Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f334f2d1-ebcd-335b-bcd5-bc96af772fee.roa
File: f334f2d1-ebcd-335b-bcd5-bc96af772fee.roa (raw, json)
Hash identifier: 7mVNn30+Xiw4HtAQTpSWXebAOKDQxM+X8PJh2EbzEe4=
Subject key identifier: 11:34:85:84:D5:12:F5:BB:C7:5B:CB:59:F1:1B:6E:29:24:03:EC:A1
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772FA1FEB66772D1A78E3C40
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f334f2d1-ebcd-335b-bcd5-bc96af772fee.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 21547
IP address blocks: 74.220.224.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:a1:fe:b6:67:72:d1:a7:8e:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=ba6a1f78-136f-4b76-8c3e-8c69c802e352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:37:a5:c5:21:30:f0:d1:64:a1:75:db:08:
47:49:c0:fd:88:d7:b2:cd:6b:e5:fb:a4:b5:bd:49:
1f:78:79:26:8e:22:40:b7:94:c8:cd:db:ba:d2:5a:
8e:e3:30:48:9a:ce:76:c6:18:bb:fd:44:8e:34:9c:
59:07:8a:65:7c:df:03:50:d5:bd:21:c8:0c:5c:2f:
0b:4c:77:67:bd:3a:a4:80:70:25:00:24:e4:72:a4:
cc:fc:ce:ea:ea:a3:9e:97:a0:dc:cc:0e:b2:a5:78:
bb:fd:94:6e:80:30:25:6b:3a:39:6d:71:5c:80:c2:
55:b9:5e:8c:56:a8:6b:3d:4b:9a:3e:87:ac:35:95:
a6:ba:72:e9:12:a9:6a:f3:46:ad:ea:6a:97:da:13:
ac:d5:0f:21:69:7c:97:85:38:3f:df:d3:74:d2:ea:
d2:fb:d2:ed:51:8d:2f:c3:b1:89:ea:93:43:da:be:
4c:b9:1b:fc:94:f9:bb:50:e6:12:b6:a4:95:31:43:
55:33:27:be:1d:27:0a:71:84:86:af:2b:01:d7:ca:
cd:27:db:68:21:bd:14:4f:29:db:cc:a4:4e:f0:cf:
60:72:36:dc:69:89:eb:e0:ee:ea:0e:74:9c:00:6b:
0e:76:cf:68:85:dd:f9:19:40:88:77:37:33:78:15:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:34:85:84:D5:12:F5:BB:C7:5B:CB:59:F1:1B:6E:29:24:03:EC:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f334f2d1-ebcd-335b-bcd5-bc96af772fee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
74.220.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:61:49:db:b4:58:fc:8e:dd:b0:3b:a6:34:61:39:ff:07:a5:
5e:d5:f1:4c:30:00:6d:5a:00:a0:2d:19:22:95:26:62:c8:d2:
00:05:f0:91:01:a1:28:df:f4:59:f4:bd:75:42:30:f2:69:ff:
6f:ec:a5:e6:cf:e0:4b:6f:e7:c3:c3:18:34:9b:9f:0b:94:63:
e2:64:d4:32:f5:24:39:c6:b3:f7:08:91:49:1f:f3:d0:0e:17:
91:a7:26:d3:a4:3c:f3:f6:a3:f8:fd:2d:49:80:ec:f7:3b:44:
76:e6:31:62:01:9f:7b:04:d1:b2:1e:cc:e9:a1:46:47:de:bb:
91:fd:c5:65:b2:38:7f:9a:2d:bd:ce:34:4f:b4:13:7f:c7:65:
e6:c1:6d:b0:ae:93:e4:6e:87:5e:0f:c2:9a:2b:b3:4b:88:20:
60:de:28:d7:97:97:21:ce:13:00:7f:16:47:0a:d6:2e:ac:05:
d7:62:1f:be:6c:49:d4:fd:5c:50:b8:a2:cd:19:d8:60:cb:84:
46:00:96:07:de:da:43:90:1c:b4:bf:0b:7d:21:19:29:7f:fb:
0c:32:a7:ab:72:c8:d1:9b:4b:5f:77:92:af:93:10:e2:5b:4f:
c4:e4:e1:e4:57:40:f4:6b:7c:61:9a:83:ef:93:1b:ee:f8:dc:
01:9e:49:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEB3L6H+tmdy0aeOPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTIzMDEwMzEyMDAwMFoXDTI0MDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YmE2YTFmNzgtMTM2Zi00Yjc2LThjM2UtOGM2OWM4MDJlMzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTk3pcUhMPDRZKF12whHScD9iNeyzWvl+6S1
vUkfeHkmjiJAt5TIzdu60lqO4zBIms52xhi7/USONJxZB4plfN8DUNW9IcgMXC8L
THdnvTqkgHAlACTkcqTM/M7q6qOel6DczA6ypXi7/ZRugDAlazo5bXFcgMJVuV6M
VqhrPUuaPoesNZWmunLpEqlq80at6mqX2hOs1Q8haXyXhTg/39N00urS+9LtUY0v
w7GJ6pND2r5MuRv8lPm7UOYStqSVMUNVMye+HScKcYSGrysB18rNJ9toIb0UTynb
zKRO8M9gcjbcaYnr4O7qDnScAGsOds9ohd35GUCIdzczeBWCeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBE0hYTVEvW7x1vLWfEbbikkA+yhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZjMzNGYyZDEtZWJjZC0z
MzViLWJjZDUtYmM5NmFmNzcyZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEStzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1hSdu0WPyO3bA7pjRhOf8HpV7V8UwwAG1aAKAtGSKVJmLI0gAF8JEB
oSjf9Fn0vXVCMPJp/2/spebP4Etv58PDGDSbnwuUY+Jk1DL1JDnGs/cIkUkf89AO
F5GnJtOkPPP2o/j9LUmA7Pc7RHbmMWIBn3sE0bIezOmhRkfeu5H9xWWyOH+aLb3O
NE+0E3/HZebBbbCuk+Ruh14Pwpors0uIIGDeKNeXlyHOEwB/FkcK1i6sBddiH75s
SdT9XFC4os0Z2GDLhEYAlgfe2kOQHLS/C30hGSl/+wwyp6tyyNGbS193kq+TEOJb
T8Tk4eRXQPRrfGGag++TG+743AGeSew=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org