Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/444c4b24-1c59-383a-be6b-ba2f255fac1d.roa
File: 444c4b24-1c59-383a-be6b-ba2f255fac1d.roa (raw, json)
Hash identifier: mPDA4MrtPROsW7UAe6Iy1llFq2IpYQ74Gj3jqr0DdAk=
Subject key identifier: CD:B7:97:08:9B:44:AE:2F:F1:AF:EB:B4:C4:3C:9E:96:23:D1:79:A2
Certificate issuer: /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial: 010D0C9F432858445C3EEADD087D6840D7618D00
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/444c4b24-1c59-383a-be6b-ba2f255fac1d.roa
Signing time: Thu 28 Dec 2023 02:00:15 +0000
ROA not before: Thu 28 Dec 2023 02:00:15 +0000
ROA not after: Wed 27 Mar 2024 01:00:15 +0000
asID: 7018
IP address blocks: 65.75.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 17:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:5c:3e:ea:dd:08:7d:68:40:d7:61:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Validity
Not Before: Dec 28 02:00:15 2023 GMT
Not After : Mar 27 01:00:15 2024 GMT
Subject: CN=ac435a5b-0f1a-4ff9-ab88-7aea3d72509e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:f9:f2:a4:ab:7c:0a:2a:2f:05:52:cc:b3:
80:35:ce:ec:c7:5a:bc:da:20:3e:42:d2:68:88:f5:
66:6f:bf:11:24:be:32:aa:79:2a:8b:2f:64:ca:9c:
2e:ff:4d:2e:8a:97:c4:3a:8a:ba:1a:8c:15:74:ef:
74:72:38:48:39:a1:17:95:c0:b3:64:41:ab:7b:b4:
7f:f7:51:37:32:93:ba:81:32:a5:7c:d6:5b:89:07:
bc:65:23:37:19:c9:83:e3:73:24:44:e8:27:c5:bf:
f6:2e:40:5f:93:4e:94:99:22:a6:28:3d:d8:54:2b:
ea:5a:d6:94:10:e1:df:99:c0:36:8c:4f:0a:9c:a8:
04:a2:a4:40:3b:7e:19:f3:11:51:c7:32:cf:24:b5:
22:d2:7b:db:e5:15:c5:4f:e7:66:d1:72:7b:12:f0:
52:2d:91:fb:eb:02:69:4c:a7:27:c8:ca:c0:2f:7e:
ed:4a:1d:a7:ad:11:f2:15:17:bc:79:f3:f5:bc:dc:
c2:0c:7a:07:a5:b7:91:b0:c5:57:94:b7:db:dc:22:
46:40:cb:8b:ca:89:f7:8e:c1:72:63:e4:de:a6:94:
3d:ef:b0:1a:74:67:59:b7:8a:bc:68:b5:15:16:dd:
89:4d:b2:60:ff:75:68:97:cc:50:fb:51:a8:6b:d5:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B7:97:08:9B:44:AE:2F:F1:AF:EB:B4:C4:3C:9E:96:23:D1:79:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/444c4b24-1c59-383a-be6b-ba2f255fac1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
X509v3 Authority Key Identifier:
keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.75.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:1b:3d:d6:65:93:d0:5c:bd:07:86:c2:50:15:b1:ec:9b:14:
2f:b8:65:15:e0:6f:0c:33:43:51:06:1d:1b:14:5a:87:6e:8b:
2b:4c:34:bd:3c:33:04:b3:6c:e7:d9:11:fd:b8:01:47:e1:59:
ef:c7:93:c0:6e:a1:8a:1a:af:48:db:c4:32:31:66:2b:69:5f:
db:3a:4b:c2:11:19:e3:04:1d:db:92:f7:9f:ef:9d:dc:7b:03:
49:ad:cc:18:6f:61:ac:31:90:8f:88:6f:b2:0b:5a:2e:6d:8e:
f3:fd:fe:83:4c:50:94:b5:67:58:bb:a1:9a:5a:f5:36:9d:20:
fe:a0:15:cd:18:b0:66:57:a0:16:ae:a1:04:93:53:48:42:43:
04:fb:42:7e:b5:52:6f:65:b3:84:2e:27:c1:89:7b:d3:be:a6:
6b:40:b2:35:47:6c:5a:4d:48:3b:88:02:38:52:10:34:33:7f:
9d:5c:16:de:34:54:53:ab:e0:f2:0b:21:8e:81:f9:cc:6e:79:
ee:44:b6:ac:24:c0:c6:9a:18:a3:50:b6:87:30:4d:ec:24:3c:
3a:bd:77:b2:86:be:b4:d4:e2:df:c7:97:38:fb:97:f7:1c:4d:
87:80:de:d7:e5:70:41:04:ac:22:18:99:f5:55:ec:40:4d:7d:
ac:20:7f:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERcPurdCH1oQNdhjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJiYmI2MWYtZmMxNy00ZDk2LWI5YzMtODg0MGJjZGQ0
MWMyMB4XDTIzMTIyODAyMDAxNVoXDTI0MDMyNzAxMDAxNVowLzEtMCsGA1UEAxMk
YWM0MzVhNWItMGYxYS00ZmY5LWFiODgtN2FlYTNkNzI1MDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMj58qSrfAoqLwVSzLOANc7sx1q82iA+QtJo
iPVmb78RJL4yqnkqiy9kypwu/00uipfEOoq6GowVdO90cjhIOaEXlcCzZEGre7R/
91E3MpO6gTKlfNZbiQe8ZSM3GcmD43MkROgnxb/2LkBfk06UmSKmKD3YVCvqWtaU
EOHfmcA2jE8KnKgEoqRAO34Z8xFRxzLPJLUi0nvb5RXFT+dm0XJ7EvBSLZH76wJp
TKcnyMrAL37tSh2nrRHyFRe8efP1vNzCDHoHpbeRsMVXlLfb3CJGQMuLyon3jsFy
Y+TeppQ977AadGdZt4q8aLUVFt2JTbJg/3Vol8xQ+1Goa9UFbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM23lwibRK4v8a/rtMQ8npYj0XmiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80YmJi
YjYxZi1mYzE3LTRkOTYtYjljMy04ODQwYmNkZDQxYzIvNDQ0YzRiMjQtMWM1OS0z
ODNhLWJlNmItYmEyZjI1NWZhYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGJiYmI2MWYtZmMxNy00ZDk2LWI5
YzMtODg0MGJjZGQ0MWMyLzRiYmJiNjFmLWZjMTctNGQ5Ni1iOWMzLTg4NDBiY2Rk
NDFjMi5jcmwwHwYDVR0jBBgwFoAUYA/TZQdk//P1Rg4iJtc7WhIoGOowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YmJiYjYxZi1mYzE3LTRkOTYtYjljMy04ODQw
YmNkZDQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQUvLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwbPdZlk9BcvQeGwlAVseybFC+4ZRXgbwwzQ1EGHRsUWoduiytMNL08
MwSzbOfZEf24AUfhWe/Hk8BuoYoar0jbxDIxZitpX9s6S8IRGeMEHduS95/vndx7
A0mtzBhvYawxkI+Ib7ILWi5tjvP9/oNMUJS1Z1i7oZpa9TadIP6gFc0YsGZXoBau
oQSTU0hCQwT7Qn61Um9ls4QuJ8GJe9O+pmtAsjVHbFpNSDuIAjhSEDQzf51cFt40
VFOr4PILIY6B+cxuee5EtqwkwMaaGKNQtocwTewkPDq9d7KGvrTU4t/Hlzj7l/cc
TYeA3tflcEEErCIYmfVV7EBNfawgf+0=
-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:28 2024 by rpki-client on console-fra.rpki-client.org