Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/203afdd0-60ef-3d1a-917d-a39a09d09dfc.roa
File: 203afdd0-60ef-3d1a-917d-a39a09d09dfc.roa (raw, json)
Hash identifier: sFxAf6TtWmS+ErloDs8IpK82BFPkqS8YZFDseIk4dOM=
Subject key identifier: DB:51:9B:CF:C1:BB:22:D6:7A:40:69:2E:7C:06:3B:59:09:1C:FA:ED
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844720AF5BD118EF55B7F7A3E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/203afdd0-60ef-3d1a-917d-a39a09d09dfc.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:f5:bd:11:8e:f5:5b:7f:7a:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=b7a4d767-2d13-41e3-99a9-ec1848faaa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:f9:35:b0:8e:43:91:74:c1:a5:ac:af:33:
b3:0a:b3:98:e4:1c:b0:0e:f0:46:79:8e:ad:f3:10:
97:f2:42:9a:76:40:fb:c8:05:0f:e2:b9:41:9d:17:
cc:37:de:33:b3:7d:6d:13:34:ae:71:2b:3c:79:20:
8f:d3:70:53:af:62:53:e9:e1:e1:dd:7f:b0:73:e0:
09:53:7b:77:7e:1a:06:e3:2d:f2:0e:d1:b3:55:ba:
d6:81:d4:4f:51:4f:d6:4e:ab:b4:ec:b2:19:56:25:
e3:76:f4:2e:85:26:b7:3b:99:ca:78:92:44:d6:39:
ba:b2:ba:e6:d5:b5:65:96:f8:7e:2e:36:fe:e3:bb:
14:2d:db:73:7e:53:b4:06:b2:d6:e5:89:16:6a:f2:
cd:03:55:f4:33:65:ea:59:95:66:4b:36:ec:a1:11:
98:cd:39:61:46:e2:af:d4:8e:73:34:c4:15:e4:de:
90:ad:57:cd:fa:15:b4:76:09:d2:6c:a4:dc:fe:71:
f9:ad:99:f1:c7:d3:a0:4a:83:8f:1a:bd:ec:a2:e9:
78:a0:7b:54:95:f8:f3:61:63:1c:7a:88:d6:80:ee:
24:6e:5b:ec:5a:2c:3b:9e:c8:7c:2c:4f:cf:fc:17:
8d:ed:0e:09:ef:da:f6:b6:15:15:35:92:62:3d:64:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:9B:CF:C1:BB:22:D6:7A:40:69:2E:7C:06:3B:59:09:1C:FA:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/203afdd0-60ef-3d1a-917d-a39a09d09dfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:dc:1d:7c:9f:dd:13:91:82:e6:4a:cf:56:b7:c3:2e:be:ee:
a9:ef:a2:34:0e:0b:75:d5:4c:7a:6b:1d:7f:f4:6f:70:8b:b6:
6d:15:9e:47:3d:f6:61:fe:f2:d4:8c:ec:f3:0a:c9:2b:a4:6d:
7e:38:3f:5f:91:01:44:86:51:2f:98:09:24:84:ef:3c:34:13:
a0:c0:d7:df:19:3b:51:94:33:18:88:88:7c:8d:8c:e5:fa:84:
ce:d9:bc:6b:77:95:f1:19:5d:b3:a1:e6:18:ba:c7:05:77:e0:
66:ca:ea:2d:95:32:52:57:47:fa:af:3d:1d:86:83:99:9d:f1:
0b:71:8c:88:67:cd:e5:8e:a3:ef:8a:49:28:0a:0a:0c:56:7f:
13:0b:74:23:4a:11:b9:99:5d:02:c5:85:44:61:c7:4d:4b:66:
70:65:0b:90:69:8b:a6:26:dd:bd:71:a4:5d:fe:73:d3:1a:5a:
20:08:61:2c:e7:6c:ff:f0:a7:59:1f:60:01:ac:31:16:fd:1c:
a0:85:c3:5c:41:dc:05:70:b5:99:88:e4:4a:0a:e3:a4:f4:e8:
96:df:50:2e:4a:7d:b5:0f:88:38:a5:19:19:fe:b5:92:ec:25:
6d:42:c0:f2:67:a8:5f:15:3b:d7:e3:5d:b0:96:c4:2b:d7:e2:
5f:01:d9:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERyCvW9EY71W396PoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YjdhNGQ3NjctMmQxMy00MWUzLTk5YTktZWMxODQ4ZmFhYTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEj5NbCOQ5F0waWsrzOzCrOY5BywDvBGeY6t
8xCX8kKadkD7yAUP4rlBnRfMN94zs31tEzSucSs8eSCP03BTr2JT6eHh3X+wc+AJ
U3t3fhoG4y3yDtGzVbrWgdRPUU/WTqu07LIZViXjdvQuhSa3O5nKeJJE1jm6srrm
1bVllvh+Ljb+47sULdtzflO0BrLW5YkWavLNA1X0M2XqWZVmSzbsoRGYzTlhRuKv
1I5zNMQV5N6QrVfN+hW0dgnSbKTc/nH5rZnxx9OgSoOPGr3soul4oHtUlfjzYWMc
eojWgO4kblvsWiw7nsh8LE/P/BeN7Q4J79r2thUVNZJiPWSHBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtRm8/BuyLWekBpLnwGO1kJHPrtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjAzYWZkZDAtNjBlZi0z
ZDFhLTkxN2QtYTM5YTA5ZDA5ZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTcHXyf3RORguZKz1a3wy6+7qnvojQOC3XVTHprHX/0b3CLtm0Vnkc9
9mH+8tSM7PMKySukbX44P1+RAUSGUS+YCSSE7zw0E6DA198ZO1GUMxiIiHyNjOX6
hM7ZvGt3lfEZXbOh5hi6xwV34GbK6i2VMlJXR/qvPR2Gg5md8QtxjIhnzeWOo++K
SSgKCgxWfxMLdCNKEbmZXQLFhURhx01LZnBlC5Bpi6Ym3b1xpF3+c9MaWiAIYSzn
bP/wp1kfYAGsMRb9HKCFw1xB3AVwtZmI5EoK46T06JbfUC5KfbUPiDilGRn+tZLs
JW1CwPJnqF8VO9fjXbCWxCvX4l8B2Q8=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:25 2024 by rpki-client on console-ams.rpki-client.org