Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5caa3aa2-f996-301b-a56b-40e116b145e9.roa
File: 5caa3aa2-f996-301b-a56b-40e116b145e9.roa (raw, json)
Hash identifier: j8KYia5NKtBkzjHVRPKNhWmKmKTTYSUSNLFfS2phv/w=
Subject key identifier: BC:B4:1C:A5:E9:C0:53:B6:5A:D4:2F:D1:2A:D6:44:19:34:F6:0C:2E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A23633D741F10C7E270B780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5caa3aa2-f996-301b-a56b-40e116b145e9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:63:3d:74:1f:10:c7:e2:70:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=45b9a670-0fbb-4499-93dc-79652629a4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:a2:1c:0a:26:aa:23:fe:ab:e7:c8:8f:1e:
c9:ce:60:5d:0c:22:bb:4b:07:15:4d:60:c6:7d:7b:
f4:8f:b6:26:96:ac:df:fc:c4:b8:b5:05:b6:71:13:
ea:a6:55:8c:91:05:cf:cb:14:82:d3:ce:ad:e4:a0:
c6:1d:67:6b:f8:ca:2a:45:2f:b3:eb:66:5e:dd:33:
a2:29:9d:18:1b:ab:02:5e:ad:96:e0:03:3f:d9:02:
3f:59:bd:44:9c:e2:d2:7d:c8:c7:79:ba:7b:ba:3c:
ae:34:7f:92:e0:a1:a4:d3:74:cb:20:9f:3e:26:39:
7b:df:72:03:1d:f7:5a:84:a0:7a:7f:a6:4c:d3:78:
5b:c4:b0:46:41:6e:4b:29:22:71:72:48:5d:67:d9:
13:7b:66:bf:a5:bb:ad:e1:f8:a6:a7:85:f2:bc:36:
4d:a6:01:2a:20:d0:50:8d:43:2f:b3:f7:5c:09:9e:
99:21:29:24:8e:61:75:f2:65:de:6a:2a:6f:1e:30:
fd:88:53:71:84:3b:d4:e3:d5:98:34:fe:cc:82:c3:
ea:fd:4e:79:87:93:eb:1f:cd:68:86:7d:db:85:d8:
93:f5:f3:64:b0:25:f1:36:2c:89:cd:33:6b:95:d7:
25:94:43:29:b5:c5:77:2a:a3:b7:4b:e1:a9:c0:6f:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:1C:A5:E9:C0:53:B6:5A:D4:2F:D1:2A:D6:44:19:34:F6:0C:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5caa3aa2-f996-301b-a56b-40e116b145e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:64:a4:05:fa:63:95:ca:d0:3e:1a:3e:78:4b:b1:1d:f6:d5:
61:17:65:9a:b8:3c:91:9e:98:7c:d0:3d:d5:b7:cc:0a:84:be:
03:8b:21:9b:b2:b4:32:f5:47:00:79:47:10:07:4d:46:e9:b6:
00:2a:ea:b2:fe:a4:fd:f1:6a:a6:ae:e2:88:74:fa:ba:e5:5c:
69:86:41:9d:43:a5:92:52:94:54:f0:1e:46:86:d1:3b:93:46:
f0:f4:73:b0:89:b1:8b:5a:ce:ce:eb:19:c2:97:0f:27:c1:ee:
26:2e:6e:4a:69:4f:d7:0b:4e:da:f8:d8:fd:38:5e:8a:a6:98:
4d:55:44:8b:a4:aa:3a:45:0e:88:2e:19:36:77:be:35:e2:17:
49:0b:09:66:ec:87:f9:48:4b:a4:05:2a:d7:49:e3:49:a6:46:
d7:39:1d:10:e3:20:99:5e:51:be:36:f7:fe:d7:91:ac:35:7e:
91:fd:92:90:32:c5:ac:c8:bf:6b:e1:ca:60:9b:21:af:be:5a:
06:7f:07:d0:81:ec:d9:0a:f3:54:51:27:55:d9:a0:1d:15:26:
42:4e:d1:35:cb:cf:de:d6:ea:8f:d2:2a:11:ce:79:6d:47:80:
05:03:96:58:fc:15:e2:40:ab:e0:1f:81:20:67:7c:bb:65:c6:
4c:aa:28:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKI2M9dB8Qx+Jwt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDViOWE2NzAtMGZiYi00NDk5LTkzZGMtNzk2NTI2MjlhNGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKaiHAomqiP+q+fIjx7JzmBdDCK7SwcVTWDG
fXv0j7Ymlqzf/MS4tQW2cRPqplWMkQXPyxSC086t5KDGHWdr+MoqRS+z62Ze3TOi
KZ0YG6sCXq2W4AM/2QI/Wb1EnOLSfcjHebp7ujyuNH+S4KGk03TLIJ8+Jjl733ID
HfdahKB6f6ZM03hbxLBGQW5LKSJxckhdZ9kTe2a/pbut4fimp4XyvDZNpgEqINBQ
jUMvs/dcCZ6ZISkkjmF18mXeaipvHjD9iFNxhDvU49WYNP7MgsPq/U55h5PrH81o
hn3bhdiT9fNksCXxNiyJzTNrldcllEMptcV3KqO3S+GpwG9NCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLy0HKXpwFO2WtQv0SrWRBk09gwuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWNhYTNhYTItZjk5Ni0z
MDFiLWE1NmItNDBlMTE2YjE0NWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlkpAX6Y5XK0D4aPnhLsR321WEXZZq4PJGemHzQPdW3zAqEvgOLIZuy
tDL1RwB5RxAHTUbptgAq6rL+pP3xaqau4oh0+rrlXGmGQZ1DpZJSlFTwHkaG0TuT
RvD0c7CJsYtazs7rGcKXDyfB7iYubkppT9cLTtr42P04XoqmmE1VRIukqjpFDogu
GTZ3vjXiF0kLCWbsh/lIS6QFKtdJ40mmRtc5HRDjIJleUb429/7Xkaw1fpH9kpAy
xazIv2vhymCbIa++WgZ/B9CB7NkK81RRJ1XZoB0VJkJO0TXLz97W6o/SKhHOeW1H
gAUDllj8FeJAq+AfgSBnfLtlxkyqKKc=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:45 2024 by rpki-client on console-fra.rpki-client.org