Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/cbae3c56-9bba-3910-ae3b-35f1cc1daa40.roa
File: cbae3c56-9bba-3910-ae3b-35f1cc1daa40.roa (raw, json)
Hash identifier: nX6ijgOeQXXA0JKI5nPp9ruStx79wZgtrTqaJwuojoE=
Subject key identifier: 9D:2E:F1:E5:D5:BE:76:81:28:29:77:7E:47:80:32:9C:92:CE:D8:50
Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial: 010D0C9F432858447317B308071FD5CA0B8021C0
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/cbae3c56-9bba-3910-ae3b-35f1cc1daa40.roa
Signing time: Fri 05 Jan 2024 06:24:51 +0000
ROA not before: Fri 05 Jan 2024 06:24:51 +0000
ROA not after: Thu 04 Apr 2024 05:24:51 +0000
asID: 44324
IP address blocks: 2602:f9f6::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 01:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:73:17:b3:08:07:1f:d5:ca:0b:80:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Validity
Not Before: Jan 5 06:24:51 2024 GMT
Not After : Apr 4 05:24:51 2024 GMT
Subject: CN=31c5b78e-c4d2-49ef-b010-3d2d467ee79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:e5:1c:fe:24:86:bd:79:8e:d1:cc:28:b0:
50:13:fa:0a:3c:8b:2e:fc:15:ab:94:12:ed:db:88:
df:b7:16:91:04:39:6c:44:2f:ee:59:46:b8:ce:86:
10:69:61:f1:0e:47:7a:52:a7:db:be:24:02:5b:43:
73:ba:00:27:a1:96:0d:0a:49:fd:69:90:bc:44:32:
42:d0:fa:a8:f9:5a:90:a6:2e:e1:62:19:19:59:3c:
0d:ce:ba:ce:a8:c6:45:52:70:53:6c:94:b2:ab:55:
19:d3:fd:98:6a:fd:df:19:5c:81:c1:65:4c:c9:02:
5f:cd:a8:3f:56:14:e6:11:9a:68:1f:2a:b8:e9:ba:
ca:eb:3d:9d:35:c8:de:5a:44:88:b6:3d:d4:68:fa:
42:66:ac:92:7b:e8:1d:e2:d9:39:30:fb:7a:3e:7a:
28:a2:33:b0:19:f9:af:50:06:63:89:45:51:3b:dc:
ef:58:02:11:dc:13:f8:97:b4:51:80:60:f8:03:bb:
d8:38:4b:39:7b:b0:39:5d:1c:ca:ac:fa:66:d7:42:
2d:ef:2e:f2:ee:49:5f:fb:5e:72:4a:6a:c5:a1:85:
48:a0:35:c8:51:59:7b:00:79:26:1e:75:01:e6:4e:
eb:a2:91:58:a4:3e:16:1d:18:34:43:59:e5:3b:f5:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2E:F1:E5:D5:BE:76:81:28:29:77:7E:47:80:32:9C:92:CE:D8:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/cbae3c56-9bba-3910-ae3b-35f1cc1daa40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
X509v3 Authority Key Identifier:
keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f6::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:0a:4b:dd:b4:f6:46:2b:06:00:10:e7:9c:99:98:51:7b:a4:
47:ef:99:1d:0e:5b:a1:d8:a2:53:8a:c4:62:5b:75:ca:e4:c8:
8a:36:de:e8:75:b5:74:dd:e4:95:5f:b9:bd:2c:99:b4:90:2c:
77:83:67:c9:b0:b6:fd:7d:ca:2e:ac:fa:55:6a:8f:e5:8e:61:
bb:1c:0c:64:a2:85:74:9a:a3:0b:4b:05:80:b8:dc:56:ea:70:
9f:43:9a:0b:47:f6:b4:11:be:aa:fb:c7:5c:13:d9:07:5f:9b:
c8:83:ac:7f:53:36:07:50:2d:fa:74:da:ab:3f:9a:e0:d8:27:
95:e2:51:70:79:5b:f5:cd:00:3c:c2:71:e2:c8:b8:2f:12:b9:
6b:6f:52:68:e3:4b:6c:b2:92:ae:cb:7c:4f:04:e9:f2:fe:37:
53:92:0a:85:b2:1a:2f:c1:36:bc:6c:f0:86:2e:1c:d2:94:44:
80:2d:cb:bf:5a:b0:f2:0c:1e:3b:d4:78:3f:47:2c:d7:1c:37:
68:eb:a5:1f:de:27:15:65:b9:0d:95:ee:4d:4d:34:13:80:5b:
9f:ec:42:e5:63:84:3d:86:f3:f0:f7:b5:d3:ec:3b:94:fc:e2:
df:c1:ad:a1:eb:05:a8:c7:77:c7:b1:ea:fd:e1:23:d0:0e:31:
a8:cf:cf:28
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWERzF7MIBx/VyguAIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI0MDEwNTA2MjQ1MVoXDTI0MDQwNDA1MjQ1MVowLzEtMCsGA1UEAxMk
MzFjNWI3OGUtYzRkMi00OWVmLWIwMTAtM2QyZDQ2N2VlNzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJzlHP4khr15jtHMKLBQE/oKPIsu/BWrlBLt
24jftxaRBDlsRC/uWUa4zoYQaWHxDkd6UqfbviQCW0NzugAnoZYNCkn9aZC8RDJC
0Pqo+VqQpi7hYhkZWTwNzrrOqMZFUnBTbJSyq1UZ0/2Yav3fGVyBwWVMyQJfzag/
VhTmEZpoHyq46brK6z2dNcjeWkSItj3UaPpCZqySe+gd4tk5MPt6PnooojOwGfmv
UAZjiUVRO9zvWAIR3BP4l7RRgGD4A7vYOEs5e7A5XRzKrPpm10It7y7y7klf+15y
SmrFoYVIoDXIUVl7AHkmHnUB5k7ropFYpD4WHRg0Q1nlO/UBAwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ0u8eXVvnaBKCl3fkeAMpySzthQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvY2JhZTNjNTYtOWJiYS0z
OTEwLWFlM2ItMzVmMWNjMWRhYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL59gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABApL3bT2RisGABDnnJmYUXukR++ZHQ5bodiiU4rEYlt1yuTIijbe
6HW1dN3klV+5vSyZtJAsd4NnybC2/X3KLqz6VWqP5Y5huxwMZKKFdJqjC0sFgLjc
Vupwn0OaC0f2tBG+qvvHXBPZB1+byIOsf1M2B1At+nTaqz+a4NgnleJRcHlb9c0A
PMJx4si4LxK5a29SaONLbLKSrst8TwTp8v43U5IKhbIaL8E2vGzwhi4c0pREgC3L
v1qw8gweO9R4P0cs1xw3aOulH94nFWW5DZXuTU00E4Bbn+xC5WOEPYbz8Pe10+w7
lPzi38GtoesFqMd3x7Hq/eEj0A4xqM/PKA==
-----END CERTIFICATE-----
Generated at Thu Mar 21 04:17:18 2024 by rpki-client on console-fra.rpki-client.org