Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/fa9b9332-0465-3726-8d09-4b287804b8dd.roa
File: fa9b9332-0465-3726-8d09-4b287804b8dd.roa (raw, json)
Hash identifier: HE6J94o/eHbKnnyqyM/yx36rIPf3NkGbMMGzoqEkisc=
Subject key identifier: 01:C7:22:95:6E:A5:55:B3:EA:E7:69:D7:85:76:E3:CA:54:BD:1D:0A
Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial: 010D0C9F432858458699247C9DAAAFF8713E4C00
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/fa9b9332-0465-3726-8d09-4b287804b8dd.roa
Signing time: Fri 12 Apr 2024 22:52:57 +0000
ROA not before: Fri 12 Apr 2024 22:52:57 +0000
ROA not after: Thu 11 Jul 2024 22:52:57 +0000
asID: 14618
IP address blocks: 209.178.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 04:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:86:99:24:7c:9d:aa:af:f8:71:3e:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
Validity
Not Before: Apr 12 22:52:57 2024 GMT
Not After : Jul 11 22:52:57 2024 GMT
Subject: CN=fdc8adb0-20eb-4eab-958f-b018b011beb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:2d:60:d0:ee:c9:ad:0f:92:f9:f1:8d:98:
9e:a8:e6:ad:e7:bc:b7:20:8c:e9:bf:11:b0:b1:b2:
24:e6:58:12:56:36:04:e5:87:31:65:d8:f2:bb:0c:
d5:ad:20:7c:b2:6a:ca:6b:5e:94:e0:9a:b1:3a:b9:
b0:be:07:42:02:8a:41:01:3d:00:80:2f:13:ed:ff:
46:54:6d:e6:00:b1:bc:82:8f:2c:e0:85:1c:76:23:
c4:5c:01:39:f0:a6:4a:e4:11:8c:55:3c:97:f9:60:
5c:7f:69:bb:e5:ba:fe:43:a2:a7:36:92:44:42:f5:
fd:f9:83:0e:c8:ff:e3:93:9a:57:59:bd:3c:de:e9:
21:a6:9a:44:e8:9a:4a:8f:ec:64:ec:18:ad:d2:e5:
40:d7:fd:9e:10:ab:00:f9:e3:86:cd:d7:48:eb:22:
99:42:d8:47:fb:d9:d3:ae:55:c3:cc:db:3a:b1:7a:
cb:5a:a8:81:ed:ed:24:e0:08:b8:f4:1c:b4:ae:9d:
8c:a5:74:4b:5e:8e:7d:66:03:7c:09:39:20:f5:2a:
93:7e:23:ca:81:28:12:c2:7d:03:fa:f4:a1:5a:f8:
5a:9a:2b:e9:74:fd:05:95:78:ed:f9:e4:f4:8a:43:
5e:2e:9e:1e:fe:fd:ce:df:e6:2a:29:0d:21:a3:6b:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:22:95:6E:A5:55:B3:EA:E7:69:D7:85:76:E3:CA:54:BD:1D:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/fa9b9332-0465-3726-8d09-4b287804b8dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
X509v3 Authority Key Identifier:
keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e5:d0:d3:ee:63:6f:eb:0e:3e:16:58:78:ff:d2:bd:6e:a0:
95:56:aa:71:78:85:8a:e1:48:e5:45:da:6e:be:c0:b9:13:90:
1a:e8:09:e8:76:97:df:ec:72:17:22:e9:be:06:dd:04:d8:a2:
b3:c8:70:12:1a:25:42:df:57:20:cd:4c:08:96:7d:45:f1:e4:
8c:4a:75:df:93:20:a1:de:12:1b:ba:b2:f7:0e:da:91:33:39:
04:f9:ce:92:c8:06:ca:bc:48:7e:b1:47:a3:35:0b:01:14:62:
1b:50:60:78:4b:0f:de:f6:01:48:c2:2e:05:9e:75:38:93:45:
9e:e7:c2:67:aa:20:2d:d2:a0:75:95:c4:32:5f:b3:86:51:c7:
8b:1f:70:4e:a9:3d:01:db:a0:ee:21:bf:15:4c:b2:fe:4c:72:
99:82:36:0d:65:b1:88:69:0d:ab:96:f6:45:08:1e:07:03:e2:
30:47:9f:72:af:a2:f6:ce:71:37:56:7f:37:b0:ac:12:9c:d1:
3a:a0:23:9d:98:87:68:e3:f1:33:32:6c:ee:bb:1b:88:c5:7c:
dd:75:a1:d6:61:95:d7:5a:14:7c:9f:47:59:c6:df:30:c4:7c:
68:75:37:05:0c:ac:00:20:eb:90:e2:fe:d4:27:1b:f5:ba:30:
ce:ee:f8:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWGmSR8naqv+HE+TAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1
ZjNkMB4XDTI0MDQxMjIyNTI1N1oXDTI0MDcxMTIyNTI1N1owLzEtMCsGA1UEAxMk
ZmRjOGFkYjAtMjBlYi00ZWFiLTk1OGYtYjAxOGIwMTFiZWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM4tYNDuya0PkvnxjZieqOat57y3IIzpvxGw
sbIk5lgSVjYE5YcxZdjyuwzVrSB8smrKa16U4JqxOrmwvgdCAopBAT0AgC8T7f9G
VG3mALG8go8s4IUcdiPEXAE58KZK5BGMVTyX+WBcf2m75br+Q6KnNpJEQvX9+YMO
yP/jk5pXWb083ukhpppE6JpKj+xk7Bit0uVA1/2eEKsA+eOGzddI6yKZQthH+9nT
rlXDzNs6sXrLWqiB7e0k4Ai49By0rp2MpXRLXo59ZgN8CTkg9SqTfiPKgSgSwn0D
+vShWvhamivpdP0FlXjt+eT0ikNeLp4e/v3O3+YqKQ0ho2uuYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHHIpVupVWz6udp14V248pUvR0KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky
NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvZmE5YjkzMzItMDQ2NS0z
NzI2LThkMDktNGIyODc4MDRiOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0
NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3
NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm
NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0bL0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrl0NPuY2/rDj4WWHj/0r1uoJVWqnF4hYrhSOVF2m6+wLkTkBroCeh2
l9/schci6b4G3QTYorPIcBIaJULfVyDNTAiWfUXx5IxKdd+TIKHeEhu6svcO2pEz
OQT5zpLIBsq8SH6xR6M1CwEUYhtQYHhLD972AUjCLgWedTiTRZ7nwmeqIC3SoHWV
xDJfs4ZRx4sfcE6pPQHboO4hvxVMsv5McpmCNg1lsYhpDauW9kUIHgcD4jBHn3Kv
ovbOcTdWfzewrBKc0TqgI52Yh2jj8TMybO67G4jFfN11odZhlddaFHyfR1nG3zDE
fGh1NwUMrAAg65Di/tQnG/W6MM7u+EI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:55 2024 by rpki-client on console-fra.rpki-client.org