Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e20383334.roa
File: 3231362e3234372e39392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: soFoszh5/mYbF4ExLn+NMmqdB/7nu0FDrNXgegGmLvE=
Subject key identifier: B5:DA:EB:62:CB:2D:02:AA:A9:4B:46:1A:2D:8C:B8:BD:2D:A8:54:D9
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 360E262559869C32F08CCE8EA33A70F933FACA1D
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e20383334.roa
Signing time: Tue 02 Jan 2024 00:00:04 +0000
ROA not before: Mon 01 Jan 2024 23:55:04 +0000
ROA not after: Tue 31 Dec 2024 00:00:04 +0000
asID: 834
IP address blocks: 216.247.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 03:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:0e:26:25:59:86:9c:32:f0:8c:ce:8e:a3:3a:70:f9:33:fa:ca:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Jan 1 23:55:04 2024 GMT
Not After : Dec 31 00:00:04 2024 GMT
Subject: CN=B5DAEB62CB2D02AAA94B461A2D8CB8BD2DA854D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:66:d9:5b:04:d0:e1:fc:d9:41:12:4e:03:
c9:66:af:bd:0d:d4:f0:fd:a4:48:7e:f1:e8:e4:59:
cb:56:60:e6:7e:f2:5a:66:76:21:42:47:40:49:e6:
a8:a8:8c:71:e8:49:ec:71:97:df:46:74:35:53:d7:
1a:fb:91:18:9c:d7:78:13:d3:43:63:cc:23:8b:fb:
50:9a:9e:af:40:61:8e:dc:9d:98:d5:6c:c5:8e:e0:
f3:a8:a3:72:86:33:40:b1:c7:12:59:66:0d:e8:1f:
52:d1:76:a1:1b:04:34:64:32:62:80:81:75:7d:1b:
d1:d2:c1:5f:5d:68:76:3b:23:4f:65:8d:6d:08:c4:
40:d7:3c:f2:bc:5d:75:43:ba:90:42:eb:bb:84:57:
9d:43:ec:50:de:80:5b:52:41:e5:0c:1b:45:56:09:
51:f5:9f:2d:c7:f8:e2:73:c5:dd:43:80:80:40:2b:
d9:50:7a:8e:82:b6:2c:60:4e:8d:aa:4c:ba:b7:da:
2d:38:50:96:f0:9c:d8:56:63:94:fc:3c:2f:e9:11:
e2:2c:4b:87:db:f0:e8:0b:7a:5e:60:ac:85:86:6c:
75:f1:1f:a5:7f:4d:dd:6c:fb:69:08:80:b6:18:27:
9c:81:cd:75:6d:64:45:2b:23:ae:83:6e:47:61:f8:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DA:EB:62:CB:2D:02:AA:A9:4B:46:1A:2D:8C:B8:BD:2D:A8:54:D9
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.99.0/24
Signature Algorithm: sha256WithRSAEncryption
06:25:6e:d0:30:3d:0c:42:92:cd:4b:3e:5b:c1:5d:3a:ce:c5:
b4:58:1a:d6:63:1c:5e:76:10:21:f1:de:f4:5d:59:31:84:39:
aa:98:e1:09:44:a0:ee:73:b5:a9:bd:fd:07:0f:41:e2:b8:0e:
af:ba:ce:e3:b9:86:dd:89:96:8c:73:84:06:6d:e8:d3:7f:3c:
81:be:6a:ab:65:06:0c:5e:08:cb:5e:37:fe:49:17:4c:7b:38:
d6:77:b1:22:bc:a8:23:af:dd:fd:84:1c:2b:08:1c:e0:85:fb:
4a:e3:0f:fa:eb:61:8b:28:31:f8:5d:ff:9c:36:0b:18:f0:e6:
07:d7:56:00:65:0d:dc:f2:4d:92:38:e3:08:83:8e:b7:a9:ad:
85:da:07:e2:b9:b9:1f:be:48:f1:6f:8c:53:15:47:7f:f9:00:
73:db:a8:10:f7:77:a0:9e:4c:61:04:d2:5b:c0:a4:8b:89:d0:
dc:25:c9:37:34:20:55:77:56:53:a3:49:ea:22:6d:15:1a:31:
ba:9b:2e:12:e3:36:98:48:92:58:0a:97:2b:dd:6b:59:5b:31:
06:32:18:7a:29:f0:1c:c9:cc:a0:e3:36:be:fa:ce:e1:11:d1:
22:bf:a7:a6:5d:ce:e2:c9:2c:de:e7:fb:07:64:09:44:c8:1e:
5d:04:cb:1f
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUNg4mJVmGnDLwjM6Oozpw+TP6yh0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjQwMTAxMjM1NTA0WhcNMjQxMjMxMDAwMDA0
WjAzMTEwLwYDVQQDEyhCNURBRUI2MkNCMkQwMkFBQTk0QjQ2MUEyRDhDQjhCRDJE
QTg1NEQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdRm2VsE0OH8
2UESTgPJZq+9DdTw/aRIfvHo5FnLVmDmfvJaZnYhQkdASeaoqIxx6EnscZffRnQ1
U9ca+5EYnNd4E9NDY8wji/tQmp6vQGGO3J2Y1WzFjuDzqKNyhjNAsccSWWYN6B9S
0XahGwQ0ZDJigIF1fRvR0sFfXWh2OyNPZY1tCMRA1zzyvF11Q7qQQuu7hFedQ+xQ
3oBbUkHlDBtFVglR9Z8tx/jic8XdQ4CAQCvZUHqOgrYsYE6Nqky6t9otOFCW8JzY
VmOU/Dwv6RHiLEuH2/DoC3peYKyFhmx18R+lf03dbPtpCIC2GCecgc11bWRFKyOu
g25HYfi1NQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLXa62LLLQKqqUtGGi2MuL0t
qFTZMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBm
MTc1NDE2NjdmLzEvMzIzMTM2MmUzMjM0MzcyZTM5MzkyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY92MwDQYJKoZIhvcNAQELBQADggEB
AAYlbtAwPQxCks1LPlvBXTrOxbRYGtZjHF52ECHx3vRdWTGEOaqY4QlEoO5ztam9
/QcPQeK4Dq+6zuO5ht2JloxzhAZt6NN/PIG+aqtlBgxeCMteN/5JF0x7ONZ3sSK8
qCOv3f2EHCsIHOCF+0rjD/rrYYsoMfhd/5w2Cxjw5gfXVgBlDdzyTZI44wiDjrep
rYXaB+K5uR++SPFvjFMVR3/5AHPbqBD3d6CeTGEE0lvApIuJ0NwlyTc0IFV3VlOj
SeoibRUaMbqbLhLjNphIklgKlyvda1lbMQYyGHop8BzJzKDjNr76zuER0SK/p6Zd
zuLJLN7n+wdkCUTIHl0Eyx8=
-----END CERTIFICATE-----
Generated at Thu Jan 11 04:20:00 2024 by rpki-client on console-ams.rpki-client.org