Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/9d47414c-6fa3-34ce-8e17-fb51d663c254.roa
File: 9d47414c-6fa3-34ce-8e17-fb51d663c254.roa (raw, json)
Hash identifier: eN7lO0MOGca6FKCAnFIH/SNuoUFCpGr+pF7wsRZBn9Y=
Subject key identifier: A7:BC:B7:A1:C0:4A:0A:78:44:18:33:C9:5C:C9:63:16:C3:82:79:3D
Certificate issuer: /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial: 010D0C9F43285845DD124D67B6BC164AA3F20E40
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/9d47414c-6fa3-34ce-8e17-fb51d663c254.roa
Signing time: Mon 13 May 2024 22:16:36 +0000
ROA not before: Mon 13 May 2024 22:16:36 +0000
ROA not after: Sun 11 Aug 2024 22:16:36 +0000
asID: 7018
IP address blocks: 67.220.72.0/23 maxlen: 24
67.220.74.0/24 maxlen: 24
67.220.80.0/24 maxlen: 24
67.220.82.0/24 maxlen: 24
67.220.87.0/24 maxlen: 24
67.220.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 12:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:dd:12:4d:67:b6:bc:16:4a:a3:f2:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Validity
Not Before: May 13 22:16:36 2024 GMT
Not After : Aug 11 22:16:36 2024 GMT
Subject: CN=3cd4e51f-df6a-472b-8a2f-b8910c4f3013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:57:c7:df:7b:67:a9:d7:f1:0e:18:51:7f:
12:18:9c:5a:0e:ff:0b:3f:77:82:5e:f2:fe:06:23:
c4:d2:3f:9a:8a:88:c9:d2:1d:19:93:09:e5:2a:f0:
47:56:c3:93:2e:b1:32:64:0c:f4:1f:e2:79:c8:b8:
59:10:37:25:77:f8:76:78:0b:4a:ef:27:dc:f7:fa:
65:4c:a2:e6:83:6d:bc:ab:e1:68:da:d0:24:77:b3:
00:0b:3f:53:40:9e:92:9e:f3:27:80:30:56:41:c0:
40:15:b3:38:70:90:16:da:4c:e9:6a:04:d2:17:70:
58:95:bb:dc:d5:e1:e6:de:f3:6e:3f:6e:b3:c8:dd:
e8:ce:59:e1:96:7e:8c:a9:dc:13:53:29:db:fc:83:
fc:09:09:0c:4c:22:71:9e:12:f5:59:52:1e:76:55:
ea:ec:82:a2:d1:d4:db:bb:1f:2e:1d:cc:30:33:4e:
6e:50:e9:86:1d:2d:3b:d4:ef:36:79:45:ad:32:de:
32:7e:37:e1:fc:f4:6d:26:58:ee:0f:24:b6:1b:a4:
ac:a6:3f:fa:b2:af:15:e0:27:26:32:13:81:a2:3d:
1f:63:45:5d:1b:14:26:8b:8c:63:26:8e:44:7a:ca:
a2:1f:1d:7c:de:07:b0:eb:1b:07:e0:96:c6:4a:2f:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BC:B7:A1:C0:4A:0A:78:44:18:33:C9:5C:C9:63:16:C3:82:79:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/9d47414c-6fa3-34ce-8e17-fb51d663c254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl
X509v3 Authority Key Identifier:
keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.72.0-67.220.74.255
67.220.80.0/24
67.220.82.0/24
67.220.87.0-67.220.89.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:98:82:fe:db:69:ef:e7:29:d0:f8:49:70:d2:07:fe:be:3f:
57:1b:ca:ed:ba:52:ac:66:b7:f6:ee:a9:a8:9f:ee:8b:42:30:
