Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a4206752-0dba-3ef6-bdb7-b3ea31340050.roa
File: a4206752-0dba-3ef6-bdb7-b3ea31340050.roa (raw, json)
Hash identifier: Ra4unO2kHK4/1nPMdeGjNVxa/GTBHihwlmfYYC41lvs=
Subject key identifier: C6:56:C2:E3:2F:45:7D:D4:FA:06:3C:A6:40:13:8A:94:B6:C0:31:87
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F43285842EFCEF871E4C6987168ABE900
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a4206752-0dba-3ef6-bdb7-b3ea31340050.roa
Signing time: Sat 19 Aug 2023 13:00:24 +0000
ROA not before: Sat 19 Aug 2023 13:00:24 +0000
ROA not after: Fri 17 Nov 2023 14:00:24 +0000
asID: 20473
IP address blocks: 208.85.16.0/21 maxlen: 24
208.76.220.0/22 maxlen: 24
208.83.232.0/21 maxlen: 24
216.238.64.0/18 maxlen: 24
67.219.96.0/20 maxlen: 24
70.34.192.0/19 maxlen: 24
70.34.240.0/20 maxlen: 24
208.72.152.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ef:ce:f8:71:e4:c6:98:71:68:ab:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Aug 19 13:00:24 2023 GMT
Not After : Nov 17 14:00:24 2023 GMT
Subject: CN=299cd59e-1542-4586-8c27-060a797cdd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:03:5a:8f:0c:17:0a:24:f3:1a:cc:3c:eb:
59:bd:d2:6d:ef:fc:3d:55:ca:b3:0f:2f:9f:e9:3b:
9a:7f:db:db:36:d3:60:cb:13:57:71:3c:39:28:18:
ed:76:ac:c0:37:50:81:40:ae:18:7e:4d:e8:29:ca:
67:45:2f:ac:c5:68:0f:18:ee:c4:b6:eb:1f:f5:98:
a7:f6:f7:82:7b:bd:c5:74:d5:32:35:d4:67:fb:d2:
a0:da:2e:8a:be:05:3f:14:c6:64:3b:23:54:6d:21:
32:fc:79:f3:1a:8a:3e:74:aa:d1:d9:28:7f:bc:0d:
c0:ad:d0:06:a6:12:47:f6:64:95:2b:38:df:ac:12:
c2:29:2a:c5:c2:38:d3:b0:8e:74:4b:8e:9f:73:ee:
df:a7:c2:68:a7:72:1a:f1:10:02:91:2a:0b:75:9c:
1f:5e:e6:b3:66:ab:ca:7d:de:8d:52:b3:eb:62:4b:
ef:d0:75:aa:c2:7e:7c:2c:fa:ff:59:d3:29:ad:a0:
f2:0a:a7:dc:10:64:71:e3:e0:6f:b1:f4:e0:b4:02:
c6:94:82:8a:97:df:a0:91:c3:73:a0:d2:22:aa:36:
16:bf:ce:31:71:b8:30:c3:08:1f:6d:dd:c9:95:34:
bb:30:e1:a9:39:d8:ec:02:a3:65:bd:65:38:c0:af:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:C2:E3:2F:45:7D:D4:FA:06:3C:A6:40:13:8A:94:B6:C0:31:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a4206752-0dba-3ef6-bdb7-b3ea31340050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
67.219.96.0/20
70.34.192.0/19
70.34.240.0/20
208.72.152.0/22
208.76.220.0/22
208.83.232.0/21
208.85.16.0/21
216.238.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:66:c8:04:6e:0f:a4:2e:f0:9e:5a:29:f7:56:25:c5:f3:24:
9b:1f:49:eb:91:24:57:2f:fa:30:dc:1e:94:a4:d0:3a:9d:91:
c2:60:68:54:16:dc:34:4d:e9:15:bc:8d:f5:fc:40:4f:0a:cd:
8e:16:f4:39:c5:f5:ab:bd:f7:fe:12:b5:c3:9f:da:d6:1a:05:
db:7e:f2:c5:9f:f6:d3:2b:ff:58:45:8e:18:c9:e8:19:8c:63:
04:13:c3:77:b4:0d:04:c8:35:33:d6:5d:45:e6:0a:8e:aa:7c:
4f:2e:b0:a2:09:ac:6e:48:bd:03:e4:3b:a4:f0:89:7c:6d:f3:
1d:63:40:02:72:92:eb:a9:3c:2e:9a:76:f7:3a:03:b2:9c:49:
c3:1f:21:79:0e:30:00:23:14:1a:c5:db:ca:8a:87:73:e4:ae:
52:d2:f1:94:06:fc:68:47:78:5a:d8:76:c7:cb:3b:e6:72:37:
dc:75:4c:ca:48:7e:7a:38:dc:00:58:7a:50:28:ee:39:ed:2b:
3d:e1:48:f8:68:fa:cc:ed:3a:7f:7a:fb:04:a0:b2:c2:c4:09:
5f:5a:99:03:f6:c4:1b:e7:c6:2d:2e:87:9d:ba:83:a7:58:90:
89:02:33:50:ee:9f:20:ff:b8:25:8c:26:03:56:e2:d3:77:f5:
38:ec:3b:27
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWELvzvhx5MaYcWir6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTIzMDgxOTEzMDAyNFoXDTIzMTExNzE0MDAyNFowLzEtMCsGA1UEAxMk
Mjk5Y2Q1OWUtMTU0Mi00NTg2LThjMjctMDYwYTc5N2NkZDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsADWo8MFwok8xrMPOtZvdJt7/w9VcqzDy+f
6Tuaf9vbNtNgyxNXcTw5KBjtdqzAN1CBQK4Yfk3oKcpnRS+sxWgPGO7Etusf9Zin
9veCe73FdNUyNdRn+9Kg2i6KvgU/FMZkOyNUbSEy/HnzGoo+dKrR2Sh/vA3ArdAG
phJH9mSVKzjfrBLCKSrFwjjTsI50S46fc+7fp8Jop3Ia8RACkSoLdZwfXuazZqvK
fd6NUrPrYkvv0HWqwn58LPr/WdMpraDyCqfcEGRx4+BvsfTgtALGlIKKl9+gkcNz
oNIiqjYWv84xcbgwwwgfbd3JlTS7MOGpOdjsAqNlvWU4wK+voQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFMZWwuMvRX3U+gY8pkATipS2wDGHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvYTQyMDY3NTItMGRiYS0z
ZWY2LWJkYjctYjNlYTMxMzQwMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEQ9tgAwQF
RiLAAwQERiLwAwQC0EiYAwQC0EzcAwQD0FPoAwQD0FUQAwQG2O5AMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AFpmyARuD6Qu8J5aKfdWJcXzJJsfSeuRJFcv+jDcHpSk0DqdkcJgaFQW3DRN6RW8
jfX8QE8KzY4W9DnF9au99/4StcOf2tYaBdt+8sWf9tMr/1hFjhjJ6BmMYwQTw3e0
DQTINTPWXUXmCo6qfE8usKIJrG5IvQPkO6TwiXxt8x1jQAJykuupPC6advc6A7Kc
ScMfIXkOMAAjFBrF28qKh3PkrlLS8ZQG/GhHeFrYdsfLO+ZyN9x1TMpIfno43ABY
elAo7jntKz3hSPho+sztOn96+wSgssLECV9amQP2xBvnxi0uh526g6dYkIkCM1Du
nyD/uCWMJgNW4tN39TjsOyc=
-----END CERTIFICATE-----
Generated at Mon Sep 11 22:40:35 2023 by rpki-client on console-fra.rpki-client.org