Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c98c7fa6-89f1-3c33-a6b6-5ddde1c0be18.roa
File: c98c7fa6-89f1-3c33-a6b6-5ddde1c0be18.roa (raw, json)
Hash identifier: JW1iQqmHXOuSxdFdGG+n3dLJuEGuZe3TrzCZlhwoscY=
Subject key identifier: 4E:A1:B6:F8:90:CC:A3:0D:A7:22:D5:4D:D8:B6:3E:AA:FB:D8:EA:88
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F4328584452799505945A6A9BF14D9C80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c98c7fa6-89f1-3c33-a6b6-5ddde1c0be18.roa
Signing time: Sun 24 Dec 2023 14:00:20 +0000
ROA not before: Sun 24 Dec 2023 14:00:20 +0000
ROA not after: Sat 23 Mar 2024 13:00:20 +0000
asID: 834
IP address blocks: 72.14.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 15:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:52:79:95:05:94:5a:6a:9b:f1:4d:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Dec 24 14:00:20 2023 GMT
Not After : Mar 23 13:00:20 2024 GMT
Subject: CN=40de5f61-fb2d-4cf5-aa36-a5099cd439b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:22:45:61:ca:50:d7:e6:8c:21:0e:1b:c3:
a9:3a:be:02:5b:48:6c:d9:fe:3f:fe:cb:1a:67:50:
a6:c8:88:77:d7:3a:8c:1a:dd:d8:ed:c1:26:d3:8c:
34:10:36:66:f5:27:a1:e0:4a:94:bd:6e:78:cb:d6:
d9:f9:34:34:40:f5:35:15:44:b4:cd:28:2d:e1:4a:
05:84:be:fe:e0:06:38:e3:b4:4e:62:c6:ee:24:c6:
b7:dd:2e:a7:f4:e1:52:2e:64:6f:e1:84:93:fe:f6:
4e:8d:99:e9:00:f9:74:be:59:2f:73:7c:ef:98:87:
85:6c:e6:13:0a:88:97:d2:16:a5:50:50:16:bb:ca:
f3:35:9d:dd:00:bf:10:c7:bb:3d:cc:b7:7f:70:e4:
07:23:a3:61:cf:73:4e:5b:8c:d4:50:64:82:c1:c7:
18:92:2e:0f:d9:e8:b9:53:9b:0c:7a:db:c5:1b:5a:
97:18:0a:41:eb:06:d9:c8:c4:0b:03:ae:da:40:44:
ec:d2:4b:36:1e:77:37:d3:5d:4f:d0:5b:98:34:ce:
cc:56:29:4a:a9:2f:70:33:e5:1c:ec:de:ee:eb:83:
5e:f4:44:97:db:3a:a8:6d:c5:e4:7e:6f:8b:ba:05:
6b:44:6b:98:3d:6e:d6:c1:39:93:11:48:f4:83:bb:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A1:B6:F8:90:CC:A3:0D:A7:22:D5:4D:D8:B6:3E:AA:FB:D8:EA:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c98c7fa6-89f1-3c33-a6b6-5ddde1c0be18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:7c:ba:af:34:bc:0e:ce:a5:78:66:16:69:98:ba:df:cf:4f:
2d:6e:c0:77:8f:b2:b1:4e:74:3b:33:37:1b:f6:78:cc:be:3e:
0f:b9:2a:01:af:b3:0a:c8:27:5a:a2:1a:0a:fc:c9:f5:43:76:
aa:0e:44:53:9e:74:1e:67:e1:cc:80:72:bf:2b:73:f2:71:1d:
05:09:22:2c:9e:22:33:23:4f:72:7b:7e:f0:60:56:03:a4:7e:
22:1f:92:d0:62:cb:d3:2f:e5:8e:10:db:5d:0c:1b:5e:bc:dc:
0a:07:d8:3f:80:10:83:d6:e9:55:31:1d:4e:22:74:b1:62:98:
15:9b:25:e9:d1:7f:dc:63:d7:66:68:5f:80:bb:a5:25:7c:d2:
6e:d0:0c:0e:04:2d:39:b0:52:47:8e:42:3f:8b:7f:d0:7c:be:
a9:d4:ea:05:3a:61:54:73:04:8c:d5:0b:8a:2f:4e:b2:01:5c:
2c:1c:7e:cc:73:16:ef:ba:dd:dd:ca:5e:4f:9e:f4:bc:be:8a:
77:33:bf:81:64:4e:0f:c7:78:65:2c:88:10:2d:92:61:24:9a:
23:ce:66:5c:8e:0c:ac:ca:52:15:51:bf:ed:21:be:ac:89:d3:
0f:14:23:d5:ad:9e:bd:26:8f:dd:3f:cc:fc:cc:f1:b7:cd:c2:
7e:b9:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 19:13:17 2024 by rpki-client on console-fra.rpki-client.org