e:80:65:64:de:
f9:cb:12:b4:64:c8:51:fa:02:9a:76:0d:48:15:3a:b5:64:d3:
38:87:d1:32:3a:92:52:3f:dd:07:e9:a1:25:f2:d1:bc:39:6a:
c2:73:73:d9:2a:6a:75:a1:d6:fd:d5:cf:59:d5:37:59:4e:ea:
a7:0c:07:51:8a:79:12:35:7b:d5:6f:d5:6f:91:b8:3b:a1:0c:
28:c0:8c:28:c1:7c:20:c9:99:9c:1d:4d:53:a3:89:41:c5:cc:
74:f2:a2:c5:ce:10:1e:0c:68:48:88:08:e7:8e:d9:db:4f:0c:
cf:c7:65:6f:bf:3f:12:77:83:c1:d4:c4:9e:ba:04:2d:c9:7a:
57:ee:39:41:4b:27:ac:f1:2e:c8:3d:e8:3e:f7:10:47:f5:3a:
e2:95:63:58:ba:ab:02:03:91:de:bb:bb:94:64:bc:b2:a4:b8:
62:51:6a:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0a/bTbn6hAEyk9dkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMwMjA1MDAwMFoXDTI4MDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
NDM1M2U2YjItMTY0Zi00Y2Y2LWFhMzUtZTM0MjkyYzFiN2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVaBqkBbmKqFtobbx2RM//GFIfRRJsPQK+Ku
b+2YyqQ/SFE4MiENDh56foYTXt1TZZoiXqssf7lyzHWnp1rnspoCXgktoTA/ffm6
ocs2hqRMs+1HPlsmnSXAb+aMtft/laGZWRaW8iZisvHoGz09dmL1XdcB4V6ISj84
tgy1TTD6BC57Jkl2e5P3AtZdOpPT2+IqQjo0ODCmmEGvzfoVhOykfaIsf656WLrA
LyfgBDv1ajWJhV0jp1pRVxMZ0K4QIjxHYmsYq1A2K6NUeFreNYjavRdPadNLQ7pY
JHGLPWsd3ORc8VrxT6zER+XemfHWHkOSNclczAcS2emI0+rXeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQAUmjm88yctJbQRi1yRFldRJUqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNiZmExYzktYzU5ZC0z
YjEwLWExMWYtNGIxYmI5M2EzMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKIrgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHa+5m+jOBVxHzfhg3iI9Eig+bgok0tHI+gbGbi8xz9qJmrDurZxr9Z6
bd/QUuZ98E0FazE23H9ITajC54COiMPnk6kwBr3y8dGGGZom06ns7TLKytY+gGVk
3vnLErRkyFH6App2DUgVOrVk0ziH0TI6klI/3QfpoSXy0bw5asJzc9kqanWh1v3V
z1nVN1lO6qcMB1GKeRI1e9Vv1W+RuDuhDCjAjCjBfCDJmZwdTVOjiUHFzHTyosXO
EB4MaEiICOeO2dtPDM/HZW+/PxJ3g8HUxJ66BC3JelfuOUFLJ6zxLsg96D73EEf1
OuKVY1i6qwIDkd67u5RkvLKkuGJRasE=
-----END CERTIFICATE-----
Generated at Fri Jan 5 06:04:54 2024 by rpki-client on console-ams.rpki-client.org