Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/0d21f244-26a8-3a11-b8ae-1774b857f0e8.roa
File: 0d21f244-26a8-3a11-b8ae-1774b857f0e8.roa (raw, json)
Hash identifier: rQKiVEuJLkEfy2LMiEb2gEmYLymDfhWcxMyq1lw86pw=
Subject key identifier: FF:D1:22:87:67:B5:F0:5B:3D:8B:8B:4B:A1:E1:D7:9C:74:77:C8:E4
Certificate issuer: /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial: 010D0C9F43285843852A767033273D0A8747D480
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/0d21f244-26a8-3a11-b8ae-1774b857f0e8.roa
Signing time: Thu 12 Oct 2023 01:00:15 +0000
ROA not before: Thu 12 Oct 2023 01:00:15 +0000
ROA not after: Wed 10 Jan 2024 02:00:15 +0000
asID: 1239
IP address blocks: 199.101.170.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:85:2a:76:70:33:27:3d:0a:87:47:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
Validity
Not Before: Oct 12 01:00:15 2023 GMT
Not After : Jan 10 02:00:15 2024 GMT
Subject: CN=9015dc57-4c3a-490b-bd42-33da7b93ea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:31:d3:cf:2d:be:fd:4d:3c:cb:ed:f2:49:
5e:dd:65:12:39:24:55:8d:87:7a:10:fc:50:6a:0a:
cc:cc:3f:f7:d6:09:d3:d7:24:6f:0d:97:4e:13:7f:
f6:5c:9a:a2:4b:f3:2e:d0:8a:4e:34:91:89:7e:8a:
34:7a:bb:37:70:ec:98:8f:0e:9b:5a:56:61:d8:a8:
cd:9f:00:32:2a:7e:6e:e3:26:4d:1c:52:d5:08:fb:
a5:5a:26:5a:03:9a:37:ec:14:8d:7c:bd:ec:3f:5c:
8e:04:1b:e9:ef:e2:0d:61:a3:33:88:d4:35:7b:d9:
25:9e:2c:c5:f2:d8:92:51:fb:61:69:49:0f:f5:7a:
f4:cc:0c:68:e8:d9:35:15:11:94:6e:35:0a:3e:7c:
87:90:bf:5b:d5:18:35:ab:b6:f7:c7:ae:3a:0a:4b:
fa:5e:3d:0f:91:8c:1a:1d:ff:c7:eb:34:41:0f:70:
0b:e9:cc:46:e9:2f:ca:6d:87:78:b8:85:e6:28:c1:
1b:14:26:77:bc:8e:85:f8:d1:c0:18:07:9c:2b:62:
13:e6:10:00:52:f6:b7:f9:ce:db:d0:8f:fc:10:f6:
fb:8f:13:d5:0d:45:4a:c8:6f:3e:50:69:1f:88:8e:
4c:35:32:b3:37:f4:de:27:0b:59:08:69:1e:02:7e:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:22:87:67:B5:F0:5B:3D:8B:8B:4B:A1:E1:D7:9C:74:77:C8:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/0d21f244-26a8-3a11-b8ae-1774b857f0e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl
X509v3 Authority Key Identifier:
keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:af:4a:96:d8:eb:4a:42:0f:e7:da:f3:77:32:db:14:b5:5f:
d2:f3:60:e3:ea:52:99:46:bf:d8:7f:93:d1:05:30:d5:59:cd:
88:61:e9:2d:2c:e6:71:26:16:83:56:8c:1b:92:e7:3e:f1:5f:
