Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9f101446-e58d-37fe-9269-cdf54297773b.roa
File: 9f101446-e58d-37fe-9269-cdf54297773b.roa (raw, json)
Hash identifier: ofL2GxAEWcO5K7kyG36wPAjQOUGs5CiDIy4NgL+vd7c=
Subject key identifier: A9:49:9B:B6:2D:B6:EB:5F:9B:95:57:1A:BA:1A:18:DE:79:EA:12:90
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F43285844580EF0AEA47B2E3E467B5F00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9f101446-e58d-37fe-9269-cdf54297773b.roa
Signing time: Tue 26 Dec 2023 14:00:20 +0000
ROA not before: Tue 26 Dec 2023 14:00:20 +0000
ROA not after: Mon 25 Mar 2024 13:00:20 +0000
asID: 11055
IP address blocks: 2604:7a00:fc00::/42 maxlen: 42
Validation: Failed, certificate revoked on Fri 23 Feb 2024 22:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:58:0e:f0:ae:a4:7b:2e:3e:46:7b:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Dec 26 14:00:20 2023 GMT
Not After : Mar 25 13:00:20 2024 GMT
Subject: CN=0e9b0b71-b804-4faa-8e3e-8059412292fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a8:25:e4:5d:6c:24:84:1e:f0:16:5c:cb:82:
53:85:03:6f:05:42:34:06:91:ec:a5:6a:70:8d:c8:
51:88:2d:1b:44:aa:21:aa:60:c4:44:f9:5c:19:15:
13:c7:75:87:04:57:64:aa:a9:33:07:e2:f6:7f:27:
d6:33:c2:9d:91:09:ad:c0:5b:0e:a8:61:fd:1e:8b:
ba:69:6f:69:50:de:b7:f1:be:da:65:b1:8a:95:92:
b5:80:4c:03:05:c5:23:aa:7e:8f:b4:b4:c1:06:6b:
9f:b1:3b:25:84:26:7a:e1:87:63:34:99:76:10:34:
08:8e:2b:44:f8:0f:76:06:01:df:20:8b:d7:56:95:
e5:29:db:05:53:aa:1b:ab:40:fb:ba:45:8e:4a:51:
28:15:fa:74:7d:90:5e:6a:64:46:f2:63:17:2d:70:
e0:e7:09:08:ab:21:0a:37:2b:03:59:e3:ee:69:c3:
21:fa:8f:a9:0d:c1:55:21:dd:c0:55:65:05:7b:28:
c8:f9:c8:2b:55:d9:5a:ec:f7:dc:4c:9f:79:74:47:
a3:e5:78:dc:3a:90:3e:92:3d:09:5f:a0:8b:8f:f6:
34:ff:e3:d8:f9:b3:10:4d:88:2f:ed:9b:84:ea:2c:
c1:f1:28:49:4d:29:77:d0:14:9b:b4:bf:c4:74:60:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:9B:B6:2D:B6:EB:5F:9B:95:57:1A:BA:1A:18:DE:79:EA:12:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9f101446-e58d-37fe-9269-cdf54297773b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7a00:fc00::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:9f:6a:ff:09:a3:2d:ed:2c:c2:5f:44:89:8d:cf:f3:60:43:
06:33:ff:a7:c4:45:ce:87:b2:1b:17:81:54:6b:2f:c1:a1:90:
a7:9b:4a:87:b7:4d:af:ff:66:d5:2a:6f:48:e4:e8:3b:a9:f7:
84:2f:dd:95:2c:56:18:c7:c5:c1:31:28:d3:8d:7c:00:e9:08:
df:ad:92:55:0f:0b:5d:b1:fa:af:3a:14:f2:c5:8a:e9:32:60:
38:db:f6:e0:1a:75:9d:02:73:ac:d2:1c:ec:3b:ec:40:42:ac:
6e:eb:5f:f0:2a:2c:56:fa:59:dd:bb:2a:6b:4f:fa:3c:f5:7a:
7f:2f:47:cc:4c:66:d9:da:ce:94:1e:76:68:e6:22:50:e2:39:
73:39:c0:bf:05:80:64:3c:0e:62:a0:e8:73:ae:6d:da:58:31:
cf:16:49:c1:c7:18:5d:37:72:59:a9:f1:66:42:00:dd:c9:fb:
34:f5:50:25:3b:91:fc:36:51:ea:3f:e1:ba:a5:7b:ad:af:0d:
af:c8:cd:f3:78:d0:70:61:3f:a0:03:ef:9b:a5:bd:7b:fd:5f:
ce:00:3b:0b:1f:79:11:23:c1:92:e4:27:ba:96:32:68:ff:3a:
b4:db:58:14:45:c5:84:99:7e:89:dd:c1:9c:41:6f:2a:e1:db:
cb:d0:a1:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWERYDvCupHsuPkZ7XwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTIzMTIyNjE0MDAyMFoXDTI0MDMyNTEzMDAyMFowLzEtMCsGA1UEAxMk
MGU5YjBiNzEtYjgwNC00ZmFhLThlM2UtODA1OTQxMjI5MmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKgl5F1sJIQe8BZcy4JThQNvBUI0BpHspWpw
jchRiC0bRKohqmDERPlcGRUTx3WHBFdkqqkzB+L2fyfWM8KdkQmtwFsOqGH9Hou6
aW9pUN638b7aZbGKlZK1gEwDBcUjqn6PtLTBBmufsTslhCZ64YdjNJl2EDQIjitE
+A92BgHfIIvXVpXlKdsFU6obq0D7ukWOSlEoFfp0fZBeamRG8mMXLXDg5wkIqyEK
NysDWePuacMh+o+pDcFVId3AVWUFeyjI+cgrVdla7PfcTJ95dEej5XjcOpA+kj0J
X6CLj/Y0/+PY+bMQTYgv7ZuE6izB8ShJTSl30BSbtL/EdGDJWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKlJm7Yttutfm5VXGroaGN556hKQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvOWYxMDE0NDYtZTU4ZC0z
N2ZlLTkyNjktY2RmNTQyOTc3NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgR6APwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE2fav8Joy3tLMJfRImNz/NgQwYz/6fERc6HshsXgVRrL8GhkKeb
Soe3Ta//ZtUqb0jk6Dup94Qv3ZUsVhjHxcExKNONfADpCN+tklUPC12x+q86FPLF
iukyYDjb9uAadZ0Cc6zSHOw77EBCrG7rX/AqLFb6Wd27KmtP+jz1en8vR8xMZtna
zpQedmjmIlDiOXM5wL8FgGQ8DmKg6HOubdpYMc8WScHHGF03clmp8WZCAN3J+zT1
UCU7kfw2Ueo/4bqle62vDa/IzfN40HBhP6AD75ulvXv9X84AOwsfeREjwZLkJ7qW
Mmj/OrTbWBRFxYSZfondwZxBbyrh28vQoW8=
-----END CERTIFICATE-----
Generated at Sat Feb 24 01:01:16 2024 by rpki-client on console-fra.rpki-client.org