Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/0d1b29b0-b136-399e-9c8f-4538186f2d40.roa
File: 0d1b29b0-b136-399e-9c8f-4538186f2d40.roa (raw, json)
Hash identifier: lt7/Vm6Rt9eDRMX9U673VFkJx6Ujpfab2vgAE4Ijlqw=
Subject key identifier: 14:3C:D6:26:7A:62:5E:4E:9A:E9:BF:42:13:DA:EB:2C:47:87:EF:DA
Certificate issuer: /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial: 010D0C9F43285846837D69CA6E8C0B7EDCBFBC80
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/0d1b29b0-b136-399e-9c8f-4538186f2d40.roa
Signing time: Fri 12 Jul 2024 12:56:36 +0000
ROA not before: Fri 12 Jul 2024 12:56:36 +0000
ROA not after: Thu 10 Oct 2024 12:56:36 +0000
asID: 7018
IP address blocks: 67.220.87.0/24 maxlen: 24
67.220.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 17:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:83:7d:69:ca:6e:8c:0b:7e:dc:bf:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Validity
Not Before: Jul 12 12:56:36 2024 GMT
Not After : Oct 10 12:56:36 2024 GMT
Subject: CN=1789f13a-5169-43f2-898d-5074ee586ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:8a:36:02:59:7b:d1:b8:0e:f2:5a:c0:0d:
ed:13:0c:69:8a:61:d0:9e:f7:0e:5f:2b:42:6f:58:
91:0e:e7:1d:66:2b:5b:c7:1a:0d:5c:d8:27:ed:64:
31:e7:bb:79:28:01:77:65:a1:e6:e7:6d:c0:6f:f3:
bb:33:d3:64:59:dd:fd:05:c3:ba:1b:79:2b:28:10:
31:4a:24:6d:ab:1e:40:d8:30:8a:97:2c:82:5c:56:
7f:a2:bc:a1:9c:9c:14:87:28:86:4a:e5:74:27:75:
70:51:03:0e:63:54:59:f4:f0:6e:ca:49:fd:1e:39:
62:50:70:d0:00:b4:0b:c9:0f:7c:a4:d6:5d:e0:b0:
59:d0:a0:79:56:26:1d:b7:ed:96:b7:74:5e:ed:68:
28:3e:6b:d3:a3:aa:55:52:11:f9:12:33:4b:48:4a:
b2:cc:5c:72:08:3b:e4:8f:cf:c2:aa:7f:0d:7d:c1:
f5:5f:06:20:2a:e8:ee:91:35:3a:d4:b5:13:d4:77:
91:c8:50:c6:d0:9f:cf:a1:3f:8b:e5:97:a4:79:95:
21:35:af:68:32:4e:08:91:c7:bc:1f:51:36:ce:60:
8e:b4:3a:c6:9c:46:c7:13:b4:f9:07:3d:51:fb:4e:
69:d1:8f:96:f4:2f:45:92:d2:b2:33:81:93:dd:11:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3C:D6:26:7A:62:5E:4E:9A:E9:BF:42:13:DA:EB:2C:47:87:EF:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/0d1b29b0-b136-399e-9c8f-4538186f2d40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl
X509v3 Authority Key Identifier:
keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.87.0-67.220.89.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:f4:5f:be:c4:6c:17:d1:03:a7:dc:43:59:d6:5b:ba:c9:5b:
17:72:9a:ed:be:3a:ca:a9:86:71:4f:82:44:e6:eb:65:13:55:
a4:f8:a2:86:cc:d9:41:18:5a:64:69:81:53:45:15:5d:ba:57:
8f:5a:91:8e:47:9c:90:02:47:a7:11:03:87:b7:8b:87:d0:01:
04:d9:66:96:61:53:9f:d9:eb:ac:e2:23:5b:9a:90:3c:a7:22:
22:f4:6a:30:f7:21:30:2d:e0:9c:68:2b:6e:18:e6:ff:8c:08:
81:e4:c6:a8:65:cc:c4:64:bb:87:e5:91:64:76:90:91:dc:11:
87:5d:d2:e4:d0:03:44:3f:b6:23:7e:b9:eb:2d:59:25:72:1e:
ff:f1:21:7e:d7:e4:61:a4:3a:6e:93:12:27:3b:ae:45:e0:d2:
b9:42:6d:7d:27:cb:bf:f0:b3:24:72:7b:97:85:04:bb:e0:37:
2b:01:36:dd:f1:4b:a8:13:9a:43:0b:58:41:03:a2:80:ea:03:
2e:ba:8e:65:20:ca:e3:11:5e:bb:87:44:b1:20:b9:0f:38:36:
59:9d:f3:85:4d:32:a5:a6:19:b2:87:54:4c:96:ac:69:e0:e8:
07:e4:76:3d:37:14:88:53:3b:cf:dc:c7:3a:68:91:52:a0:0c:
74:04:04:0b
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEaDfWnKbowLfty/vIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ2YTE3YzItYjE1NS00YjMyLTkzM2ItM2Y3MDQzZTJj
ZWNjMB4XDTI0MDcxMjEyNTYzNloXDTI0MTAxMDEyNTYzNlowLzEtMCsGA1UEAxMk
MTc4OWYxM2EtNTE2OS00M2YyLTg5OGQtNTA3NGVlNTg2ZmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEqKNgJZe9G4DvJawA3tEwxpimHQnvcOXytC
b1iRDucdZitbxxoNXNgn7WQx57t5KAF3ZaHm523Ab/O7M9NkWd39BcO6G3krKBAx
SiRtqx5A2DCKlyyCXFZ/oryhnJwUhyiGSuV0J3VwUQMOY1RZ9PBuykn9HjliUHDQ
ALQLyQ98pNZd4LBZ0KB5ViYdt+2Wt3Re7WgoPmvTo6pVUhH5EjNLSEqyzFxyCDvk
j8/Cqn8NfcH1XwYgKujukTU61LUT1HeRyFDG0J/PoT+L5ZekeZUhNa9oMk4Ikce8
H1E2zmCOtDrGnEbHE7T5Bz1R+05p0Y+W9C9FktKyM4GT3RHJswIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFBQ81iZ6Yl5Omum/QhPa6yxHh+/aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZDZh
MTdjMi1iMTU1LTRiMzItOTMzYi0zZjcwNDNlMmNlY2MvMGQxYjI5YjAtYjEzNi0z
OTllLTljOGYtNDUzODE4NmYyZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmQ2YTE3YzItYjE1NS00YjMyLTkz
M2ItM2Y3MDQzZTJjZWNjLzJkNmExN2MyLWIxNTUtNGIzMi05MzNiLTNmNzA0M2Uy
Y2VjYy5jcmwwHwYDVR0jBBgwFoAUC3U1rBllsGYLZfcv8uN/xHqjA1YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZDZhMTdjMi1iMTU1LTRiMzItOTMzYi0zZjcw
NDNlMmNlY2MuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABD3FcD
BAFD3FgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAJfRfvsRsF9EDp9xDWdZbuslbF3Ka7b46yqmGcU+CRObr
ZRNVpPiihszZQRhaZGmBU0UVXbpXj1qRjkeckAJHpxEDh7eLh9ABBNlmlmFTn9nr
rOIjW5qQPKciIvRqMPchMC3gnGgrbhjm/4wIgeTGqGXMxGS7h+WRZHaQkdwRh13S
5NADRD+2I3656y1ZJXIe//EhftfkYaQ6bpMSJzuuReDSuUJtfSfLv/CzJHJ7l4UE
u+A3KwE23fFLqBOaQwtYQQOigOoDLrqOZSDK4xFeu4dEsSC5Dzg2WZ3zhU0ypaYZ
sodUTJasaeDoB+R2PTcUiFM7z9zHOmiRUqAMdAQECw==
-----END CERTIFICATE-----
Generated at Mon Aug 12 20:10:48 2024 by rpki-client on console-fra.rpki-client.org