Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/90d54f35-2e68-368a-9a2c-1e9f354d9c49.roa
File: 90d54f35-2e68-368a-9a2c-1e9f354d9c49.roa (raw, json)
Hash identifier: PyZxSoy0T655KhC6YvmcIyTVNsARg3Hu3POr2SvFCAc=
Subject key identifier: 0B:8F:A6:41:B8:04:EF:25:EA:86:48:5E:EE:45:7A:1E:FF:D6:99:54
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285846624D3A6A346F6453B4166600
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/90d54f35-2e68-368a-9a2c-1e9f354d9c49.roa
Signing time: Sun 30 Jun 2024 15:37:50 +0000
ROA not before: Sun 30 Jun 2024 15:37:50 +0000
ROA not after: Sat 28 Sep 2024 15:37:50 +0000
asID: 21859
IP address blocks: 72.14.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 00:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:62:4d:3a:6a:34:6f:64:53:b4:16:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Jun 30 15:37:50 2024 GMT
Not After : Sep 28 15:37:50 2024 GMT
Subject: CN=238aa3f1-c7d5-465d-b7f0-ef787fc2f248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:15:93:e6:36:8f:5a:d9:82:03:c2:8d:08:
d9:0f:f6:92:15:6e:6c:22:87:0c:9c:2e:37:f4:28:
bd:1d:45:c3:f1:be:a3:ac:c0:4a:b4:7b:7f:7d:e2:
64:b1:44:38:41:8f:05:ce:66:86:8f:80:aa:3b:a3:
a0:2d:3f:a8:2a:a6:f1:10:e6:a4:47:ca:d0:30:a6:
a1:c4:d5:9c:42:a6:8a:57:ea:9d:2c:fe:56:93:a4:
90:46:2b:c9:d8:38:68:ba:a8:de:a8:48:82:4a:7d:
59:d7:1c:af:bb:fa:88:a9:19:be:8d:8a:e1:90:86:
68:3c:fc:2d:9a:a1:13:c6:d8:2e:54:20:e4:eb:02:
16:4a:f7:f5:f3:45:9a:98:0e:66:06:12:d4:fe:6a:
18:1c:40:03:c8:09:a5:6f:6f:59:85:f5:44:89:c6:
59:de:ab:af:7d:5e:b4:c1:35:ac:82:5a:31:c5:5a:
a0:8e:22:d7:18:c6:a8:0a:f5:9a:78:99:5d:08:bd:
27:8e:07:1d:37:72:e3:99:c3:26:6e:7e:ec:b6:9f:
0a:a6:c8:9f:3a:64:d1:e5:8e:fd:12:68:1c:06:5a:
d2:53:00:64:12:13:a2:90:82:c7:2b:d3:df:b8:78:
a7:cf:f6:fa:ab:17:ca:00:92:7e:eb:7f:c8:fb:76:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:A6:41:B8:04:EF:25:EA:86:48:5E:EE:45:7A:1E:FF:D6:99:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/90d54f35-2e68-368a-9a2c-1e9f354d9c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:32:0a:ce:b8:b0:8a:e4:4f:71:5f:c3:00:e8:ea:b6:20:8c:
46:e6:e6:c9:e0:8e:dd:78:27:16:46:9c:26:19:22:cc:b2:06:
b6:38:26:8c:c8:7d:f8:45:35:c4:cb:3e:1d:0d:6e:a3:45:11:
fa:c9:80:ac:b3:83:2f:9e:5f:aa:6c:39:a8:96:7a:d0:a6:dc:
c8:f8:ab:6a:9e:8a:79:54:91:08:21:c5:1e:b6:a3:1e:0d:d9:
72:93:d2:78:55:fc:95:c5:fb:0a:ed:e3:b0:61:50:b1:07:a6:
63:51:7a:44:d1:37:4b:10:eb:bf:76:60:ec:41:62:26:23:89:
06:82:55:9d:a0:66:69:4d:73:1e:5e:8d:2a:2b:07:3f:ca:4e:
0c:4b:a6:93:ef:42:cc:4b:d6:ee:a5:0f:47:ac:4d:17:b4:f0:
d1:43:7d:c7:b7:08:2f:d7:40:33:c1:df:07:50:5a:22:5b:ca:
56:d8:64:92:45:67:10:26:f0:50:33:a0:14:2d:c4:08:1e:b4:
fd:d8:30:87:3a:e1:13:c2:b5:50:bc:cd:52:aa:57:d4:4a:aa:
2c:8f:07:a3:92:e1:36:df:85:de:0a:b8:38:d6:12:fc:c2:5e:
63:a4:cd:d5:c5:30:cd:33:dd:83:56:d7:e7:56:5d:ee:4d:8d:
20:52:a2:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZiTTpqNG9kU7QWZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI0MDYzMDE1Mzc1MFoXDTI0MDkyODE1Mzc1MFowLzEtMCsGA1UEAxMk
MjM4YWEzZjEtYzdkNS00NjVkLWI3ZjAtZWY3ODdmYzJmMjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocIVk+Y2j1rZggPCjQjZD/aSFW5sIocMnC43
9Ci9HUXD8b6jrMBKtHt/feJksUQ4QY8FzmaGj4CqO6OgLT+oKqbxEOakR8rQMKah
xNWcQqaKV+qdLP5Wk6SQRivJ2DhouqjeqEiCSn1Z1xyvu/qIqRm+jYrhkIZoPPwt
mqETxtguVCDk6wIWSvf180WamA5mBhLU/moYHEADyAmlb29ZhfVEicZZ3quvfV60
wTWsgloxxVqgjiLXGMaoCvWaeJldCL0njgcdN3LjmcMmbn7stp8KpsifOmTR5Y79
EmgcBlrSUwBkEhOikILHK9PfuHinz/b6qxfKAJJ+63/I+3Ya9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuPpkG4BO8l6oZIXu5Feh7/1plUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvOTBkNTRmMzUtMmU2OC0z
NjhhLTlhMmMtMWU5ZjM1NGQ5YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgyCs64sIrkT3FfwwDo6rYgjEbm5sngjt14JxZGnCYZIsyyBrY4JozI
ffhFNcTLPh0NbqNFEfrJgKyzgy+eX6psOaiWetCm3Mj4q2qeinlUkQghxR62ox4N
2XKT0nhV/JXF+wrt47BhULEHpmNRekTRN0sQ6792YOxBYiYjiQaCVZ2gZmlNcx5e
jSorBz/KTgxLppPvQsxL1u6lD0esTRe08NFDfce3CC/XQDPB3wdQWiJbylbYZJJF
ZxAm8FAzoBQtxAgetP3YMIc64RPCtVC8zVKqV9RKqiyPB6OS4Tbfhd4KuDjWEvzC
XmOkzdXFMM0z3YNW1+dWXe5NjSBSotg=
-----END CERTIFICATE-----
Generated at Sat Jul 27 02:44:50 2024 by rpki-client on console-fra.rpki-client.org