Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61586de9-2a06-3c2c-aa7f-51667e49805b.roa
File: 61586de9-2a06-3c2c-aa7f-51667e49805b.roa (raw, json)
Hash identifier: A4FtVvlFXB9s9xsBRE0aQbRP0on3khoS0b8iTIs4Yr8=
Subject key identifier: 0A:E3:33:FD:28:40:42:F6:87:0A:53:9E:03:87:31:35:ED:FE:BA:73
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328583D73CE3CAF56833C2E53CA9A40
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61586de9-2a06-3c2c-aa7f-51667e49805b.roa
Signing time: Tue 18 May 2021 04:00:00 +0000
ROA not before: Tue 18 May 2021 04:00:00 +0000
ROA not after: Sat 06 Jul 2030 04:00:00 +0000
asID: 9009
IP address blocks: 104.251.86.0/24 maxlen: 24
104.251.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:73:ce:3c:af:56:83:3c:2e:53:ca:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: May 18 04:00:00 2021 GMT
Not After : Jul 6 04:00:00 2030 GMT
Subject: CN=be9d02da-8dfe-4243-97b6-1e116a5178ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:0d:f4:36:99:b2:37:62:ea:e3:71:c0:a8:
45:ed:99:af:a3:99:7a:89:f6:e2:ba:a1:bb:15:24:
99:ee:c9:75:c5:50:b5:01:35:60:0c:86:fd:fe:8d:
29:28:69:92:6c:35:d7:cd:16:95:d4:b6:62:6e:34:
f8:a5:1c:0d:f4:5b:3e:9b:65:64:07:98:2c:ec:17:
ef:6c:90:9d:6e:f1:1a:f7:02:75:8f:df:04:6f:38:
be:c8:64:21:a5:aa:3b:5a:6e:d3:a6:be:8e:90:04:
b7:58:57:8e:db:17:90:30:57:12:3a:d0:61:43:d1:
64:b3:45:5a:79:74:d9:7d:eb:64:24:fa:ee:79:a2:
d3:cd:dc:87:1b:3b:dc:f1:a9:ca:f1:07:66:02:9c:
19:4e:46:89:57:af:2e:12:33:ba:e3:a4:64:ff:d7:
c1:d0:89:b4:23:22:00:22:8f:e1:b0:90:b3:43:40:
d7:56:0b:8e:93:b9:c2:7e:51:de:c0:b6:a7:8d:5b:
09:2d:ef:1c:87:77:d9:28:f2:5b:3a:43:27:01:7c:
48:e9:df:da:f2:b9:06:c7:f4:10:1c:bc:e3:c4:a0:
c7:5d:37:87:e3:68:d6:a1:31:c0:4a:38:da:f0:b3:
81:2a:4a:e6:78:12:37:e5:ad:44:64:f0:24:25:3b:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:33:FD:28:40:42:F6:87:0A:53:9E:03:87:31:35:ED:FE:BA:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61586de9-2a06-3c2c-aa7f-51667e49805b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.86.0/24
104.251.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:c3:43:ce:71:ce:22:19:a6:78:e6:84:36:21:a9:3d:ff:68:
73:94:f5:a1:57:ea:32:da:38:f0:90:91:eb:c9:9e:65:70:65:
5d:ac:cd:1b:50:05:7b:78:b0:cd:63:63:e0:b9:72:cc:c3:44:
f6:00:ae:38:1b:b9:5a:6c:f1:8c:2f:6f:a8:17:e9:cc:2c:6e:
e1:49:cc:f9:16:99:6a:22:13:a8:fd:c7:5e:e8:fa:9a:7f:48:
93:82:4a:cc:92:98:59:0b:e3:e2:c2:11:dc:18:47:da:4c:ce:
0d:ac:30:a1:84:e8:ca:0e:db:fd:ec:03:66:3a:04:83:67:fc:
eb:25:ce:a0:2a:6e:a7:e9:e1:40:65:39:4e:12:c9:db:24:a5:
89:ad:41:26:20:e2:55:60:23:b3:0d:ed:95:0c:71:f4:13:89:
fa:9a:bf:c3:62:ba:ee:f9:f5:b0:fe:f9:55:4d:a1:13:11:dc:
49:ac:82:48:33:45:fa:c7:e6:71:a8:e7:a8:9e:98:0e:42:52:
65:17:a9:cd:36:8d:d5:94:fd:79:e7:a2:0b:82:ca:d8:56:fa:
ae:0a:95:50:ba:60:26:27:69:ac:26:a8:90:c7:cd:16:7a:f5:
cd:f6:bd:37:62:df:60:14:11:8d:61:ed:6d:6f:02:40:c9:2d:
26:a8:be:9e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWD1zzjyvVoM8LlPKmkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTIxMDUxODA0MDAwMFoXDTMwMDcwNjA0MDAwMFowLzEtMCsGA1UEAxMk
YmU5ZDAyZGEtOGRmZS00MjQzLTk3YjYtMWUxMTZhNTE3OGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdUN9DaZsjdi6uNxwKhF7Zmvo5l6ifbiuqG7
FSSZ7sl1xVC1ATVgDIb9/o0pKGmSbDXXzRaV1LZibjT4pRwN9Fs+m2VkB5gs7Bfv
bJCdbvEa9wJ1j98Ebzi+yGQhpao7Wm7Tpr6OkAS3WFeO2xeQMFcSOtBhQ9Fks0Va
eXTZfetkJPrueaLTzdyHGzvc8anK8QdmApwZTkaJV68uEjO646Rk/9fB0Im0IyIA
Io/hsJCzQ0DXVguOk7nCflHewLanjVsJLe8ch3fZKPJbOkMnAXxI6d/a8rkGx/QQ
HLzjxKDHXTeH42jWoTHASjja8LOBKkrmeBI35a1EZPAkJTtniQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFArjM/0oQEL2hwpTngOHMTXt/rpzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjE1ODZkZTktMmEwNi0z
YzJjLWFhN2YtNTE2NjdlNDk4MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtWAwQA
aPtYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAE/DQ85xziIZpnjmhDYhqT3/aHOU9aFX6jLaOPCQkevJnmVw
ZV2szRtQBXt4sM1jY+C5cszDRPYArjgbuVps8Ywvb6gX6cwsbuFJzPkWmWoiE6j9
x17o+pp/SJOCSsySmFkL4+LCEdwYR9pMzg2sMKGE6MoO2/3sA2Y6BINn/OslzqAq
bqfp4UBlOU4SydskpYmtQSYg4lVgI7MN7ZUMcfQTifqav8Niuu759bD++VVNoRMR
3EmsgkgzRfrH5nGo56iemA5CUmUXqc02jdWU/XnnoguCythW+q4KlVC6YCYnaawm
qJDHzRZ69c32vTdi32AUEY1h7W1vAkDJLSaovp4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-ams.rpki-client.org