Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/242ccb5e-c654-310c-96a4-9a5da487c741.roa
File: 242ccb5e-c654-310c-96a4-9a5da487c741.roa (raw, json)
Hash identifier: tWqigpdzkTFtSc0HD42bC/5ICRWTvUTLd+Dng360H74=
Subject key identifier: 31:36:62:02:66:4C:D3:6F:52:9D:5C:85:11:35:DF:04:F3:C9:3B:E4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844720AF3975E7361DB2B4F7100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/242ccb5e-c654-310c-96a4-9a5da487c741.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:f3:97:5e:73:61:db:2b:4f:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=6d81f723-9197-4dba-95e8-0212e6c75f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:ea:8c:c4:56:ab:e2:7b:27:8a:4b:20:33:
1d:22:69:aa:32:5f:40:03:b4:06:dd:dc:76:4d:1b:
4b:22:86:5c:5a:e5:bf:39:55:05:ca:7b:46:ce:ce:
20:a1:a7:20:68:75:90:d6:7d:c5:11:fb:e1:97:99:
db:17:94:74:3b:1a:35:57:c8:dd:ef:eb:b4:6c:85:
3a:4f:3a:50:82:8d:d4:16:63:7c:f2:c0:0c:5d:70:
a7:f3:9e:64:bf:ea:3c:1d:2f:7d:8c:a0:02:90:d2:
3c:79:66:61:3f:39:e2:76:c8:04:e0:ca:86:65:51:
2c:5a:9e:9d:f9:a3:7d:2c:ed:7a:e3:20:b4:6d:94:
4e:ec:34:ee:39:90:8e:ee:19:c4:45:70:0a:43:63:
95:d1:f0:5e:a2:f2:9e:24:1e:91:72:e2:32:ab:6b:
65:15:79:f0:d2:a5:5b:b4:64:cc:1a:61:36:78:b5:
49:4b:cf:53:ad:4d:d1:82:65:8b:76:3e:38:dd:0c:
23:c9:73:5f:34:cd:7c:56:c5:28:60:d9:5d:75:44:
17:b1:c0:3b:08:66:a2:2b:9e:aa:63:5b:fc:7f:4b:
54:35:15:25:20:4b:ef:1b:80:ec:67:f4:05:9f:1c:
11:b0:e7:c4:f7:8c:7e:34:e0:29:85:bb:56:3d:8e:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:62:02:66:4C:D3:6F:52:9D:5C:85:11:35:DF:04:F3:C9:3B:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/242ccb5e-c654-310c-96a4-9a5da487c741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:ea:55:a0:a8:fe:87:50:ca:4b:01:0f:f0:a5:24:27:41:da:
20:7e:00:8f:15:4a:b2:8e:36:d2:f0:6d:c1:84:f7:f4:44:1a:
37:95:0c:09:2d:50:a6:11:4f:91:60:86:7a:a5:b5:1c:96:4e:
95:0c:62:90:4e:51:51:de:e9:03:25:ea:fb:21:8e:06:1c:78:
49:f5:38:dd:a9:b9:de:56:6b:e6:37:46:f1:9d:e0:2d:7e:81:
b3:82:dd:23:9f:78:b1:15:62:75:5b:6c:24:a4:33:b4:93:8d:
a4:ce:5f:d7:3e:86:9d:3b:5f:84:75:0b:93:7d:d9:ab:12:97:
9e:e4:60:8e:8d:3a:9a:b9:bd:fd:0f:43:51:c1:5e:39:7c:2c:
8e:fb:a4:62:39:4c:88:07:bc:e8:92:ac:f5:cb:27:b4:18:18:
10:a9:d6:95:fc:e6:5e:d0:93:9e:70:60:80:f0:69:8a:e1:df:
e2:d0:f8:aa:28:b7:89:65:fc:a2:ad:4b:62:df:07:75:cd:f1:
a1:55:78:ce:27:26:59:ac:68:51:48:79:f2:13:4d:06:4e:ee:
51:ed:a6:a0:b4:16:98:2e:73:51:f6:46:7e:f0:b1:a6:a3:8a:
5f:95:05:d8:a2:2a:f1:31:c8:29:37:77:87:e8:b2:92:d3:df:
36:48:66:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERyCvOXXnNh2ytPcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
NmQ4MWY3MjMtOTE5Ny00ZGJhLTk1ZTgtMDIxMmU2Yzc1ZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgDqjMRWq+J7J4pLIDMdImmqMl9AA7QG3dx2
TRtLIoZcWuW/OVUFyntGzs4goacgaHWQ1n3FEfvhl5nbF5R0Oxo1V8jd7+u0bIU6
TzpQgo3UFmN88sAMXXCn855kv+o8HS99jKACkNI8eWZhPznidsgE4MqGZVEsWp6d
+aN9LO164yC0bZRO7DTuOZCO7hnERXAKQ2OV0fBeovKeJB6RcuIyq2tlFXnw0qVb
tGTMGmE2eLVJS89TrU3RgmWLdj443QwjyXNfNM18VsUoYNlddUQXscA7CGaiK56q
Y1v8f0tUNRUlIEvvG4DsZ/QFnxwRsOfE94x+NOAphbtWPY7akQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDE2YgJmTNNvUp1chRE13wTzyTvkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjQyY2NiNWUtYzY1NC0z
MTBjLTk2YTQtOWE1ZGE0ODdjNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK7qVaCo/odQyksBD/ClJCdB2iB+AI8VSrKONtLwbcGE9/REGjeVDAkt
UKYRT5FghnqltRyWTpUMYpBOUVHe6QMl6vshjgYceEn1ON2pud5Wa+Y3RvGd4C1+
gbOC3SOfeLEVYnVbbCSkM7STjaTOX9c+hp07X4R1C5N92asSl57kYI6NOpq5vf0P
Q1HBXjl8LI77pGI5TIgHvOiSrPXLJ7QYGBCp1pX85l7Qk55wYIDwaYrh3+LQ+Koo
t4ll/KKtS2LfB3XN8aFVeM4nJlmsaFFIefITTQZO7lHtpqC0Fpguc1H2Rn7wsaaj
il+VBdiiKvExyCk3d4fospLT3zZIZsk=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:25 2024 by rpki-client on console-ams.rpki-client.org