31:bc:1b:7d:e7:98:9c:3e:5a:c9:e4:84:9c:e0:4e:06:f3:f5:
27:1a:c2:9b:2d:ce:b5:69:dd:b0:71:de:f4:a1:20:6f:69:d9:
79:8a:90:fd:b5:6d:84:12:4f:53:21:fa:26:a1:6c:c7:2a:3f:
46:b2:53:b3:2e:8d:b4:6b:cc:9c:24:36:59:19:b4:7d:6b:93:
d3:bc:b9:a2:b0:80:d9:74:82:a4:b7:15:05:d1:f1:3b:b1:31:
73:2c:9e:fe:50:47:56:66:6d:fc:2b:05:5b:1f:e4:27:ee:6c:
11:64:e0:2e:34:35:40:7d:ab:72:5e:cc:37:b6:89:8e:2c:f7:
34:9f:70:59:bf:57:10:11:21:db:cd:5d:8f:a5:26:49:8d:b4:
79:d8:0e:2d:be:84:96:34:80:89:45:c8:a6:14:36:c1:e7:0b:
a4:09:74:8c:68:75:0f:fb:3e:d0:8d:5f:90:98:05:c9:88:fc:
05:e7:8d:ab:69:6c:2a:8b:44:fa:18:07:19:1f:39:9f:14:a6:
60:09:63:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOFKnZwMyc9CodH1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ5OTRhZmYtNzllMy00ODAwLTg3NWEtZjRhOTUxZDdh
ZjI4MB4XDTIzMTAxMjAxMDAxNVoXDTI0MDExMDAyMDAxNVowLzEtMCsGA1UEAxMk
OTAxNWRjNTctNGMzYS00OTBiLWJkNDItMzNkYTdiOTNlYTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jYx088tvv1NPMvt8kle3WUSOSRVjYd6EPxQ
agrMzD/31gnT1yRvDZdOE3/2XJqiS/Mu0IpONJGJfoo0ers3cOyYjw6bWlZh2KjN
nwAyKn5u4yZNHFLVCPulWiZaA5o37BSNfL3sP1yOBBvp7+INYaMziNQ1e9klnizF
8tiSUfthaUkP9Xr0zAxo6Nk1FRGUbjUKPnyHkL9b1Rg1q7b3x646Ckv6Xj0PkYwa
Hf/H6zRBD3AL6cxG6S/KbYd4uIXmKMEbFCZ3vI6F+NHAGAecK2IT5hAAUva3+c7b
0I/8EPb7jxPVDUVKyG8+UGkfiI5MNTKzN/TeJwtZCGkeAn5+RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/RIodntfBbPYuLS6Hh15x0d8jkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNDk5
NGFmZi03OWUzLTQ4MDAtODc1YS1mNGE5NTFkN2FmMjgvMGQyMWYyNDQtMjZhOC0z
YTExLWI4YWUtMTc3NGI4NTdmMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTQ5OTRhZmYtNzllMy00ODAwLTg3
NWEtZjRhOTUxZDdhZjI4L2E0OTk0YWZmLTc5ZTMtNDgwMC04NzVhLWY0YTk1MWQ3
YWYyOC5jcmwwHwYDVR0jBBgwFoAUSkFEwjdVMpuC4ogrUYqTfuZ0rz0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNDk5NGFmZi03OWUzLTQ4MDAtODc1YS1mNGE5
NTFkN2FmMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGvSpbY60pCD+fa83cy2xS1X9LzYOPqUplGv9h/k9EFMNVZzYhh6S0s
5nEmFoNWjBuS5z7xXzG8G33nmJw+WsnkhJzgTgbz9ScawpstzrVp3bBx3vShIG9p
2XmKkP21bYQST1Mh+iahbMcqP0ayU7MujbRrzJwkNlkZtH1rk9O8uaKwgNl0gqS3
FQXR8TuxMXMsnv5QR1ZmbfwrBVsf5CfubBFk4C40NUB9q3JezDe2iY4s9zSfcFm/
VxARIdvNXY+lJkmNtHnYDi2+hJY0gIlFyKYUNsHnC6QJdIxodQ/7PtCNX5CYBcmI
/AXnjatpbCqLRPoYBxkfOZ8UpmAJYyc=
-----END CERTIFICATE-----
Generated at Thu Oct 19 01:54:40 2023 by rpki-client on console-fra.rpki-client.org