Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a2f44111-6596-3846-9264-d3f215ff223d.roa
File: a2f44111-6596-3846-9264-d3f215ff223d.roa (raw, json)
Hash identifier: mjX9+6m7VS0637XCO+aAvKJhIesmdvVeiJIq+5ryPaY=
Subject key identifier: B0:67:29:D3:07:35:79:3E:06:05:D5:E3:F0:39:C3:D7:A0:4C:87:B4
Certificate issuer: /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial: 010D0C9F43285845B83797C2F78FB903957F2880
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a2f44111-6596-3846-9264-d3f215ff223d.roa
Signing time: Tue 30 Apr 2024 17:26:49 +0000
ROA not before: Tue 30 Apr 2024 17:26:49 +0000
ROA not after: Mon 29 Jul 2024 17:26:49 +0000
asID: 398020
IP address blocks: 174.136.212.0/24 maxlen: 24
174.136.213.0/24 maxlen: 24
174.136.214.0/24 maxlen: 24
174.136.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 03:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b8:37:97:c2:f7:8f:b9:03:95:7f:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Validity
Not Before: Apr 30 17:26:49 2024 GMT
Not After : Jul 29 17:26:49 2024 GMT
Subject: CN=84776c36-8090-4e40-94fc-765aaf3f8e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:79:fb:a9:54:87:8b:a0:96:23:a9:bc:2d:
f1:e3:6c:83:29:c3:1f:5e:3a:51:b4:0d:84:f6:19:
97:7e:ad:99:1f:e4:3d:fd:53:15:8c:79:74:12:b3:
0f:78:0c:cb:f4:af:61:df:90:a1:60:42:16:ef:dc:
3d:70:81:f0:36:da:d6:ca:78:92:5e:8c:bd:a4:bf:
d5:22:c4:f2:44:e1:55:77:9a:ea:8b:47:fd:80:08:
6f:cf:9f:ab:78:b9:ed:c0:d0:95:6e:07:b3:e3:9f:
76:9f:69:8a:fa:91:4b:86:ca:26:fd:ab:20:98:4d:
86:76:83:0b:de:a5:fe:be:9b:38:50:9b:ae:12:d5:
4e:cd:7b:81:a5:15:e0:de:7c:64:e1:37:53:b8:25:
b7:42:e5:75:81:38:c3:0a:53:85:7d:7f:f2:6c:f8:
91:60:62:6d:e4:56:e7:d4:2e:af:73:a4:a8:00:83:
41:14:a1:a6:13:f3:93:0f:c3:57:84:f2:3f:a6:9f:
c9:b9:3a:91:13:72:5e:07:8e:b4:4d:0a:94:55:b3:
4c:6d:75:01:65:0a:99:ef:bf:ee:44:52:59:b5:ba:
27:35:43:75:70:1e:7d:89:e8:e4:41:8f:93:17:18:
af:c3:de:5f:2c:f7:f3:16:6f:a4:4e:4e:e0:87:5f:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:67:29:D3:07:35:79:3E:06:05:D5:E3:F0:39:C3:D7:A0:4C:87:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a2f44111-6596-3846-9264-d3f215ff223d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
X509v3 Authority Key Identifier:
keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:ce:63:8e:29:e5:5f:df:27:61:92:4d:76:63:2c:51:5d:24:
39:a5:cd:4c:da:04:cd:60:9a:1e:3f:88:c1:c5:16:ca:e1:59:
