Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c45711c-8ad4-32cd-a35d-35c11d24700a.roa
File: 7c45711c-8ad4-32cd-a35d-35c11d24700a.roa (raw, json)
Hash identifier: plKQpr7ZMchpL/GQrOuZdNypIvLVfSs+LizesZhbD2c=
Subject key identifier: 81:20:6C:CE:B3:D6:D8:D1:D7:8F:B0:76:0A:6D:1F:BC:5A:F9:67:AC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EACFDDAF1CCDD75FA9EFC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c45711c-8ad4-32cd-a35d-35c11d24700a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ea:cf:dd:af:1c:cd:d7:5f:a9:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=206b9ae2-9ebc-48dc-9a61-7d68864d500e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:09:e9:9e:b2:e9:a0:c1:70:4a:84:c5:79:
d4:8d:ff:35:4c:a0:3d:70:78:92:ec:0f:30:43:1c:
b2:14:e3:32:16:65:7c:89:d2:e5:3c:f9:13:5c:ad:
b3:9b:8a:d4:5a:44:90:ae:ad:4d:09:0b:ee:1b:69:
a9:cd:46:d5:6c:47:e4:25:71:65:2f:ba:c5:f7:13:
a1:61:e5:30:9f:86:43:e9:71:db:8f:c0:45:81:fd:
1b:a2:48:7b:ba:c0:40:f8:44:dc:76:c3:c2:30:61:
8a:7b:93:61:fe:df:0a:2f:59:32:f7:1e:11:84:e2:
51:89:d9:1f:1e:ce:04:7e:15:fb:53:58:1e:b1:b1:
15:92:39:dd:87:7d:b5:40:6f:4a:87:4d:89:d0:b1:
b8:d5:fb:0a:39:7e:6c:0e:2d:b3:8a:8f:96:59:c2:
f3:1f:7c:e6:00:20:2f:5c:4d:42:e6:93:02:de:16:
90:25:a0:10:35:e8:8e:a4:1d:bd:d0:00:cd:cb:bd:
ad:6e:c6:19:8b:6a:93:87:41:82:25:ed:8d:f5:5f:
e0:b0:e0:bf:ce:71:b4:5b:38:0c:29:59:84:3f:79:
98:44:ec:dc:84:29:9a:b0:9c:62:ef:85:8f:0d:3a:
4a:cf:37:6f:11:2e:5a:77:6a:46:7f:16:84:19:94:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:6C:CE:B3:D6:D8:D1:D7:8F:B0:76:0A:6D:1F:BC:5A:F9:67:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c45711c-8ad4-32cd-a35d-35c11d24700a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:29:93:ef:f5:f7:70:c1:29:d1:b7:24:6d:39:52:aa:81:c2:
24:26:b7:a0:f7:05:d5:7a:28:a0:55:a6:06:b4:ac:a7:7f:4a:
60:be:fc:47:97:20:ef:a7:dc:08:20:e6:38:68:c6:49:e2:6a:
05:57:01:8c:c0:48:8e:86:d1:63:3c:21:14:ca:30:14:b6:ba:
a7:e1:83:e8:f1:36:f9:75:25:ab:74:6c:7f:9b:83:42:08:27:
db:48:2d:78:a2:85:15:a8:81:fb:a0:9d:77:9e:c6:48:86:ad:
29:04:21:21:8d:bd:57:78:01:a8:7d:f3:4c:8d:62:87:2e:71:
a9:95:f3:81:52:a6:2e:06:35:9b:e2:51:89:43:d4:d1:af:44:
a1:e1:22:fb:b6:25:55:dd:09:1f:dc:fb:f2:49:50:74:ef:72:
20:16:1c:5c:66:a3:92:48:06:68:b2:e7:60:0e:af:f1:42:fc:
95:f7:a9:3c:d8:a9:bd:54:83:14:ca:e2:54:ec:a4:fd:8c:0b:
56:2d:52:3e:da:18:2b:89:82:e5:eb:45:e7:d2:2c:75:c0:c1:
e8:04:90:87:e0:cc:1d:7b:02:ec:30:fa:8f:8b:14:15:f9:7e:
f3:1c:72:b0:58:1a:92:d7:24:42:27:a5:5e:26:77:e7:0a:13:
7a:fe:c1:4f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEMJ6s/drxzN11+p78AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjA2YjlhZTItOWViYy00OGRjLTlhNjEtN2Q2ODg2NGQ1MDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4cJ6Z6y6aDBcEqExXnUjf81TKA9cHiS7A8w
QxyyFOMyFmV8idLlPPkTXK2zm4rUWkSQrq1NCQvuG2mpzUbVbEfkJXFlL7rF9xOh
YeUwn4ZD6XHbj8BFgf0bokh7usBA+ETcdsPCMGGKe5Nh/t8KL1ky9x4RhOJRidkf
Hs4EfhX7U1gesbEVkjndh321QG9Kh02J0LG41fsKOX5sDi2zio+WWcLzH3zmACAv
XE1C5pMC3haQJaAQNeiOpB290ADNy72tbsYZi2qTh0GCJe2N9V/gsOC/znG0WzgM
KVmEP3mYROzchCmasJxi74WPDTpKzzdvES5ad2pGfxaEGZTgAQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIEgbM6z1tjR14+wdgptH7xa+WesMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2M0NTcxMWMtOGFkNC0z
MmNkLWEzNWQtMzVjMTFkMjQ3MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArcIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmSmT7/X3cMEp0bckbTlSqoHCJCa3oPcF1XoooFWmBrSsp39KYL78R5cg
76fcCCDmOGjGSeJqBVcBjMBIjobRYzwhFMowFLa6p+GD6PE2+XUlq3Rsf5uDQggn
20gteKKFFaiB+6Cdd57GSIatKQQhIY29V3gBqH3zTI1ihy5xqZXzgVKmLgY1m+JR
iUPU0a9EoeEi+7YlVd0JH9z78klQdO9yIBYcXGajkkgGaLLnYA6v8UL8lfepPNip
vVSDFMriVOyk/YwLVi1SPtoYK4mC5etF59IsdcDB6ASQh+DMHXsC7DD6j4sUFfl+
8xxysFgaktckQielXiZ35woTev7BTw==
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:46 2024 by rpki-client on console-fra.rpki-client.org