Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0a2cedb9-d689-3bbf-b6c0-c4a4742e70a9.roa
File: 0a2cedb9-d689-3bbf-b6c0-c4a4742e70a9.roa (raw, json)
Hash identifier: 2UHi9OZN5iiwvoQJerHTCfX3CKtQv1peX9YT7ctYPLE=
Subject key identifier: 41:24:DF:F0:89:DB:EB:5C:93:FC:82:43:4C:77:54:B8:F6:0A:10:86
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285844474EE13F7A34C5827765BC28
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0a2cedb9-d689-3bbf-b6c0-c4a4742e70a9.roa
Signing time: Wed 20 Dec 2023 14:00:21 +0000
ROA not before: Wed 20 Dec 2023 14:00:21 +0000
ROA not after: Tue 19 Mar 2024 13:00:21 +0000
asID: 834
IP address blocks: 72.14.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 15:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:47:4e:e1:3f:7a:34:c5:82:77:65:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Dec 20 14:00:21 2023 GMT
Not After : Mar 19 13:00:21 2024 GMT
Subject: CN=baa9fbd0-6899-46db-afe0-4c6f81c1c76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:e1:3b:cd:61:75:dd:04:48:4f:c4:d0:e1:
75:8f:15:24:f0:0a:ac:e0:64:ff:73:de:1d:e2:28:
c8:bc:ef:30:38:3b:46:1e:50:2d:7f:0b:86:c8:e4:
41:28:0c:dc:48:04:2e:55:7d:72:2b:2d:36:8c:9a:
30:f3:3d:6a:26:96:05:a1:ca:65:53:d1:61:58:0b:
57:ce:b4:f0:32:d4:61:1f:92:96:12:51:d1:9a:09:
5a:a8:96:27:a0:48:d2:d0:8c:d6:a9:28:e5:df:c8:
87:e2:f3:cd:1f:5a:f4:51:e9:c7:93:31:85:d0:26:
41:59:c0:2a:6f:5b:19:91:29:29:c0:b4:33:47:34:
7d:ff:b5:82:af:48:59:9a:3d:03:a2:7f:f3:5a:ed:
df:8d:3f:1e:43:dc:88:68:a2:8e:39:5a:77:56:66:
2c:cc:9e:08:dd:0c:86:14:82:86:b0:5e:93:8b:cb:
c2:8f:0b:32:35:36:d1:2e:93:a8:ff:c9:ff:a8:d0:
55:b7:b6:5c:ff:b1:5f:f7:09:d8:59:38:96:e8:e3:
65:4c:f7:8f:e9:9d:5d:b3:50:4e:e8:a1:52:57:a8:
ed:b2:c5:e3:7b:3c:e2:c3:c4:64:17:bd:89:55:6e:
de:0b:7b:e0:f2:98:45:ea:6a:84:98:89:4a:ac:d2:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:24:DF:F0:89:DB:EB:5C:93:FC:82:43:4C:77:54:B8:F6:0A:10:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0a2cedb9-d689-3bbf-b6c0-c4a4742e70a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:15:72:b3:f2:79:3f:9d:bf:7c:40:d0:98:e6:0f:d5:82:f2:
5f:0a:9f:dd:c8:d1:eb:f7:7c:45:67:0c:f9:84:e7:d5:b5:c9:
1c:88:36:b3:61:0d:b4:34:89:31:86:2d:45:7c:25:67:44:38:
54:27:dc:3b:77:84:bb:8e:6a:29:74:05:ca:d9:5d:bb:c9:5b:
e4:6b:f3:2c:4d:6c:f9:db:96:d4:e9:0a:59:71:25:6c:c4:a3:
69:3d:fe:0c:4d:74:03:88:6e:e4:9e:13:1e:fd:25:fb:e5:ed:
87:f8:b0:23:2b:1e:e3:9b:56:27:ab:40:ce:2a:be:22:6b:fc:
02:fd:66:eb:ac:89:30:4c:9e:f9:26:b0:e6:2e:63:e2:a0:78:
a2:d0:77:67:f7:90:28:47:5e:07:ab:4c:df:7e:e5:02:dd:4c:
f4:36:08:b2:d7:37:41:f9:9f:f0:02:bf:75:70:26:66:d2:aa:
f5:e6:56:d9:c9:e6:bb:14:6f:ef:c4:d8:fe:5a:ec:84:d6:59:
ff:b8:da:30:82:bd:2f:bd:62:86:df:66:46:a6:05:94:ec:71:
25:26:77:93:f1:25:e1:ee:78:6d:91:27:27:31:7d:2c:36:e7:
8d:f6:22:a8:32:93:38:70:53:15:fe:e6:f2:5c:89:09:c7:43:
04:cf:47:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERHTuE/ejTFgndlvCgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTIzMTIyMDE0MDAyMVoXDTI0MDMxOTEzMDAyMVowLzEtMCsGA1UEAxMk
YmFhOWZiZDAtNjg5OS00NmRiLWFmZTAtNGM2ZjgxYzFjNzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcDhO81hdd0ESE/E0OF1jxUk8Aqs4GT/c94d
4ijIvO8wODtGHlAtfwuGyORBKAzcSAQuVX1yKy02jJow8z1qJpYFocplU9FhWAtX
zrTwMtRhH5KWElHRmglaqJYnoEjS0IzWqSjl38iH4vPNH1r0UenHkzGF0CZBWcAq
b1sZkSkpwLQzRzR9/7WCr0hZmj0Don/zWu3fjT8eQ9yIaKKOOVp3VmYszJ4I3QyG
FIKGsF6Ti8vCjwsyNTbRLpOo/8n/qNBVt7Zc/7Ff9wnYWTiW6ONlTPeP6Z1ds1BO
6KFSV6jtssXjezziw8RkF72JVW7eC3vg8phF6mqEmIlKrNILmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEk3/CJ2+tck/yCQ0x3VLj2ChCGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvMGEyY2VkYjktZDY4OS0z
YmJmLWI2YzAtYzRhNDc0MmU3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYVcrPyeT+dv3xA0JjmD9WC8l8Kn93I0ev3fEVnDPmE59W1yRyINrNh
DbQ0iTGGLUV8JWdEOFQn3Dt3hLuOail0BcrZXbvJW+Rr8yxNbPnbltTpCllxJWzE
o2k9/gxNdAOIbuSeEx79Jfvl7Yf4sCMrHuObVierQM4qviJr/AL9ZuusiTBMnvkm
sOYuY+KgeKLQd2f3kChHXgerTN9+5QLdTPQ2CLLXN0H5n/ACv3VwJmbSqvXmVtnJ
5rsUb+/E2P5a7ITWWf+42jCCvS+9YobfZkamBZTscSUmd5PxJeHueG2RJycxfSw2
5432IqgykzhwUxX+5vJciQnHQwTPR6E=
-----END CERTIFICATE-----
Generated at Wed Jan 10 19:13:16 2024 by rpki-client on console-fra.rpki-client.org