Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b259940-b684-36a6-bf1b-6806b29e7381.roa
File: 2b259940-b684-36a6-bf1b-6806b29e7381.roa (raw, json)
Hash identifier: ggADFGe1KQePp+94jMqDlpGj8YIeUlbqBVIj7ba1zi4=
Subject key identifier: ED:64:BD:5C:9B:90:8F:E1:CB:68:A1:FD:0F:EE:44:0F:32:E9:42:68
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1571EE129048E7C47F4300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b259940-b684-36a6-bf1b-6806b29e7381.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 64.233.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:15:71:ee:12:90:48:e7:c4:7f:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=96557aba-45a9-4f25-ae5f-5ad1b165fe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:d0:94:3e:43:11:fc:d0:96:04:52:71:21:
b7:76:69:3f:aa:9f:b4:9e:ee:4e:f8:92:a9:ec:0e:
32:7b:d1:52:8b:97:63:b4:be:1a:87:91:44:69:7a:
72:f8:e2:17:d8:03:94:4d:cf:a6:bd:74:57:74:c9:
a5:38:79:bf:bd:8c:93:a7:a4:61:2c:74:ec:29:cc:
71:19:35:b8:3e:b1:54:b5:65:b5:c0:7b:17:3b:59:
b4:b0:0d:c2:67:b4:c5:fb:8a:12:da:a4:c2:d0:e6:
3d:3f:a7:91:cd:9c:2e:ad:fc:64:d1:8f:f8:32:53:
88:59:5e:6f:d8:b3:d4:39:63:99:97:3c:01:60:31:
13:97:f8:d9:60:c0:61:02:33:a2:47:3e:f2:39:51:
d5:b1:34:83:dc:65:e5:b7:55:f1:e7:c1:07:fd:67:
17:29:6e:2c:fc:39:14:d9:24:7f:26:70:fd:28:76:
9e:96:fd:69:3f:e7:59:26:7c:fd:5f:64:12:93:3f:
1b:4a:e1:30:a2:f3:b2:8b:f1:62:96:3f:c3:ef:d1:
6c:3b:e7:36:52:f0:ee:c3:b8:01:70:60:70:9a:1e:
06:3d:c5:7e:27:86:13:c8:88:bb:0b:9f:5e:a3:45:
7d:c5:80:74:22:1c:0b:3f:92:54:f7:3f:40:4b:23:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:BD:5C:9B:90:8F:E1:CB:68:A1:FD:0F:EE:44:0F:32:E9:42:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b259940-b684-36a6-bf1b-6806b29e7381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:47:b0:36:eb:8a:5b:b5:1b:d8:77:35:7b:2c:d1:0d:6e:cc:
d5:d7:fe:40:b2:bb:95:e2:7e:7a:12:cb:4d:ba:42:26:59:ac:
c0:63:c3:1a:a7:ed:4a:9d:8e:5b:ff:a9:cd:d9:55:95:81:10:
31:af:c1:8a:5f:6a:16:88:a7:6b:8f:63:ea:0e:d0:ad:83:66:
57:49:7f:ce:23:e3:19:1c:2e:73:a3:76:19:4e:7e:67:eb:38:
8c:26:ba:48:96:38:5a:c5:7c:00:af:50:3b:a5:66:7d:f8:14:
ac:57:a6:bd:fe:42:85:0c:1e:7f:5e:5a:28:07:9d:bb:93:dc:
4f:40:9f:78:c7:99:90:8e:0f:30:19:c0:5b:a3:93:d4:ea:6d:
3b:9f:d0:2c:73:b2:86:d9:0c:50:07:f2:d4:53:1f:2e:11:ee:
16:8e:1d:a9:a8:44:34:81:67:a0:70:24:6e:85:4e:1e:a8:71:
e1:9f:77:d1:92:e4:66:7f:f8:20:96:58:59:94:46:55:1c:54:
56:28:58:2f:e1:15:6a:ed:c3:62:8b:3b:15:9c:87:44:91:aa:
cc:12:95:36:7c:80:49:10:90:6a:ee:9c:60:15:03:63:a2:95:
4c:45:13:fd:31:66:86:5f:92:93:e0:9f:1a:ae:7d:63:bf:af:
8d:1e:b1:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFXHuEpBI58R/QwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTY1NTdhYmEtNDVhOS00ZjI1LWFlNWYtNWFkMWIxNjVmZTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjirQlD5DEfzQlgRScSG3dmk/qp+0nu5O+JKp
7A4ye9FSi5djtL4ah5FEaXpy+OIX2AOUTc+mvXRXdMmlOHm/vYyTp6RhLHTsKcxx
GTW4PrFUtWW1wHsXO1m0sA3CZ7TF+4oS2qTC0OY9P6eRzZwurfxk0Y/4MlOIWV5v
2LPUOWOZlzwBYDETl/jZYMBhAjOiRz7yOVHVsTSD3GXlt1Xx58EH/WcXKW4s/DkU
2SR/JnD9KHaelv1pP+dZJnz9X2QSkz8bSuEwovOyi/Filj/D79FsO+c2UvDuw7gB
cGBwmh4GPcV+J4YTyIi7C59eo0V9xYB0IhwLP5JU9z9ASyOwtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1kvVybkI/hy2ih/Q/uRA8y6UJoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmIyNTk5NDAtYjY4NC0z
NmE2LWJmMWItNjgwNmIyOWU3MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhHsDbrilu1G9h3NXss0Q1uzNXX/kCyu5XifnoSy026QiZZrMBjwxqn
7Uqdjlv/qc3ZVZWBEDGvwYpfahaIp2uPY+oO0K2DZldJf84j4xkcLnOjdhlOfmfr
OIwmukiWOFrFfACvUDulZn34FKxXpr3+QoUMHn9eWigHnbuT3E9An3jHmZCODzAZ
wFujk9TqbTuf0CxzsobZDFAH8tRTHy4R7haOHamoRDSBZ6BwJG6FTh6oceGfd9GS
5GZ/+CCWWFmURlUcVFYoWC/hFWrtw2KLOxWch0SRqswSlTZ8gEkQkGrunGAVA2Oi
lUxFE/0xZoZfkpPgnxqufWO/r40esX8=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:37 2024 by rpki-client on console-ams.rpki-client.org