Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58783c1b-4420-3fb6-bb9c-ef78c5fa238c.roa
File: 58783c1b-4420-3fb6-bb9c-ef78c5fa238c.roa (raw, json)
Hash identifier: y7Kl6c+/zdubawslS6/ERTUO7vJ0AjPXx9DnEVeXlEQ=
Subject key identifier: E7:F3:BD:11:E9:2B:1D:ED:E5:A9:7F:BC:BB:CE:7B:3B:BE:7E:4C:1B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285843277DF81C4884BA4054060E20
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58783c1b-4420-3fb6-bb9c-ef78c5fa238c.roa
Signing time: Fri 08 Sep 2023 11:42:32 +0000
ROA not before: Fri 08 Sep 2023 11:42:32 +0000
ROA not after: Thu 07 Dec 2023 12:42:32 +0000
asID: 3223
IP address blocks: 172.111.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:27:7d:f8:1c:48:84:ba:40:54:06:0e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 8 11:42:32 2023 GMT
Not After : Dec 7 12:42:32 2023 GMT
Subject: CN=199cba62-645e-4133-9d44-b3e0df1d8859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:50:b7:e9:b9:b2:46:93:ac:06:77:ce:60:
79:e1:3e:0a:d4:61:1c:a1:09:2d:e3:3c:20:60:58:
82:f5:42:4c:75:2b:36:91:78:b6:5a:d5:86:0c:77:
04:a8:33:05:3e:ec:cc:15:a3:28:f8:58:72:9f:60:
57:b6:8e:f1:7b:27:a4:06:47:16:a2:a3:c9:16:09:
16:4d:86:38:de:34:d9:95:d8:60:22:2b:95:ff:fa:
c2:83:81:91:31:e1:90:61:be:58:9b:b1:ba:e6:5b:
e2:e5:fd:ee:0d:84:af:77:63:1d:d7:d2:62:f9:3f:
ce:f9:8d:58:e7:b8:4f:ff:93:87:ac:b6:37:b3:bb:
e6:25:3b:32:5b:f7:ee:cb:5f:1f:38:7b:42:db:fd:
31:46:07:68:0c:b4:93:14:49:6c:09:f7:72:a9:86:
6b:84:94:12:b0:70:38:7b:3d:61:76:81:48:db:0e:
14:51:98:1d:84:4f:80:30:c5:8b:3b:bd:66:4a:96:
d3:0b:f0:dc:9e:dd:34:89:25:f9:bd:e6:2c:53:d7:
0d:72:ca:65:62:cf:c2:d4:9c:72:39:9d:04:15:ae:
b4:f4:db:5e:76:03:d1:7e:34:a9:91:b3:32:53:55:
da:c0:7e:9d:b5:8e:3f:0e:9e:f8:e5:d9:80:ef:a6:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:BD:11:E9:2B:1D:ED:E5:A9:7F:BC:BB:CE:7B:3B:BE:7E:4C:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58783c1b-4420-3fb6-bb9c-ef78c5fa238c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:74:69:8d:f3:3f:1b:3a:af:4d:a0:f8:85:4b:e4:9e:72:9a:
96:dd:94:89:7c:20:d8:08:88:0f:75:ff:53:a9:a8:98:9e:85:
96:af:9e:7a:f7:85:2d:78:7e:9e:f9:2e:09:9e:61:de:56:c7:
46:23:81:5e:36:d7:9e:14:c1:d3:fe:f1:e0:d7:ed:71:86:10:
21:95:16:a9:00:f1:9f:64:c7:53:15:00:53:61:69:e7:70:6c:
46:e8:75:e9:ac:f7:77:9f:74:bb:42:20:24:56:94:fc:9b:27:
d3:59:d1:12:e8:7d:60:8a:d2:bb:af:c2:24:54:5e:de:e0:6f:
b4:7e:aa:4b:7a:ca:ef:fa:de:6b:16:94:e6:62:cb:5c:9c:2f:
63:de:f2:4d:a6:df:90:ce:4c:34:17:17:4c:6c:b5:5b:2b:3f:
7e:59:96:2b:84:c6:85:27:a5:cd:2d:a3:cf:4c:f3:f1:08:56:
e2:b7:58:82:19:6e:48:2e:fd:66:f3:c9:58:be:8f:52:7d:17:
47:73:18:d8:7a:1d:a2:c9:52:1a:df:83:f1:ad:14:7f:05:bb:
fd:a7:2d:09:37:6e:73:16:4a:d1:6a:7a:b1:d7:cf:3e:14:fe:
75:94:8b:12:dc:0b:48:65:12:5e:98:87:38:42:70:f9:e8:09:
2f:66:04:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMnffgcSIS6QFQGDiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDkwODExNDIzMloXDTIzMTIwNzEyNDIzMlowLzEtMCsGA1UEAxMk
MTk5Y2JhNjItNjQ1ZS00MTMzLTlkNDQtYjNlMGRmMWQ4ODU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVFQt+m5skaTrAZ3zmB54T4K1GEcoQkt4zwg
YFiC9UJMdSs2kXi2WtWGDHcEqDMFPuzMFaMo+Fhyn2BXto7xeyekBkcWoqPJFgkW
TYY43jTZldhgIiuV//rCg4GRMeGQYb5Ym7G65lvi5f3uDYSvd2Md19Ji+T/O+Y1Y
57hP/5OHrLY3s7vmJTsyW/fuy18fOHtC2/0xRgdoDLSTFElsCfdyqYZrhJQSsHA4
ez1hdoFI2w4UUZgdhE+AMMWLO71mSpbTC/Dcnt00iSX5veYsU9cNcsplYs/C1Jxy
OZ0EFa609NtedgPRfjSpkbMyU1XawH6dtY4/Dp745dmA76aG9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfzvRHpKx3t5al/vLvOezu+fkwbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTg3ODNjMWItNDQyMC0z
ZmI2LWJiOWMtZWY3OGM1ZmEyMzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJ0aY3zPxs6r02g+IVL5J5ympbdlIl8INgIiA91/1OpqJiehZavnnr3
hS14fp75LgmeYd5Wx0YjgV42154UwdP+8eDX7XGGECGVFqkA8Z9kx1MVAFNhaedw
bEbodems93efdLtCICRWlPybJ9NZ0RLofWCK0ruvwiRUXt7gb7R+qkt6yu/63msW
lOZiy1ycL2Pe8k2m35DOTDQXF0xstVsrP35ZliuExoUnpc0to89M8/EIVuK3WIIZ
bkgu/WbzyVi+j1J9F0dzGNh6HaLJUhrfg/GtFH8Fu/2nLQk3bnMWStFqerHXzz4U
/nWUixLcC0hlEl6YhzhCcPnoCS9mBMU=
-----END CERTIFICATE-----
Generated at Tue Oct 24 13:37:26 2023 by rpki-client on console-ams.rpki-client.org