ed:88:8e:58:de:5a:c9:86:a3:72:ba:ce:0f:8c:a0:e0:11:57:
5f:b5:4f:e1:a6:53:a0:49:18:d2:56:e6:89:8b:21:85:bc:8a:
7a:cc:c7:cf:de:f7:ca:32:aa:7f:ef:b8:95:0c:39:29:f7:bb:
10:f5:1f:3e:7c:ad:dc:46:9b:f0:6b:18:71:f8:3f:a2:7c:19:
09:f2:0e:cf:7a:08:f1:b4:72:8b:de:59:c9:d6:56:da:a3:e8:
42:0c:92:fe:ae:58:2f:14:73:7c:8f:92:15:1e:03:a0:94:70:
5a:a0:e4:b7:d8:3b:9a:1a:0b:af:2f:ab:22:92:b4:24:e2:30:
f2:cf:98:fd:7e:bf:ac:f1:d5:b7:00:c0:1e:53:5f:69:89:e7:
e2:d3:23:09:12:aa:bd:e4:4a:69:24:1d:a8:58:50:9a:98:f0:
34:08:f6:40:fa:95:9d:7e:0c:30:51:4d:8a:72:93:e6:57:44:
fa:1a:07:82:18:b2:f1:4e:67:17:0e:d3:45:e9:a2:44:6d:ee:
06:09:ed:22:9a:96:82:0d:e2:45:d2:ec:28:37:c8:1a:f3:fb:
fd:d0:d3:c7
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEXdEk1ntrwWSqPyDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ2YTE3YzItYjE1NS00YjMyLTkzM2ItM2Y3MDQzZTJj
ZWNjMB4XDTI0MDUxMzIyMTYzNloXDTI0MDgxMTIyMTYzNlowLzEtMCsGA1UEAxMk
M2NkNGU1MWYtZGY2YS00NzJiLThhMmYtYjg5MTBjNGYzMDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovFXx997Z6nX8Q4YUX8SGJxaDv8LP3eCXvL+
BiPE0j+aiojJ0h0ZkwnlKvBHVsOTLrEyZAz0H+J5yLhZEDcld/h2eAtK7yfc9/pl
TKLmg228q+Fo2tAkd7MACz9TQJ6SnvMngDBWQcBAFbM4cJAW2kzpagTSF3BYlbvc
1eHm3vNuP26zyN3ozlnhln6MqdwTUynb/IP8CQkMTCJxnhL1WVIedlXq7IKi0dTb
ux8uHcwwM05uUOmGHS071O82eUWtMt4yfjfh/PRtJljuDyS2G6Sspj/6sq8V4Ccm
MhOBoj0fY0VdGxQmi4xjJo5EesqiHx183gew6xsH4JbGSi+06wIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFKe8t6HASgp4RBgzyVzJYxbDgnk9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZDZh
MTdjMi1iMTU1LTRiMzItOTMzYi0zZjcwNDNlMmNlY2MvOWQ0NzQxNGMtNmZhMy0z
NGNlLThlMTctZmI1MWQ2NjNjMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmQ2YTE3YzItYjE1NS00YjMyLTkz
M2ItM2Y3MDQzZTJjZWNjLzJkNmExN2MyLWIxNTUtNGIzMi05MzNiLTNmNzA0M2Uy
Y2VjYy5jcmwwHwYDVR0jBBgwFoAUC3U1rBllsGYLZfcv8uN/xHqjA1YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZDZhMTdjMi1iMTU1LTRiMzItOTMzYi0zZjcw
NDNlMmNlY2MuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAND3EgD
BABD3EoDBABD3FADBABD3FIwDAMEAEPcVwMEAUPcWDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhmIL+22nv
5ynQ+Elw0gf+vj9XG8rtulKsZrf27qmon+6LQjDtiI5Y3lrJhqNyus4PjKDgEVdf
tU/hplOgSRjSVuaJiyGFvIp6zMfP3vfKMqp/77iVDDkp97sQ9R8+fK3cRpvwaxhx
+D+ifBkJ8g7PegjxtHKL3lnJ1lbao+hCDJL+rlgvFHN8j5IVHgOglHBaoOS32Dua
GguvL6sikrQk4jDyz5j9fr+s8dW3AMAeU19piefi0yMJEqq95EppJB2oWFCamPA0
CPZA+pWdfgwwUU2KcpPmV0T6GgeCGLLxTmcXDtNF6aJEbe4GCe0impaCDeJF0uwo
N8ga8/v90NPH
-----END CERTIFICATE-----
Generated at Fri Jul 12 14:49:05 2024 by rpki-client on console-fra.rpki-client.org