60:5f:69:d0:a5:d5:d7:be:9d:bc:f7:16:c2:49:0f:7e:5f:ac:
2a:46:a7:5a:3f:88:a6:f4:cd:af:1a:7c:8c:f2:91:48:7d:36:
4a:3f:6e:59:01:ea:d6:f7:2f:d3:e9:00:87:d2:fa:6e:a8:2a:
9f:b5:b0:ef:72:c5:e3:2a:48:e8:b1:70:d4:14:04:cd:d2:71:
33:12:3d:87:2c:5e:69:d2:7c:14:80:a5:c7:69:90:94:fb:19:
be:4f:7e:3e:23:2e:3b:fc:87:a3:31:e3:63:8e:cb:4c:3a:86:
25:0b:dc:1c:84:d9:9e:76:55:0a:67:e1:6c:ca:e3:39:18:64:
4e:b3:1f:84:82:52:91:da:f6:de:ab:4c:b9:36:6e:22:5f:60:
09:97:aa:d3:66:4d:c1:a7:4f:fe:20:e8:e8:1e:37:44:ed:3a:
c2:06:ec:b0:5e:d5:ba:76:b7:d1:fb:d8:11:db:bd:e8:55:a6:
3e:c6:03:18:bc:ea:13:4d:be:b6:96:41:b2:66:f2:c3:70:d3:
60:08:77:14:7e:fb:6a:26:7b:c7:71:06:bb:1e:ca:86:3f:9c:
ed:26:e6:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW4N5fC94+5A5V/KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI0YTFjOGEtZDQwYi00Mzc4LWE5YzYtZjNiNGQwOTE5
ZGYwMB4XDTI0MDQzMDE3MjY0OVoXDTI0MDcyOTE3MjY0OVowLzEtMCsGA1UEAxMk
ODQ3NzZjMzYtODA5MC00ZTQwLTk0ZmMtNzY1YWFmM2Y4ZTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynt5+6lUh4ugliOpvC3x42yDKcMfXjpRtA2E
9hmXfq2ZH+Q9/VMVjHl0ErMPeAzL9K9h35ChYEIW79w9cIHwNtrWyniSXoy9pL/V
IsTyROFVd5rqi0f9gAhvz5+reLntwNCVbgez4592n2mK+pFLhsom/asgmE2GdoML
3qX+vps4UJuuEtVOzXuBpRXg3nxk4TdTuCW3QuV1gTjDClOFfX/ybPiRYGJt5Fbn
1C6vc6SoAINBFKGmE/OTD8NXhPI/pp/JuTqRE3JeB460TQqUVbNMbXUBZQqZ77/u
RFJZtbonNUN1cB59iejkQY+TFxivw95fLPfzFm+kTk7gh19fYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBnKdMHNXk+BgXV4/A5w9egTIe0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYjRh
MWM4YS1kNDBiLTQzNzgtYTljNi1mM2I0ZDA5MTlkZjAvYTJmNDQxMTEtNjU5Ni0z
ODQ2LTkyNjQtZDNmMjE1ZmYyMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWI0YTFjOGEtZDQwYi00Mzc4LWE5
YzYtZjNiNGQwOTE5ZGYwL2FiNGExYzhhLWQ0MGItNDM3OC1hOWM2LWYzYjRkMDkx
OWRmMC5jcmwwHwYDVR0jBBgwFoAUYJHkR/5FvxB8QUF+z+uWJ05NrA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hYjRhMWM4YS1kNDBiLTQzNzgtYTljNi1mM2I0
ZDA5MTlkZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrojUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDOY44p5V/fJ2GSTXZjLFFdJDmlzUzaBM1gmh4/iMHFFsrhWWBfadCl
1de+nbz3FsJJD35frCpGp1o/iKb0za8afIzykUh9Nko/blkB6tb3L9PpAIfS+m6o
Kp+1sO9yxeMqSOixcNQUBM3ScTMSPYcsXmnSfBSApcdpkJT7Gb5Pfj4jLjv8h6Mx
42OOy0w6hiUL3ByE2Z52VQpn4WzK4zkYZE6zH4SCUpHa9t6rTLk2biJfYAmXqtNm
TcGnT/4g6OgeN0TtOsIG7LBe1bp2t9H72BHbvehVpj7GAxi86hNNvraWQbJm8sNw
02AIdxR++2ome8dxBrseyoY/nO0m5oY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org