Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/144d333b-6786-368c-9bf5-0a483bef1763.roa
File: 144d333b-6786-368c-9bf5-0a483bef1763.roa (raw, json)
Hash identifier: bI0ZlMJus1/s+LSWnlrgb2WgppG/j6dPciFSegOzIN4=
Subject key identifier: D9:5B:85:94:51:1F:0F:0C:FA:45:0B:A3:0C:F6:B9:33:9C:B1:C7:D6
Certificate issuer: /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial: 010D0C9F43285844511430D8CDD85D9CBD56E140
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/144d333b-6786-368c-9bf5-0a483bef1763.roa
Signing time: Sun 24 Dec 2023 02:00:16 +0000
ROA not before: Sun 24 Dec 2023 02:00:16 +0000
ROA not after: Sat 23 Mar 2024 01:00:16 +0000
asID: 6128
IP address blocks: 173.229.64.0/18 maxlen: 24
209.140.32.0/19 maxlen: 24
192.208.120.0/21 maxlen: 24
162.216.56.0/21 maxlen: 24
107.188.0.0/17 maxlen: 24
50.29.0.0/17 maxlen: 24
47.16.0.0/14 maxlen: 24
63.143.128.0/17 maxlen: 24
63.142.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 14:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:51:14:30:d8:cd:d8:5d:9c:bd:56:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Validity
Not Before: Dec 24 02:00:16 2023 GMT
Not After : Mar 23 01:00:16 2024 GMT
Subject: CN=ed0a44dd-53e9-44fd-8d4b-7a6095ee7201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:a3:72:d9:33:05:59:15:66:be:3a:eb:20:
76:f7:51:bc:7f:7e:2a:68:d9:66:e4:03:03:65:d2:
2d:6f:d1:0f:54:83:f3:52:cf:cc:57:37:80:88:44:
da:27:56:a2:b4:be:fe:3a:ac:22:06:45:4d:8c:f5:
77:70:8e:d8:cf:9f:fe:a0:88:64:fc:72:b5:33:8f:
a1:b5:e3:3b:70:a2:38:98:42:06:8b:2a:ed:e6:df:
b9:10:34:5b:3e:89:23:aa:42:f8:0f:35:16:21:85:
90:96:4a:a5:ac:71:03:e9:e5:62:e2:20:d0:18:9b:
15:07:c6:ca:51:f6:de:84:91:34:91:1d:f8:ed:51:
01:e6:e2:74:31:50:83:f6:ad:1a:e9:cc:9a:37:29:
ec:6c:15:42:0f:71:8d:27:93:33:d7:70:2d:c6:df:
37:6b:85:9e:57:1f:80:e4:d3:91:ab:7b:cc:f9:ea:
d0:08:41:3d:6b:9c:94:c1:ba:93:a3:48:cd:83:81:
00:2b:3e:73:97:48:26:85:a3:70:0d:f5:9f:99:53:
9d:22:fe:64:c3:5e:4c:ef:fa:a7:73:fb:5f:6b:e1:
88:df:85:e8:97:86:cd:f7:3f:34:08:7c:33:70:c2:
a0:32:f6:7d:0d:f3:47:ba:fc:4c:bc:36:35:88:26:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:85:94:51:1F:0F:0C:FA:45:0B:A3:0C:F6:B9:33:9C:B1:C7:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/144d333b-6786-368c-9bf5-0a483bef1763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
X509v3 Authority Key Identifier:
keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
sbgp-ipAddrBlock: critical
IPv4:
47.16.0.0/14
50.29.0.0/17
63.142.16.0/20
63.143.128.0/17
107.188.0.0/17
162.216.56.0/21
173.229.64.0/18
192.208.120.0/21
