Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3b0e9244-2d0f-310c-af70-7871333fa1ea.roa
File: 3b0e9244-2d0f-310c-af70-7871333fa1ea.roa (raw, json)
Hash identifier: Lkcsw2EnV4+1Q2fTnbr5zrYJGGWwKLn1eNhq8gK5LFY=
Subject key identifier: E0:D8:AB:56:32:39:10:9C:B5:65:13:AF:AD:E1:3E:EF:11:AA:C2:F4
Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial: 010D0C9F43285843C98CA77CF9479E93182A8400
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3b0e9244-2d0f-310c-af70-7871333fa1ea.roa
Signing time: Sun 05 Nov 2023 12:53:05 +0000
ROA not before: Sun 05 Nov 2023 12:53:05 +0000
ROA not after: Sat 03 Feb 2024 12:53:05 +0000
asID: 56884
IP address blocks: 23.247.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 16:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c9:8c:a7:7c:f9:47:9e:93:18:2a:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Validity
Not Before: Nov 5 12:53:05 2023 GMT
Not After : Feb 3 12:53:05 2024 GMT
Subject: CN=06490383-58cb-4687-9c2d-8fda855ae496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:67:ff:85:fa:ab:96:7b:2e:0e:79:3c:05:
b4:78:00:ec:71:e1:b7:51:ff:87:39:d9:0b:9a:54:
ba:d0:23:da:be:c7:9c:3c:bf:9a:c2:31:5b:c9:0d:
cc:d8:e8:46:51:66:ec:2e:a4:f8:ce:0c:4c:da:4b:
97:13:17:b5:ff:ef:9f:c0:12:6c:d9:c0:6b:2d:ae:
21:f3:c7:4c:17:ef:04:8b:83:7a:2e:fd:b8:78:61:
71:0c:ee:21:4c:57:37:f2:70:01:aa:da:e1:24:18:
80:a9:9b:ba:64:84:5f:f0:5c:2c:9b:50:3b:15:69:
90:08:19:bb:0a:53:b5:c0:e2:aa:92:8f:37:1a:34:
65:ed:8a:f1:9b:69:7b:46:b9:1b:71:c3:d3:de:e9:
08:2f:a0:22:72:2f:04:67:70:01:57:a8:17:c6:ee:
07:37:11:c5:fd:05:0c:ff:8e:2f:4c:77:df:75:98:
23:61:b9:0e:55:34:e9:d0:44:6b:15:9d:24:c7:ef:
6b:dd:f9:5c:05:43:b3:48:a7:6c:b4:b1:22:c8:75:
44:5c:c6:71:84:46:96:da:d2:c9:9b:d2:bb:a7:5d:
91:5d:b0:a9:1f:c2:e9:72:84:09:e3:4a:a5:e7:ed:
7f:64:ae:7d:80:6c:cf:cd:91:8d:c4:6c:7d:ea:1c:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:AB:56:32:39:10:9C:B5:65:13:AF:AD:E1:3E:EF:11:AA:C2:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3b0e9244-2d0f-310c-af70-7871333fa1ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
X509v3 Authority Key Identifier:
keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:60:9f:c3:4f:a8:0a:85:78:ee:df:4d:f3:cf:ac:40:87:3b:
5a:a3:ba:80:29:60:58:56:7b:b5:23:f8:26:91:02:b7:f5:22:
dd:80:42:5e:b5:11:b5:66:f7:81:3f:e7:23:6e:09:79:1f:bd:
d7:25:27:b7:de:17:6c:db:38:47:f2:2a:0c:7d:ff:9e:c4:8b:
9b:3c:9d:6a:16:04:2c:53:38:62:ec:65:26:69:dd:50:bf:1c:
c6:69:23:58:9a:32:e8:bb:ca:97:cd:04:fb:ee:8b:f7:74:2b:
97:81:20:7a:d0:dc:1a:7e:35:62:df:53:ed:49:8e:bf:e0:c5:
31:c0:fd:e6:94:c3:aa:ba:dd:fe:15:16:b0:73:38:86:59:3e:
e1:e7:46:a0:52:4e:b0:4e:2a:6c:13:f0:33:2a:62:16:8f:41:
8e:eb:7c:e6:93:ff:6f:14:a1:71:1f:a7:bb:c2:a3:57:dd:5e:
48:ca:32:8b:fb:46:96:63:c4:0a:7e:e8:f5:83:38:33:40:96:
18:9d:f9:20:80:38:0b:e1:f6:01:d7:09:8b:4d:1a:7f:3a:32:
f9:d0:eb:03:6e:22:bd:39:79:5f:ba:c0:b1:93:43:20:e7:f4:
b1:95:b4:93:a8:b3:7f:6c:4a:96:ba:41:d5:ed:bf:3e:1d:61:
bd:9b:01:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPJjKd8+UeekxgqhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm
ZWJhMB4XDTIzMTEwNTEyNTMwNVoXDTI0MDIwMzEyNTMwNVowLzEtMCsGA1UEAxMk
MDY0OTAzODMtNThjYi00Njg3LTljMmQtOGZkYTg1NWFlNDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc1n/4X6q5Z7Lg55PAW0eADsceG3Uf+HOdkL
mlS60CPavsecPL+awjFbyQ3M2OhGUWbsLqT4zgxM2kuXExe1/++fwBJs2cBrLa4h
88dMF+8Ei4N6Lv24eGFxDO4hTFc38nABqtrhJBiAqZu6ZIRf8Fwsm1A7FWmQCBm7
ClO1wOKqko83GjRl7Yrxm2l7RrkbccPT3ukIL6Aici8EZ3ABV6gXxu4HNxHF/QUM
/44vTHffdZgjYbkOVTTp0ERrFZ0kx+9r3flcBUOzSKdstLEiyHVEXMZxhEaW2tLJ
m9K7p12RXbCpH8LpcoQJ40ql5+1/ZK59gGzPzZGNxGx96hwulQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODYq1YyORCctWUTr63hPu8RqsL0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4
NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvM2IwZTkyNDQtMmQwZi0z
MTBjLWFmNzAtNzg3MTMzM2ZhMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy
MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh
ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5
NzMwYWZlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/e1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNgn8NPqAqFeO7fTfPPrECHO1qjuoApYFhWe7Uj+CaRArf1It2AQl61
EbVm94E/5yNuCXkfvdclJ7feF2zbOEfyKgx9/57Ei5s8nWoWBCxTOGLsZSZp3VC/
HMZpI1iaMui7ypfNBPvui/d0K5eBIHrQ3Bp+NWLfU+1Jjr/gxTHA/eaUw6q63f4V
FrBzOIZZPuHnRqBSTrBOKmwT8DMqYhaPQY7rfOaT/28UoXEfp7vCo1fdXkjKMov7
RpZjxAp+6PWDODNAlhid+SCAOAvh9gHXCYtNGn86MvnQ6wNuIr05eV+6wLGTQyDn
9LGVtJOos39sSpa6QdXtvz4dYb2bAeI=
-----END CERTIFICATE-----
Generated at Thu Jan 18 20:55:01 2024 by rpki-client on console-ams.rpki-client.org