Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/45af9a9f-b880-37e9-827a-6954aed111bd.roa
File: 45af9a9f-b880-37e9-827a-6954aed111bd.roa (raw, json)
Hash identifier: x6IMYZn17UaGx41HDQpp9yCz/7llO1bxE0JrEcQvwHA=
Subject key identifier: FD:40:8E:B3:BC:5C:FF:5F:69:F7:E5:54:9E:E7:0D:11:AE:2D:42:7B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A15B49BBDEDCE72BE91AA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/45af9a9f-b880-37e9-827a-6954aed111bd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:15:b4:9b:bd:ed:ce:72:be:91:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e552aac6-1c2d-485e-944b-dd1f1dce7339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:5a:a5:c4:41:30:6f:8c:30:f9:93:9e:6d:
4d:3b:37:da:f2:e9:66:e3:85:5d:2f:d6:8c:25:c0:
c4:8d:63:0b:3f:5e:ed:77:d7:b0:ac:27:f4:6b:90:
b0:45:a0:c6:03:74:4d:8a:c7:38:36:7e:4c:82:fb:
8c:3d:12:7f:23:1e:a3:34:5b:a1:bd:99:17:16:25:
b4:9f:d3:87:f7:b1:3d:3f:5b:77:57:10:8d:db:d0:
61:d5:99:9d:59:f7:35:83:52:a9:04:68:bf:f9:fe:
10:6f:77:d7:a8:c6:f0:7c:1c:d9:9e:e4:30:73:1f:
75:a0:99:4c:2c:a0:29:e0:31:9d:4d:46:79:69:44:
46:39:09:f9:3b:6d:42:ee:98:65:24:d5:42:69:40:
34:8e:c5:16:96:9a:95:de:b8:60:bb:86:b2:e3:ce:
1d:77:94:61:ba:2b:0a:93:a7:e0:55:14:bc:21:d5:
0d:fd:33:0b:11:96:e2:93:dd:2e:94:3f:60:3a:35:
f9:3c:b4:20:a2:6c:d2:7c:20:0f:44:fa:07:ad:e1:
5e:a7:3d:51:02:fd:ee:11:54:12:30:5e:3a:de:1d:
0e:54:ee:50:ae:8e:6e:19:e3:88:cb:92:bb:58:5c:
f5:24:91:3f:e5:ea:f9:69:e6:21:e0:d2:9e:e4:db:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:40:8E:B3:BC:5C:FF:5F:69:F7:E5:54:9E:E7:0D:11:AE:2D:42:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/45af9a9f-b880-37e9-827a-6954aed111bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b1:ea:8d:3f:31:7a:be:91:d1:82:24:fb:87:61:22:0e:4e:
2e:3c:ad:4e:76:c1:4e:7e:0a:eb:e2:d4:9d:91:b8:d9:55:fa:
55:07:32:e5:fe:77:16:31:86:f4:a2:17:bd:c7:d0:e2:93:d1:
8b:21:92:06:02:7a:32:8d:ef:70:0c:82:45:fc:bb:53:2a:be:
d7:bb:da:ac:7e:be:57:47:5f:be:74:1f:b3:40:3a:87:e2:74:
ec:f5:ce:3a:ae:f2:35:90:64:11:8f:b4:07:a9:ef:33:a2:b0:
9b:1c:42:c1:ec:81:6f:c7:59:88:aa:a4:45:b9:fa:b0:67:36:
04:1d:b3:cf:30:b6:e8:e5:60:63:b3:1c:61:ff:94:eb:ad:4c:
97:8a:ce:70:18:cb:8a:d9:cc:04:4c:f4:2d:26:bf:ef:cc:bb:
f3:2e:d6:b1:aa:60:45:50:b9:8d:be:bd:e8:6b:65:c1:95:d3:
e4:dc:25:18:d5:a7:99:78:bb:57:69:db:6d:b0:5b:32:29:60:
cb:28:9b:67:ee:3a:27:be:65:7e:73:39:82:e4:89:18:13:ed:
7b:56:d6:41:7f:29:00:d9:0f:62:fb:f5:54:8d:b8:67:2e:bd:
59:6f:c6:71:6b:35:c5:93:5c:b1:fb:9e:10:d1:df:cb:f0:92:
ab:e1:13:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFbSbve3Ocr6RqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTU1MmFhYzYtMWMyZC00ODVlLTk0NGItZGQxZjFkY2U3MzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza1apcRBMG+MMPmTnm1NOzfa8ulm44VdL9aM
JcDEjWMLP17td9ewrCf0a5CwRaDGA3RNisc4Nn5MgvuMPRJ/Ix6jNFuhvZkXFiW0
n9OH97E9P1t3VxCN29Bh1ZmdWfc1g1KpBGi/+f4Qb3fXqMbwfBzZnuQwcx91oJlM
LKAp4DGdTUZ5aURGOQn5O21C7phlJNVCaUA0jsUWlpqV3rhgu4ay484dd5RhuisK
k6fgVRS8IdUN/TMLEZbik90ulD9gOjX5PLQgomzSfCAPRPoHreFepz1RAv3uEVQS
MF463h0OVO5Qro5uGeOIy5K7WFz1JJE/5er5aeYh4NKe5NtdCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1AjrO8XP9fafflVJ7nDRGuLUJ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDVhZjlhOWYtYjg4MC0z
N2U5LTgyN2EtNjk1NGFlZDExMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2x6o0/MXq+kdGCJPuHYSIOTi48rU52wU5+Cuvi1J2RuNlV+lUHMuX+
dxYxhvSiF73H0OKT0YshkgYCejKN73AMgkX8u1Mqvte72qx+vldHX750H7NAOofi
dOz1zjqu8jWQZBGPtAep7zOisJscQsHsgW/HWYiqpEW5+rBnNgQds88wtujlYGOz
HGH/lOutTJeKznAYy4rZzARM9C0mv+/Mu/Mu1rGqYEVQuY2+vehrZcGV0+TcJRjV
p5l4u1dp222wWzIpYMsom2fuOie+ZX5zOYLkiRgT7XtW1kF/KQDZD2L79VSNuGcu
vVlvxnFrNcWTXLH7nhDR38vwkqvhE2A=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org