Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/47f1aa7b-969f-347b-b7f5-d4aa16325e4e.roa
File: 47f1aa7b-969f-347b-b7f5-d4aa16325e4e.roa (raw, json)
Hash identifier: iFTOO5wsL4fduelZr1jXqcOcVvfJh+d8I5J63IdGnUo=
Subject key identifier: 79:82:B5:60:2E:61:2F:01:54:AD:D3:5F:BF:25:6D:8F:2A:6A:96:89
Certificate issuer: /CN=db131796-a27d-48da-80e5-76b8e7c0cbd3
Certificate serial: 010D0C9F43285840501D126152BDBFF12CF42D00
Authority key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/47f1aa7b-969f-347b-b7f5-d4aa16325e4e.roa
Signing time: Wed 21 Dec 2022 14:55:13 +0000
ROA not before: Wed 21 Dec 2022 14:55:13 +0000
ROA not after: Tue 25 Mar 2025 04:00:00 +0000
asID: 14041
IP address blocks: 129.72.0.0/16 maxlen: 16
192.65.143.0/24 maxlen: 24
192.84.113.0/24 maxlen: 24
192.160.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:50:1d:12:61:52:bd:bf:f1:2c:f4:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3
Validity
Not Before: Dec 21 14:55:13 2022 GMT
Not After : Mar 25 04:00:00 2025 GMT
Subject: CN=11dad69d-99d5-4d07-aa95-0d6a2c0efde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:10:c0:c0:72:98:bd:37:c7:99:28:f7:0c:
08:c1:a8:36:1a:21:43:1c:a8:af:85:b7:6f:ee:af:
5c:58:7b:41:d4:d7:dd:d9:fb:45:27:c3:be:17:38:
d0:58:df:d4:21:55:e5:3c:37:9b:17:c9:4d:bb:2d:
a4:b8:03:f2:b8:df:57:08:be:5f:d7:fc:d3:a4:79:
63:97:60:53:4a:ef:9d:fd:2b:45:81:b4:ce:2e:2f:
a4:0a:73:c0:b5:a4:52:32:48:1c:31:d3:32:34:18:
2d:93:4d:d3:db:6c:f8:95:20:0b:78:5e:25:24:1c:
b1:fa:11:68:e8:21:8c:8c:f6:c1:d7:01:34:fc:d6:
e8:54:43:b8:4f:b6:0a:82:ed:85:f4:90:e9:55:db:
ef:7f:00:ed:f5:94:52:64:9f:0e:0c:cb:12:0c:aa:
00:38:72:4d:d0:1d:fd:15:67:34:25:e0:1c:13:3d:
50:68:d5:db:57:9a:de:da:b7:1a:5b:c7:da:47:59:
d0:d4:db:b6:55:cb:69:74:5a:d7:4e:70:05:df:c8:
35:9b:f3:79:08:42:08:fc:08:0e:85:52:e0:68:01:
fe:64:e4:8f:b3:3f:96:41:1a:eb:79:77:7e:47:56:
a9:00:47:80:29:d3:22:a4:9d:a2:19:e6:a2:2b:d4:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:82:B5:60:2E:61:2F:01:54:AD:D3:5F:BF:25:6D:8F:2A:6A:96:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/47f1aa7b-969f-347b-b7f5-d4aa16325e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl
X509v3 Authority Key Identifier:
keyid:B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer
sbgp-ipAddrBlock: critical
IPv4:
129.72.0.0/16
192.65.143.0/24
192.84.113.0/24
192.160.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:80:9d:d8:52:78:f7:6a:1a:25:5e:a9:aa:db:dc:2a:c1:4f:
5c:42:d0:91:70:29:70:d1:2e:cc:d5:ff:ed:7f:4a:8e:e4:09:
d9:6f:fa:e8:26:ba:f9:ee:4a:2e:2a:c1:f8:a9:f8:4f:62:b5:
