Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/889b44c8-e811-370c-bf02-bf117c631d9e.roa
File: 889b44c8-e811-370c-bf02-bf117c631d9e.roa (raw, json)
Hash identifier: tBJ3OsPnJDRZCoClO+HcjmPzQCei/9ZMxy9y9D9G5s4=
Subject key identifier: 9D:8E:BF:1D:91:B8:4D:20:D8:B6:32:C3:82:B5:91:2D:A3:88:D4:33
Certificate issuer: /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial: 010D0C9F432858454D9D7B7D32A6DE96B1F07E90
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/889b44c8-e811-370c-bf02-bf117c631d9e.roa
Signing time: Sat 23 Mar 2024 13:00:32 +0000
ROA not before: Sat 23 Mar 2024 13:00:32 +0000
ROA not after: Fri 21 Jun 2024 13:00:32 +0000
asID: 63023
IP address blocks: 67.220.86.0/24 maxlen: 24
68.168.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 19:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:4d:9d:7b:7d:32:a6:de:96:b1:f0:7e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Validity
Not Before: Mar 23 13:00:32 2024 GMT
Not After : Jun 21 13:00:32 2024 GMT
Subject: CN=1080e3aa-a760-444d-8aef-08e854faa0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:b8:bd:dc:ce:c4:3b:d5:05:1c:88:c3:48:
cc:7c:14:43:f6:bf:97:42:82:f8:60:42:b2:69:5f:
b3:41:ee:96:6e:bb:8e:6a:58:54:e3:8a:48:c0:0f:
e5:ef:1d:13:aa:8c:7a:43:35:e2:b5:8f:a4:ce:49:
54:a7:f4:8e:16:40:e2:24:3b:db:a9:3c:b6:2c:56:
ae:62:e9:55:43:c1:ee:d1:1e:19:5c:77:ff:04:a7:
b1:bc:83:62:9f:53:a6:bc:17:45:35:d4:fd:c1:6d:
85:c7:93:37:44:a3:f7:e2:f1:3b:9e:f7:75:6b:02:
f3:30:45:7d:6d:d7:81:e5:ba:32:03:ad:b1:20:c7:
d6:b0:8c:54:ba:c9:79:af:9b:95:dc:0a:00:41:13:
87:a9:f5:75:77:b8:92:63:7d:d6:81:b0:df:11:b1:
26:4e:6a:5c:63:5f:d4:fe:f2:42:46:13:b1:9b:82:
85:2b:88:bd:2e:38:52:8d:b1:1a:a0:4b:a5:98:98:
63:8d:54:17:5e:29:e2:94:73:c2:84:83:57:14:3a:
a0:09:f6:ce:4f:f6:0e:f6:92:69:72:a6:53:03:83:
3c:9e:1a:11:e4:b5:a5:1a:1a:cf:66:4a:ab:ae:69:
f3:78:4f:22:d3:33:ff:80:88:80:02:cb:ae:7b:a1:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8E:BF:1D:91:B8:4D:20:D8:B6:32:C3:82:B5:91:2D:A3:88:D4:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/889b44c8-e811-370c-bf02-bf117c631d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl
X509v3 Authority Key Identifier:
keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.86.0/24
68.168.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:4e:40:af:96:da:90:69:9b:e1:e7:e4:74:f2:78:58:51:26:
42:5c:fe:29:a8:73:81:db:ed:24:cc:b2:c3:6a:2c:50:ba:c2:
e7:41:15:40:40:42:c8:c7:ad:cb:86:79:c9:78:8d:10:2e:be:
