Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/b2cde8d7-6908-3bcb-b8a6-52f8e8de28e3.roa
File: b2cde8d7-6908-3bcb-b8a6-52f8e8de28e3.roa (raw, json)
Hash identifier: LU8n5RguBeaU5cX3s+KHrgWuLdFEKTmEzJx/7TupsrU=
Subject key identifier: 9D:8C:A9:68:85:2E:BC:79:83:A3:90:E9:6A:BD:3F:E8:DF:7C:B3:9C
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F43285841B17B2C91418EE8C2A4ADA300
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/b2cde8d7-6908-3bcb-b8a6-52f8e8de28e3.roa
Signing time: Tue 24 May 2022 21:33:00 +0000
ROA not before: Tue 24 May 2022 21:33:00 +0000
ROA not after: Mon 26 Aug 2024 04:00:00 +0000
asID: 19551
IP address blocks: 160.129.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Apr 2023 13:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:b1:7b:2c:91:41:8e:e8:c2:a4:ad:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: May 24 21:33:00 2022 GMT
Not After : Aug 26 04:00:00 2024 GMT
Subject: CN=1832a7f2-b391-4f93-89b3-7b4eb00e499f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4e:1f:98:7a:61:4f:ba:69:bf:a3:49:4f:e3:
65:87:e4:0c:3c:63:75:52:36:d4:c8:86:5b:ab:a0:
22:91:e2:32:2a:6f:2a:bf:cb:2a:ac:14:e6:b4:31:
a2:75:bf:8f:dd:e8:d4:48:ff:de:12:77:c0:b6:68:
5a:6b:c2:fe:c0:19:7b:ff:c2:7b:65:3e:a6:58:ca:
95:34:25:ad:0c:c8:0a:17:e9:0a:f8:fb:a9:a6:48:
84:ab:fd:2b:fe:57:c2:dd:3d:89:ba:0f:b9:d1:91:
a7:b8:8a:46:aa:d2:70:8d:ca:11:91:eb:d4:2a:09:
ec:4f:1d:76:0a:e7:0e:c8:6c:a8:dc:45:2a:cb:06:
11:45:d7:4d:e1:ca:0e:96:b3:92:a0:fc:81:27:9a:
ed:1f:cd:58:b6:b9:35:28:dc:92:cd:eb:cf:e2:44:
57:b0:17:43:fb:d6:b0:8f:10:4d:f9:bc:47:8a:10:
0e:d1:10:8e:86:1c:c8:53:48:3e:d8:69:e1:3c:f4:
46:1d:d3:fd:7e:11:48:0f:02:09:89:d2:62:6d:a1:
c3:b1:f1:7c:62:b8:19:0e:fe:b5:35:0c:bf:10:2f:
b4:43:81:b8:0f:87:86:c7:68:cd:86:a4:5c:42:61:
90:df:84:5c:46:1e:a8:f4:b2:b4:9a:9d:07:a9:ff:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:A9:68:85:2E:BC:79:83:A3:90:E9:6A:BD:3F:E8:DF:7C:B3:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/b2cde8d7-6908-3bcb-b8a6-52f8e8de28e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:45:89:84:45:6f:b6:24:6f:5d:5b:8b:ee:26:78:9e:36:86:
e2:d0:1d:59:82:4f:44:92:11:a1:b1:37:08:ae:3f:1b:c2:30:
c2:c2:17:df:a2:00:99:db:12:9c:1e:78:46:b9:a2:2d:57:72:
9d:01:49:cf:cc:a2:b1:5e:f7:d4:b2:19:d5:89:39:27:fd:6b:
d1:0f:d7:78:12:04:e9:3e:d7:88:38:e7:37:2f:cb:86:ca:91:
ea:7b:65:9a:4a:be:10:c7:cb:28:98:12:03:69:ae:3f:72:e3:
d8:1a:40:b6:6d:be:89:29:3a:44:78:07:95:b5:3f:bb:1a:c2:
5f:74:69:3b:fe:76:01:4c:b8:94:1f:5b:8e:b9:e8:0f:4c:23:
ea:d1:e9:f8:9a:e3:19:d2:1f:d4:d8:03:a9:ba:4f:cf:16:9b:
88:81:4e:a1:34:7d:4d:a9:bb:7f:3c:fb:ab:13:ff:c7:88:33:
1c:8e:94:d9:b1:6d:ca:1c:4f:bc:b7:78:e4:2a:c3:fa:d7:8e:
1c:4b:09:24:00:25:7f:f1:ee:e1:7b:4d:18:bd:cf:f2:78:4c:
0d:29:bf:b0:ef:fd:87:d8:58:f2:5d:44:f8:13:96:0e:de:2f:
f4:53:62:e3:6f:ce:b9:04:48:a6:44:46:a7:6c:80:75:2c:22:
3d:50:85:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGxeyyRQY7owqStowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2Jh
MDFlMB4XDTIyMDUyNDIxMzMwMFoXDTI0MDgyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MTgzMmE3ZjItYjM5MS00ZjkzLTg5YjMtN2I0ZWIwMGU0OTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk4fmHphT7ppv6NJT+Nlh+QMPGN1UjbUyIZb
q6AikeIyKm8qv8sqrBTmtDGidb+P3ejUSP/eEnfAtmhaa8L+wBl7/8J7ZT6mWMqV
NCWtDMgKF+kK+PuppkiEq/0r/lfC3T2Jug+50ZGnuIpGqtJwjcoRkevUKgnsTx12
CucOyGyo3EUqywYRRddN4coOlrOSoPyBJ5rtH81Ytrk1KNySzevP4kRXsBdD+9aw
jxBN+bxHihAO0RCOhhzIU0g+2GnhPPRGHdP9fhFIDwIJidJibaHDsfF8YrgZDv61
NQy/EC+0Q4G4D4eGx2jNhqRcQmGQ34RcRh6o9LK0mp0Hqf8MwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2MqWiFLrx5g6OQ6Wq9P+jffLOcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFm
Y2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvYjJjZGU4ZDctNjkwOC0z
YmNiLWI4YTYtNTJmOGU4ZGUyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGQxZmNhNzgtOWQ5OC00NTU5LWJk
NTEtODBhNmM0N2JhMDFlLzBkMWZjYTc4LTlkOTgtNDU1OS1iZDUxLTgwYTZjNDdi
YTAxZS5jcmwwHwYDVR0jBBgwFoAUymGb6KykOgfQv2pfW6o/1CDpWtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2
YzQ3YmEwMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoIHIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhFiYRFb7Ykb11bi+4meJ42huLQHVmCT0SSEaGxNwiuPxvCMMLCF9+i
AJnbEpweeEa5oi1Xcp0BSc/MorFe99SyGdWJOSf9a9EP13gSBOk+14g45zcvy4bK
kep7ZZpKvhDHyyiYEgNprj9y49gaQLZtvokpOkR4B5W1P7sawl90aTv+dgFMuJQf
W4656A9MI+rR6fia4xnSH9TYA6m6T88Wm4iBTqE0fU2pu388+6sT/8eIMxyOlNmx
bcocT7y3eOQqw/rXjhxLCSQAJX/x7uF7TRi9z/J4TA0pv7Dv/YfYWPJdRPgTlg7e
L/RTYuNvzrkESKZERqdsgHUsIj1QhSw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org