Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/be377c44-9630-3818-9b07-89085075abb2.roa
File: be377c44-9630-3818-9b07-89085075abb2.roa (raw, json)
Hash identifier: SkLJ2f5mkBfPmxAM7oFvl1j7U7JesosgJ7daBwWtcY8=
Subject key identifier: 88:E6:9C:5B:2D:46:95:0C:70:50:7A:80:4E:56:03:9D:BD:48:BA:96
Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial: 010D0C9F43285842980B80DDE8C4B0AB64DECB80
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/be377c44-9630-3818-9b07-89085075abb2.roa
Signing time: Wed 19 Jul 2023 02:31:19 +0000
ROA not before: Wed 19 Jul 2023 02:31:19 +0000
ROA not after: Tue 17 Oct 2023 02:31:19 +0000
asID: 30221
IP address blocks: 68.68.204.0/24 maxlen: 24
68.68.205.0/24 maxlen: 24
68.68.192.0/24 maxlen: 24
68.68.193.0/24 maxlen: 24
68.68.192.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:98:0b:80:dd:e8:c4:b0:ab:64:de:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
Validity
Not Before: Jul 19 02:31:19 2023 GMT
Not After : Oct 17 02:31:19 2023 GMT
Subject: CN=89c51538-70b3-4653-982b-0d824a6f1ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:2c:fc:4e:80:a7:20:ed:e0:c4:af:12:86:
b8:81:46:43:a6:19:94:74:3d:d8:9d:f8:30:5e:cd:
8f:33:fd:60:d0:70:51:5a:0c:6b:f7:d7:7d:d7:a4:
bb:fc:de:6c:92:74:3b:cb:52:d9:bc:4a:10:1a:2c:
76:da:be:33:a5:28:5f:5a:ee:1d:07:43:9a:4d:c9:
c2:b7:e2:43:9d:55:57:6d:1b:f9:b2:3f:83:00:5e:
17:99:ca:7b:78:44:64:46:4f:01:a0:04:65:1f:d7:
1f:16:63:98:5d:d2:7e:ac:e4:e3:cd:04:ba:10:aa:
4d:9c:94:e7:8f:37:17:42:bc:d2:cf:b8:5a:5e:41:
98:ad:4e:dc:13:9b:12:6d:a2:c1:6f:2c:91:d6:29:
22:bd:5f:4e:b6:dc:fa:d1:5c:8a:0b:52:bb:4b:5e:
ad:49:ee:67:ea:cc:1a:bb:c7:ad:1a:6d:22:bf:95:
31:a2:ce:fa:e6:dc:05:14:41:6f:25:e5:91:fd:a3:
62:1a:f2:78:78:b2:4e:e3:7b:fc:c2:6f:ea:2e:0d:
e1:89:9d:81:22:5e:df:7c:58:c4:6d:57:ae:6b:32:
ac:6d:b5:36:47:d7:47:fd:a2:2e:c3:8c:66:80:a2:
b5:f3:21:95:b3:f6:2f:6e:62:ed:54:c5:42:5e:c3:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:9C:5B:2D:46:95:0C:70:50:7A:80:4E:56:03:9D:BD:48:BA:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/be377c44-9630-3818-9b07-89085075abb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
X509v3 Authority Key Identifier:
keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.192.0/23
68.68.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:3f:77:2d:3a:c9:38:b0:9c:e1:08:80:76:63:68:2e:1d:e4:
9d:fc:68:c8:ed:3f:e9:57:f7:47:6a:2d:f9:bb:a6:74:88:86:
c7:02:0c:57:c3:45:d9:e7:3d:22:37:d2:eb:5e:78:66:36:cb:
65:9f:19:f4:29:f9:9a:4e:ea:13:63:91:5a:db:83:24:bc:42:
af:1a:4b:2c:05:15:7b:3f:90:2f:6c:82:58:c3:53:9e:2f:66:
be:78:66:a7:9b:0d:d1:f6:35:07:1d:5c:2c:95:8e:d9:12:26:
81:9e:e7:1b:d6:3f:50:dd:fb:0b:0b:43:f3:27:2a:e4:af:d4:
78:8f:6e:ab:c9:f2:75:2f:a8:2e:57:f9:77:41:e0:c4:f5:a2:
41:f7:eb:ec:5d:43:d4:9c:f4:f0:3f:5a:ad:87:41:4b:5a:5c:
20:75:68:ff:55:61:c2:56:d3:aa:fe:4f:eb:9b:95:37:72:7e:
17:de:dd:ac:ef:f8:8f:1f:6c:87:99:16:54:ed:42:30:ca:16:
d4:70:1d:65:0a:e5:08:62:7c:ca:85:ac:ac:af:64:93:6d:fb:
76:57:ce:cc:d7:f6:38:6c:a8:96:1c:d8:02:f5:ba:f8:1b:f1:
7c:f5:1e:ae:e9:55:a7:37:fa:4d:ef:12:9e:2e:34:1f:d4:4b:
42:66:3e:70
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEKYC4Dd6MSwq2Tey4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQw
MDM2MB4XDTIzMDcxOTAyMzExOVoXDTIzMTAxNzAyMzExOVowLzEtMCsGA1UEAxMk
ODljNTE1MzgtNzBiMy00NjUzLTk4MmItMGQ4MjRhNmYxZWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIMs/E6ApyDt4MSvEoa4gUZDphmUdD3Ynfgw
Xs2PM/1g0HBRWgxr99d916S7/N5sknQ7y1LZvEoQGix22r4zpShfWu4dB0OaTcnC
t+JDnVVXbRv5sj+DAF4Xmcp7eERkRk8BoARlH9cfFmOYXdJ+rOTjzQS6EKpNnJTn
jzcXQrzSz7haXkGYrU7cE5sSbaLBbyyR1ikivV9Ottz60VyKC1K7S16tSe5n6swa
u8etGm0iv5Uxos765twFFEFvJeWR/aNiGvJ4eLJO43v8wm/qLg3hiZ2BIl7ffFjE
bVeuazKsbbU2R9dH/aIuw4xmgKK18yGVs/YvbmLtVMVCXsPl5wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIjmnFstRpUMcFB6gE5WA529SLqWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YzJh
NzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvYmUzNzdjNDQtOTYzMC0z
ODE4LTliMDctODkwODUwNzVhYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWMyYTcyMjUtZGZlYS00NjBkLWFh
NjktODA0YWU1NzQwMDM2LzljMmE3MjI1LWRmZWEtNDYwZC1hYTY5LTgwNGFlNTc0
MDAzNi5jcmwwHwYDVR0jBBgwFoAUlYr+xsgzCViBPpDo757JLDrbd8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRh
ZTU3NDAwMzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBRETAAwQB
RETMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACU/dy06yTiwnOEIgHZjaC4d5J38aMjtP+lX90dqLfm7pnSI
hscCDFfDRdnnPSI30uteeGY2y2WfGfQp+ZpO6hNjkVrbgyS8Qq8aSywFFXs/kC9s
gljDU54vZr54ZqebDdH2NQcdXCyVjtkSJoGe5xvWP1Dd+wsLQ/MnKuSv1HiPbqvJ
8nUvqC5X+XdB4MT1okH36+xdQ9Sc9PA/Wq2HQUtaXCB1aP9VYcJW06r+T+ublTdy
fhfe3azv+I8fbIeZFlTtQjDKFtRwHWUK5QhifMqFrKyvZJNt+3ZXzszX9jhsqJYc
2AL1uvgb8Xz1Hq7pVac3+k3vEp4uNB/US0JmPnA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:46 2023 by rpki-client on console-ams.rpki-client.org