04:05:36:5f:6f:5f:0c:d0:40:cc:aa:71:ad:a2:1c:6d:09:7f:
1f:3e:01:ab:f7:cb:b4:56:05:15:bc:15:29:e9:93:c5:69:50:
78:8a:39:b4:5f:8e:63:95:51:80:93:bc:56:47:48:55:fd:3c:
ca:b7:5a:ca:1f:53:cf:d1:96:85:6e:ee:f3:a2:50:c9:1a:f0:
d8:fe:5f:0c:42:db:73:2a:c4:22:48:0a:f7:02:47:fa:a9:35:
06:5a:6f:a6:a7:60:58:8d:1b:02:fb:42:06:2a:89:ea:f4:e7:
8b:74:fe:63:5a:66:33:e9:06:cf:ff:22:56:ab:ea:0e:08:b8:
49:9c:4a:37:76:8b:68:4f:45:fb:93:de:3a:7f:9b:16:c6:bc:
d8:ce:50:f2:14:fc:5e:88:ae:68:2c:27:b3:fd:b9:a9:75:58:
7f:d0:15:4b:9b:d6:61:6e:4f:ab:f4:19:8a:53:5a:62:f9:0e:
9f:a2:cb:b4:50:1b:b0:5c:94:90:56:cf:8b:c5:01:e3:ee:e6:
42:d0:6f:1c
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEBQHRJhUr2/8Sz0LQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIxMzE3OTYtYTI3ZC00OGRhLTgwZTUtNzZiOGU3YzBj
YmQzMB4XDTIyMTIyMTE0NTUxM1oXDTI1MDMyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTFkYWQ2OWQtOTlkNS00ZDA3LWFhOTUtMGQ2YTJjMGVmZGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoAQwMBymL03x5ko9wwIwag2GiFDHKivhbdv
7q9cWHtB1Nfd2ftFJ8O+FzjQWN/UIVXlPDebF8lNuy2kuAPyuN9XCL5f1/zTpHlj
l2BTSu+d/StFgbTOLi+kCnPAtaRSMkgcMdMyNBgtk03T22z4lSALeF4lJByx+hFo
6CGMjPbB1wE0/NboVEO4T7YKgu2F9JDpVdvvfwDt9ZRSZJ8ODMsSDKoAOHJN0B39
FWc0JeAcEz1QaNXbV5re2rcaW8faR1nQ1Nu2VctpdFrXTnAF38g1m/N5CEII/AgO
hVLgaAH+ZOSPsz+WQRrreXd+R1apAEeAKdMipJ2iGeaiK9Rw4wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFHmCtWAuYS8BVK3TX78lbY8qapaJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjEz
MTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdjMGNiZDMvNDdmMWFhN2ItOTY5Zi0z
NDdiLWI3ZjUtZDRhYTE2MzI1ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGIxMzE3OTYtYTI3ZC00OGRhLTgw
ZTUtNzZiOGU3YzBjYmQzL2RiMTMxNzk2LWEyN2QtNDhkYS04MGU1LTc2YjhlN2Mw
Y2JkMy5jcmwwHwYDVR0jBBgwFoAUue3K3qkHUolV9qvgFYie93MR9pUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kYjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4
ZTdjMGNiZDMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMAgUgDBADA
QY8DBADAVHEDBADAoDEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN4Cd2FJ492oaJV6pqtvcKsFPXELQkXAp
cNEuzNX/7X9KjuQJ2W/66Ca6+e5KLirB+Kn4T2K1BAU2X29fDNBAzKpxraIcbQl/
Hz4Bq/fLtFYFFbwVKemTxWlQeIo5tF+OY5VRgJO8VkdIVf08yrdayh9Tz9GWhW7u
86JQyRrw2P5fDELbcyrEIkgK9wJH+qk1BlpvpqdgWI0bAvtCBiqJ6vTni3T+Y1pm
M+kGz/8iVqvqDgi4SZxKN3aLaE9F+5PeOn+bFsa82M5Q8hT8XoiuaCwns/25qXVY
f9AVS5vWYW5Pq/QZilNaYvkOn6LLtFAbsFyUkFbPi8UB4+7mQtBvHA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:47 2023 by rpki-client on console-ams.rpki-client.org