Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/4c946863-16d1-32bd-b141-48be910ae204.roa
File: 4c946863-16d1-32bd-b141-48be910ae204.roa (raw, json)
Hash identifier: 6EzvNjPN/WejOcD4xwpLciSLXmSDQZyG/JuP8EfWFL8=
Subject key identifier: 0A:25:4C:97:96:EF:45:97:4E:D1:13:62:83:AA:14:28:0C:25:B6:FB
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285845280AF5878929F0BC01A31E00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/4c946863-16d1-32bd-b141-48be910ae204.roa
Signing time: Sun 10 Mar 2024 02:00:25 +0000
ROA not before: Sun 10 Mar 2024 02:00:25 +0000
ROA not after: Sat 08 Jun 2024 01:00:25 +0000
asID: 996
IP address blocks: 72.14.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 03:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:28:0a:f5:87:89:29:f0:bc:01:a3:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Mar 10 02:00:25 2024 GMT
Not After : Jun 8 01:00:25 2024 GMT
Subject: CN=100a0d92-0323-4d9e-8ea0-5e8f64967f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:79:df:30:62:42:cd:74:3d:73:e5:44:a0:59:
a3:4b:5a:50:2f:8c:96:b9:b9:f9:f8:ed:bc:79:7a:
ba:5f:dc:e4:47:01:a4:4d:07:20:16:48:43:96:1c:
bc:94:fd:62:38:34:46:98:d8:d0:d5:92:9a:59:5b:
3d:74:13:5d:49:f6:9e:8a:19:68:86:fc:7b:c5:42:
2b:96:4e:69:57:1e:9f:0d:90:77:e7:b7:8a:b4:1a:
85:83:a4:1b:83:3b:5e:cc:fb:3d:4d:d5:90:11:85:
42:18:3c:e9:45:8a:b0:bb:f0:db:ab:a4:bf:0a:8e:
88:4f:86:db:26:3a:75:49:12:5f:14:00:2c:68:7b:
32:37:94:0c:e6:ad:59:b9:36:71:d9:1d:79:c2:b1:
72:08:46:7e:80:9b:94:18:ba:43:08:88:c2:85:6e:
a1:46:5c:5e:90:51:ba:0c:fa:e3:9f:47:25:88:80:
85:45:a4:06:02:cb:ed:aa:68:62:d2:e9:9e:9d:f3:
3f:88:d7:c6:5e:3e:9c:e0:9f:08:7a:3e:e2:22:18:
6f:73:d5:cb:94:66:23:6a:d8:59:db:29:f6:99:14:
13:41:b7:a4:d1:d1:12:4e:a0:64:d5:65:af:0f:bd:
bc:7d:05:7f:5f:e7:f2:8e:23:27:ff:96:e1:d3:23:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:4C:97:96:EF:45:97:4E:D1:13:62:83:AA:14:28:0C:25:B6:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/4c946863-16d1-32bd-b141-48be910ae204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:16:a9:1d:be:d5:de:ba:a1:9e:c9:6a:80:15:eb:21:fa:b3:
4f:41:90:33:09:17:2b:e6:03:ed:95:aa:40:0b:5c:85:79:7a:
5f:a7:3e:a0:fe:e6:91:db:1c:26:47:eb:1b:bb:c1:1a:84:b9:
1a:bc:13:f9:d5:0d:bb:29:87:68:46:a7:78:fe:7a:77:98:42:
a4:d2:ab:92:a3:4c:ff:b0:3c:e0:e1:65:48:9b:78:87:33:56:
a6:f2:fe:bb:bc:e2:41:85:29:7c:e3:08:c5:45:62:7e:1d:a8:
08:1e:64:72:4a:3c:7f:90:18:27:e2:1e:de:7d:dc:97:3a:b5:
b3:a9:16:7d:55:0b:d3:df:4b:a6:e9:d0:c5:15:b8:ec:bf:9c:
74:1a:d0:9c:8b:92:44:4c:7b:24:81:b1:0f:ad:86:f5:83:ec:
0c:96:96:59:e2:61:a1:db:c6:51:74:76:c1:97:64:cd:69:b6:
4a:0c:22:c6:61:cb:8a:e8:e4:88:ab:78:91:8c:4e:a5:c7:a0:
bf:41:1d:15:9d:a0:1a:ae:bf:b0:41:17:b9:f7:e3:59:8b:e2:
07:f9:96:21:21:6e:b3:dd:1f:5c:a3:8a:6c:3d:4b:92:77:d0:
65:2d:94:e9:ba:b3:ef:dc:cd:7f:c7:75:4e:6c:9f:c4:5c:38:
e0:3a:1f:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUoCvWHiSnwvAGjHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI0MDMxMDAyMDAyNVoXDTI0MDYwODAxMDAyNVowLzEtMCsGA1UEAxMk
MTAwYTBkOTItMDMyMy00ZDllLThlYTAtNWU4ZjY0OTY3ZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3nfMGJCzXQ9c+VEoFmjS1pQL4yWubn5+O28
eXq6X9zkRwGkTQcgFkhDlhy8lP1iODRGmNjQ1ZKaWVs9dBNdSfaeihlohvx7xUIr
lk5pVx6fDZB357eKtBqFg6QbgztezPs9TdWQEYVCGDzpRYqwu/Dbq6S/Co6IT4bb
Jjp1SRJfFAAsaHsyN5QM5q1ZuTZx2R15wrFyCEZ+gJuUGLpDCIjChW6hRlxekFG6
DPrjn0cliICFRaQGAsvtqmhi0umenfM/iNfGXj6c4J8Iej7iIhhvc9XLlGYjathZ
2yn2mRQTQbek0dESTqBk1WWvD728fQV/X+fyjiMn/5bh0yPjSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAolTJeW70WXTtETYoOqFCgMJbb7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNGM5NDY4NjMtMTZkMS0z
MmJkLWIxNDEtNDhiZTkxMGFlMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0WqR2+1d66oZ7JaoAV6yH6s09BkDMJFyvmA+2VqkALXIV5el+nPqD+
5pHbHCZH6xu7wRqEuRq8E/nVDbsph2hGp3j+eneYQqTSq5KjTP+wPODhZUibeIcz
Vqby/ru84kGFKXzjCMVFYn4dqAgeZHJKPH+QGCfiHt593Jc6tbOpFn1VC9PfS6bp
0MUVuOy/nHQa0JyLkkRMeySBsQ+thvWD7AyWllniYaHbxlF0dsGXZM1ptkoMIsZh
y4ro5IireJGMTqXHoL9BHRWdoBquv7BBF7n341mL4gf5liEhbrPdH1yjimw9S5J3
0GUtlOm6s+/czX/HdU5sn8RcOOA6H8I=
-----END CERTIFICATE-----
Generated at Fri May 10 04:58:19 2024 by rpki-client on console-ams.rpki-client.org