209.140.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:67:20:df:47:42:2a:5d:ad:c6:dc:67:dd:1e:d8:fc:6a:6b:
22:af:85:5c:f7:4b:88:fe:c2:59:72:a8:e1:1b:cb:e8:44:4c:
c3:0e:6b:79:cb:f0:44:d9:38:14:4f:1e:09:a3:2c:9d:91:50:
3f:2f:4e:8f:77:09:6b:85:72:99:04:cd:ae:ee:fb:12:dc:9d:
f5:94:e9:a6:a6:25:49:1b:c9:76:12:91:1c:b4:cb:c0:94:06:
ad:23:b7:d5:c7:fe:1e:37:a5:e5:29:0e:bc:7d:9b:06:e8:b8:
81:ad:54:4e:f5:af:fe:40:93:1a:ff:29:e9:22:5e:dc:d4:ce:
53:2f:90:9f:b2:99:a9:19:52:a3:c5:9a:b6:b3:8e:db:b2:c2:
e8:c3:f6:45:02:96:0f:a4:7b:ce:77:83:dc:72:cb:0c:09:78:
58:d5:5b:08:cf:00:32:4f:f9:63:ca:0a:4e:2b:74:d4:c3:15:
0b:c9:9c:29:fe:ba:da:82:ce:d3:2f:f2:36:6a:56:e6:9e:26:
fb:c9:9c:0f:6c:9f:48:a0:ac:4e:ce:71:d0:31:d3:ac:88:e2:
00:53:23:c1:f6:6f:35:e4:62:5f:95:06:d0:0a:f7:2e:00:d5:
b2:e9:bb:8b:23:bf:81:c7:5b:d1:e8:26:b6:91:4a:e9:47:44:
92:4e:c2:4a
-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWERRFDDYzdhdnL1W4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU0NmIzZWUtMWYxMS00NTI1LTg1NzYtZjIzOGExOWZi
N2JhMB4XDTIzMTIyNDAyMDAxNloXDTI0MDMyMzAxMDAxNlowLzEtMCsGA1UEAxMk
ZWQwYTQ0ZGQtNTNlOS00NGZkLThkNGItN2E2MDk1ZWU3MjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAOjctkzBVkVZr466yB291G8f34qaNlm5AMD
ZdItb9EPVIPzUs/MVzeAiETaJ1aitL7+OqwiBkVNjPV3cI7Yz5/+oIhk/HK1M4+h
teM7cKI4mEIGiyrt5t+5EDRbPokjqkL4DzUWIYWQlkqlrHED6eVi4iDQGJsVB8bK
UfbehJE0kR347VEB5uJ0MVCD9q0a6cyaNynsbBVCD3GNJ5Mz13Atxt83a4WeVx+A
5NORq3vM+erQCEE9a5yUwbqTo0jNg4EAKz5zl0gmhaNwDfWfmVOdIv5kw15M7/qn
c/tfa+GI34Xol4bN9z80CHwzcMKgMvZ9DfNHuvxMvDY1iCY+BwIDAQABo4IDhDCC
A4AwHQYDVR0OBBYEFNlbhZRRHw8M+kULowz2uTOcscfWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2
YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4YTE5ZmI3YmEvMTQ0ZDMzM2ItNjc4Ni0z
NjhjLTliZjUtMGE0ODNiZWYxNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDU0NmIzZWUtMWYxMS00NTI1LTg1
NzYtZjIzOGExOWZiN2JhLzA1NDZiM2VlLTFmMTEtNDUyNS04NTc2LWYyMzhhMTlm
YjdiYS5jcmwwHwYDVR0jBBgwFoAUS2BVW9iQXvtZnH3Rgkxp+tbjJ2UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4
YTE5ZmI3YmEuY2VyME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwMCLxADBAcy
HQADBAQ/jhADBAc/j4ADBAdrvAADBAOi2DgDBAat5UADBAPA0HgDBAXRjCAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKmcg30dCKl2txtxn3R7Y/GprIq+FXPdLiP7CWXKo4RvL6ERMww5recvw
RNk4FE8eCaMsnZFQPy9Oj3cJa4VymQTNru77Etyd9ZTppqYlSRvJdhKRHLTLwJQG
rSO31cf+Hjel5SkOvH2bBui4ga1UTvWv/kCTGv8p6SJe3NTOUy+Qn7KZqRlSo8Wa
trOO27LC6MP2RQKWD6R7zneD3HLLDAl4WNVbCM8AMk/5Y8oKTit01MMVC8mcKf66
2oLO0y/yNmpW5p4m+8mcD2yfSKCsTs5x0DHTrIjiAFMjwfZvNeRiX5UG0Ar3LgDV
sum7iyO/gcdb0egmtpFK6UdEkk7CSg==
-----END CERTIFICATE-----
Generated at Mon Jan 22 17:49:58 2024 by rpki-client on console-fra.rpki-client.org