9a:32:ba:34:6f:d4:9a:a0:ad:d3:2e:0e:12:1a:d5:00:c7:7a:
fb:d1:52:87:bb:c6:bf:a3:83:b9:f9:dd:ce:b1:42:4f:6f:4b:
19:69:0d:5a:cd:b5:ed:c2:7f:31:e5:32:a1:3e:6c:4b:dd:6a:
d9:aa:3f:f5:bf:d1:5a:2b:6a:63:a2:55:a3:f3:57:8f:f1:be:
ce:71:e4:e8:0e:cd:81:42:06:bb:f2:c4:da:40:8b:52:99:a7:
a4:8e:ca:c1:8f:47:02:a4:24:15:b3:bc:3f:93:f4:4c:23:6e:
20:da:fe:0e:44:1d:da:a3:28:a9:3f:ed:b1:4e:8c:51:ce:08:
5c:f1:2b:65:fb:a6:6f:47:a3:7d:bd:c0:d6:c9:1a:89:98:d8:
1c:bb:45:3c:2e:99:84:9e:09:0a:cb:5d:ca:8c:b4:b0:2a:dc:
73:92:8f:e9:76:68:6a:4b:31:87:0b:48:a8:b9:7e:f6:69:97:
d3:97:12:f6:f7:5b:ee:94:a3:d5:68:86:68:14:6d:55:a7:92:
b9:09:a6:83
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVNnXt9MqbelrHwfpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ2YTE3YzItYjE1NS00YjMyLTkzM2ItM2Y3MDQzZTJj
ZWNjMB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
MTA4MGUzYWEtYTc2MC00NDRkLThhZWYtMDhlODU0ZmFhMGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmC4vdzOxDvVBRyIw0jMfBRD9r+XQoL4YEKy
aV+zQe6WbruOalhU44pIwA/l7x0Tqox6QzXitY+kzklUp/SOFkDiJDvbqTy2LFau
YulVQ8Hu0R4ZXHf/BKexvINin1OmvBdFNdT9wW2Fx5M3RKP34vE7nvd1awLzMEV9
bdeB5boyA62xIMfWsIxUusl5r5uV3AoAQROHqfV1d7iSY33WgbDfEbEmTmpcY1/U
/vJCRhOxm4KFK4i9LjhSjbEaoEulmJhjjVQXXinilHPChINXFDqgCfbOT/YO9pJp
cqZTA4M8nhoR5LWlGhrPZkqrrmnzeE8i0zP/gIiAAsuue6F1JwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJ2Ovx2RuE0g2LYyw4K1kS2jiNQzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZDZh
MTdjMi1iMTU1LTRiMzItOTMzYi0zZjcwNDNlMmNlY2MvODg5YjQ0YzgtZTgxMS0z
NzBjLWJmMDItYmYxMTdjNjMxZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmQ2YTE3YzItYjE1NS00YjMyLTkz
M2ItM2Y3MDQzZTJjZWNjLzJkNmExN2MyLWIxNTUtNGIzMi05MzNiLTNmNzA0M2Uy
Y2VjYy5jcmwwHwYDVR0jBBgwFoAUC3U1rBllsGYLZfcv8uN/xHqjA1YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZDZhMTdjMi1iMTU1LTRiMzItOTMzYi0zZjcw
NDNlMmNlY2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQ9xWAwQA
RKgfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACNOQK+W2pBpm+Hn5HTyeFhRJkJc/imoc4Hb7STMssNqLFC6
wudBFUBAQsjHrcuGecl4jRAuvpoyujRv1JqgrdMuDhIa1QDHevvRUoe7xr+jg7n5
3c6xQk9vSxlpDVrNte3CfzHlMqE+bEvdatmqP/W/0VoramOiVaPzV4/xvs5x5OgO
zYFCBrvyxNpAi1KZp6SOysGPRwKkJBWzvD+T9EwjbiDa/g5EHdqjKKk/7bFOjFHO
CFzxK2X7pm9Ho329wNbJGomY2By7RTwumYSeCQrLXcqMtLAq3HOSj+l2aGpLMYcL
SKi5fvZpl9OXEvb3W+6Uo9VohmgUbVWnkrkJpoM=
-----END CERTIFICATE-----
Generated at Tue Apr 2 20:59:16 2024 by rpki-client on console-fra.rpki-client.org