Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/386c3455-9933-369c-a32e-34417c09aa19.roa
File: 386c3455-9933-369c-a32e-34417c09aa19.roa (raw, json)
Hash identifier: 4nep44pCFSRpsK09TdMOb9lYXIO1JRCaLD2KaNO818U=
Subject key identifier: 9A:B0:DA:EE:A3:41:93:FE:21:63:48:06:7F:19:88:70:C4:00:03:76
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309FC7EED3EBFB9747A866C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/386c3455-9933-369c-a32e-34417c09aa19.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fc:7e:ed:3e:bf:b9:74:7a:86:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7cfa80e6-e3e3-4fff-a011-a6cda3768067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:b5:b6:47:da:0d:56:90:53:21:9b:21:67:
e2:d0:70:e3:9d:a6:2c:2e:c9:d8:2e:6d:5e:14:81:
94:05:d7:29:93:5a:eb:1f:f0:e7:d0:db:e4:b3:d2:
32:48:eb:08:06:c9:da:6f:64:ac:d5:4e:2c:49:48:
fd:05:57:34:c2:88:dc:04:c7:ff:7a:15:98:a8:47:
cf:e5:02:d1:5a:9b:8d:06:41:c0:aa:48:68:7b:d5:
f0:0b:06:db:a1:36:7d:71:36:ad:16:6c:2b:e6:d9:
3b:31:93:0d:3d:c9:a0:d5:ca:f5:a9:76:e1:11:2f:
37:46:79:af:a5:12:fe:91:b8:ee:a5:2a:31:6f:e7:
1a:0b:00:26:a6:da:9c:48:86:9f:93:b0:ce:e9:83:
ff:39:07:63:d9:74:7c:02:01:e2:f9:b2:be:16:45:
79:f6:92:0f:55:1a:dc:0b:a6:88:71:49:d0:fa:63:
c0:ac:89:bb:fe:b4:49:b6:2c:6b:bb:d6:0a:17:fd:
57:5d:79:8e:07:3e:64:46:f3:99:7c:72:e5:b7:f3:
5f:31:1f:bf:ee:2d:ef:8e:95:71:15:b2:36:1a:29:
1f:c4:a6:a9:a8:32:e5:f9:96:e5:66:2b:a1:e7:13:
31:b2:dc:06:dc:b6:00:6d:84:ca:e8:3f:66:ab:b4:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:DA:EE:A3:41:93:FE:21:63:48:06:7F:19:88:70:C4:00:03:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/386c3455-9933-369c-a32e-34417c09aa19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:5f:e5:7c:a3:63:b5:6c:b9:a6:78:d2:f3:24:06:43:85:f0:
82:85:93:cd:51:56:58:f6:84:2a:39:8e:d5:05:aa:e3:29:51:
df:12:92:f1:71:4d:6f:32:82:2e:a1:3b:8d:fb:d5:d7:26:09:
0b:bf:1e:5a:39:96:28:43:56:7c:df:86:6d:c3:dd:84:6a:9e:
75:eb:ae:ae:0a:88:aa:29:df:f4:75:39:52:6f:d2:de:8f:c7:
95:8f:09:89:83:bb:48:d1:d7:d5:66:e2:d0:54:ef:33:aa:6e:
dc:1d:1c:b6:a0:e1:4f:00:24:3e:59:11:63:7c:5a:a5:b9:01:
04:1a:f7:b8:fa:3e:e9:8e:73:ae:9f:ba:8f:89:87:75:13:53:
f3:48:6a:84:67:43:33:41:ba:b1:1b:c4:0d:de:31:a8:bb:11:
4f:c8:4f:d5:8e:fb:c9:5a:0e:22:b1:46:58:0b:3c:24:b1:78:
b2:6d:c1:bd:7c:d7:94:a5:84:8c:94:92:d9:7d:30:75:96:ad:
35:2b:b6:65:0d:b7:32:6b:7e:f3:d0:d8:35:9e:31:c4:3d:d8:
31:c9:96:99:a8:85:e2:ab:6e:8b:4c:6c:c3:63:45:a6:3e:43:
97:dd:a1:a5:4f:62:4d:f8:a2:d0:0a:65:b5:97:0a:cd:cb:ef:
d6:cb:53:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/H7tPr+5dHqGbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2NmYTgwZTYtZTNlMy00ZmZmLWEwMTEtYTZjZGEzNzY4MDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO21tkfaDVaQUyGbIWfi0HDjnaYsLsnYLm1e
FIGUBdcpk1rrH/Dn0Nvks9IySOsIBsnab2Ss1U4sSUj9BVc0wojcBMf/ehWYqEfP
5QLRWpuNBkHAqkhoe9XwCwbboTZ9cTatFmwr5tk7MZMNPcmg1cr1qXbhES83Rnmv
pRL+kbjupSoxb+caCwAmptqcSIafk7DO6YP/OQdj2XR8AgHi+bK+FkV59pIPVRrc
C6aIcUnQ+mPArIm7/rRJtixru9YKF/1XXXmOBz5kRvOZfHLlt/NfMR+/7i3vjpVx
FbI2GikfxKapqDLl+ZblZiuh5xMxstwG3LYAbYTK6D9mq7Se/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqw2u6jQZP+IWNIBn8ZiHDEAAN2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzg2YzM0NTUtOTkzMy0z
NjljLWEzMmUtMzQ0MTdjMDlhYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZf5XyjY7VsuaZ40vMkBkOF8IKFk81RVlj2hCo5jtUFquMpUd8SkvFx
TW8ygi6hO4371dcmCQu/Hlo5lihDVnzfhm3D3YRqnnXrrq4KiKop3/R1OVJv0t6P
x5WPCYmDu0jR19Vm4tBU7zOqbtwdHLag4U8AJD5ZEWN8WqW5AQQa97j6PumOc66f
uo+Jh3UTU/NIaoRnQzNBurEbxA3eMai7EU/IT9WO+8laDiKxRlgLPCSxeLJtwb18
15SlhIyUktl9MHWWrTUrtmUNtzJrfvPQ2DWeMcQ92DHJlpmoheKrbotMbMNjRaY+
Q5fdoaVPYk34otAKZbWXCs3L79bLU5s=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:25 2024 by rpki-client on console-fra.rpki-client.org