Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ca9cf9cf-4cb6-3e14-a399-3112f7334813.roa
File: ca9cf9cf-4cb6-3e14-a399-3112f7334813.roa (raw, json)
Hash identifier: 2pTle1kIvCzlgynW8nKA/h68tnrl4XnS8bB3X0M1ArQ=
Subject key identifier: FE:6D:25:E9:0B:14:76:66:D7:65:66:94:76:35:6E:86:34:FF:04:54
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F432858449918D4AC788CD039B6906880
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ca9cf9cf-4cb6-3e14-a399-3112f7334813.roa
Signing time: Thu 18 Jan 2024 21:07:51 +0000
ROA not before: Thu 18 Jan 2024 21:07:51 +0000
ROA not after: Wed 17 Apr 2024 20:07:51 +0000
asID: 14618
IP address blocks: 170.85.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 22:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:99:18:d4:ac:78:8c:d0:39:b6:90:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Jan 18 21:07:51 2024 GMT
Not After : Apr 17 20:07:51 2024 GMT
Subject: CN=d96c022a-5a32-4f68-b669-480d8fe06033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:64:55:ba:69:c7:48:8e:a8:dc:78:a9:74:
13:6c:86:86:7d:62:7d:f7:d9:a9:95:17:8c:87:56:
3e:5d:c0:8e:1d:a2:88:b0:c2:9d:72:62:52:3e:37:
22:e6:43:39:23:95:03:69:f7:34:7e:d1:c8:1a:17:
c9:c3:16:2c:bb:84:41:09:24:9d:40:3f:20:7f:1e:
6f:82:8c:3e:41:fb:a7:07:f0:93:25:f7:c2:81:c4:
d0:b2:52:12:77:c3:d8:98:38:49:af:a4:9c:70:d9:
eb:dd:2c:21:90:6a:29:0c:ab:35:f2:d1:40:a5:12:
bb:47:b1:a6:ef:8d:a4:7f:e1:65:65:45:71:ab:1e:
a2:23:19:4d:d1:47:63:4c:c9:de:19:f4:d7:cf:43:
f5:39:a9:66:05:d0:54:99:b6:f7:ba:9a:33:2d:7e:
58:ab:c2:fa:98:c8:2a:41:02:08:dc:6f:34:8f:60:
be:98:2c:3c:c9:13:58:4c:d6:9e:0b:f7:12:29:54:
3b:f3:cb:a3:6b:33:12:60:e8:f0:f4:da:b5:1c:a1:
bb:41:d2:2a:1d:e9:87:2c:aa:f3:d1:aa:1b:62:79:
48:93:10:50:a7:7c:3f:f8:66:a2:a5:c2:72:7e:7a:
20:e1:b3:c2:33:98:6e:fa:ba:2c:cb:74:d9:33:0b:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:25:E9:0B:14:76:66:D7:65:66:94:76:35:6E:86:34:FF:04:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ca9cf9cf-4cb6-3e14-a399-3112f7334813.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:82:01:31:ba:11:16:38:f5:fa:2a:e7:99:83:0c:0a:7d:1f:
47:8c:74:b1:d6:6a:1f:89:6e:de:d9:64:32:47:16:29:50:07:
53:3a:57:93:a8:76:a9:d6:a4:b0:9d:77:dd:86:79:24:a2:ff:
c1:e6:96:e9:5d:b6:af:cc:6e:1c:dd:7c:db:44:69:a3:e7:8b:
91:56:38:01:ae:80:5c:3c:38:c9:eb:29:1b:ad:cf:ba:26:23:
4e:cf:6d:87:66:0c:71:98:19:03:c9:7e:4a:d7:bb:f0:ce:e4:
42:e7:48:bb:b8:2d:e7:27:dc:f7:cd:a1:f5:df:ff:81:e8:58:
b0:9f:d5:0e:39:e8:6e:7e:63:27:93:41:ed:71:84:dd:9f:8e:
56:6b:27:24:11:9d:af:cd:5d:bd:93:7b:95:51:e0:10:6f:ac:
b4:7e:13:4e:01:ac:5c:53:00:1e:b2:01:c4:7a:2c:f2:1a:3f:
81:99:f7:dc:20:7c:19:2f:4a:32:67:d4:74:aa:f8:94:e0:81:
67:08:4d:8e:2f:ec:87:1a:b2:fe:ec:c8:61:a5:67:75:1d:bb:
dc:4d:03:eb:3c:b5:c0:2e:44:64:9c:32:16:6c:a6:61:09:ec:
ab:15:58:6f:f7:53:68:ac:a2:8d:0c:4d:03:c7:16:ed:73:0f:
9c:03:5e:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESZGNSseIzQObaQaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI0MDExODIxMDc1MVoXDTI0MDQxNzIwMDc1MVowLzEtMCsGA1UEAxMk
ZDk2YzAyMmEtNWEzMi00ZjY4LWI2NjktNDgwZDhmZTA2MDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqitkVbppx0iOqNx4qXQTbIaGfWJ999mplReM
h1Y+XcCOHaKIsMKdcmJSPjci5kM5I5UDafc0ftHIGhfJwxYsu4RBCSSdQD8gfx5v
gow+QfunB/CTJffCgcTQslISd8PYmDhJr6SccNnr3SwhkGopDKs18tFApRK7R7Gm
742kf+FlZUVxqx6iIxlN0UdjTMneGfTXz0P1OalmBdBUmbb3upozLX5Yq8L6mMgq
QQII3G80j2C+mCw8yRNYTNaeC/cSKVQ788ujazMSYOjw9Nq1HKG7QdIqHemHLKrz
0aobYnlIkxBQp3w/+GaipcJyfnog4bPCM5hu+rosy3TZMwsHswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5tJekLFHZm12VmlHY1boY0/wRUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2E5Y2Y5Y2YtNGNiNi0z
ZTE0LWEzOTktMzExMmY3MzM0ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlVTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+CATG6ERY49foq55mDDAp9H0eMdLHWah+Jbt7ZZDJHFilQB1M6V5Oo
dqnWpLCdd92GeSSi/8Hmluldtq/MbhzdfNtEaaPni5FWOAGugFw8OMnrKRutz7om
I07PbYdmDHGYGQPJfkrXu/DO5ELnSLu4Lecn3PfNofXf/4HoWLCf1Q456G5+YyeT
Qe1xhN2fjlZrJyQRna/NXb2Te5VR4BBvrLR+E04BrFxTAB6yAcR6LPIaP4GZ99wg
fBkvSjJn1HSq+JTggWcITY4v7Icasv7syGGlZ3Udu9xNA+s8tcAuRGScMhZspmEJ
7KsVWG/3U2isoo0MTQPHFu1zD5wDXmU=
-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:38 2024 by rpki-client on console-ams.rpki-client.org