Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c0b7ebd-f5ab-3c9f-b1d1-9b18681dfaab.roa
File: 8c0b7ebd-f5ab-3c9f-b1d1-9b18681dfaab.roa (raw, json)
Hash identifier: qMjckMh4Zz86X/YYOrvtJjxBYxWS+W9pitmdGj/EqvM=
Subject key identifier: EC:85:45:30:46:20:D6:0A:39:31:A9:E7:6D:5B:DC:AC:83:52:90:DD
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844720A7AE0589410225B282640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c0b7ebd-f5ab-3c9f-b1d1-9b18681dfaab.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.138.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:7a:e0:58:94:10:22:5b:28:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=24b2a7c7-10b1-42bb-b7f8-c620a106ed79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:7c:8c:ed:14:04:37:6e:f1:0c:4c:8f:ad:
06:ec:b1:f6:ff:6c:e8:20:39:a6:ff:a5:56:a4:da:
f3:a5:96:cf:21:88:7b:64:98:49:8f:e3:f7:56:55:
fe:61:e4:e0:e5:93:61:a4:df:65:41:9e:55:f2:39:
76:98:b6:37:b6:e8:e1:7a:31:99:f7:64:81:fa:ac:
4e:1c:1d:08:94:9d:9b:7a:d5:4e:9b:ce:b7:39:70:
b1:d9:a4:5e:ee:27:dd:17:0a:9b:64:21:b9:8d:23:
88:3b:3d:ed:da:54:de:f4:15:cd:7c:38:32:84:5c:
c6:ef:7b:a9:f1:46:e1:02:6a:8d:03:1e:e7:93:4e:
1e:20:c2:29:6b:4b:1e:7c:68:dc:26:15:33:16:41:
f3:82:47:b4:97:fc:2f:d2:b8:cf:cf:18:a2:eb:ff:
ac:99:ff:7e:83:88:45:82:88:e3:61:70:ff:a1:6b:
78:b2:9d:8d:63:ad:3f:78:78:5b:f5:e0:71:f4:a4:
27:3a:a4:2c:d8:8d:cb:df:09:c8:1d:f1:ae:5e:e4:
18:7c:d4:d1:32:7f:e6:3e:e5:5c:be:e3:41:6f:59:
59:bc:d4:18:c1:af:bc:55:3f:c7:a3:ec:15:b9:06:
2b:26:d8:64:27:30:d1:3c:b0:f7:38:5d:91:21:09:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:45:30:46:20:D6:0A:39:31:A9:E7:6D:5B:DC:AC:83:52:90:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c0b7ebd-f5ab-3c9f-b1d1-9b18681dfaab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:22:9f:ef:97:a1:0f:cd:90:11:16:ed:1b:af:04:26:0e:87:
d2:44:94:48:6b:3f:a5:31:c1:29:98:6e:bf:59:a9:ad:37:4e:
71:55:6d:5d:e9:25:75:e8:32:0f:f2:e5:63:66:56:ee:d0:a4:
6b:4e:61:1b:8b:84:cd:78:92:d6:c4:43:07:2e:59:3a:6e:dc:
28:1a:38:66:ee:d6:0e:39:11:05:89:f2:fa:c7:fc:86:73:ef:
25:e7:d2:a7:ce:73:fd:9a:36:99:0d:4a:b3:80:f6:12:f4:b7:
1f:a3:0d:4b:6a:ec:4a:2a:1d:eb:b4:07:43:b7:ae:a5:46:5a:
f2:1a:33:7d:a1:0d:1f:b2:3f:a2:52:3a:9d:fb:00:2d:53:3a:
1e:35:11:c6:6f:af:9a:43:2c:49:a9:13:a3:b3:11:5c:45:70:
60:94:09:0c:78:fe:a9:bf:8e:e0:ca:84:ef:e0:f5:63:6a:5c:
38:10:ac:51:87:f8:e9:d7:08:70:02:42:8a:4b:1d:13:d4:60:
f0:5a:62:32:96:73:e1:b9:b9:c9:fc:1e:85:32:67:f8:69:e4:
5c:af:29:19:3c:14:13:92:15:be:54:bf:06:8f:87:59:79:37:
f2:4a:b9:14:79:99:e2:dc:71:c6:45:32:e6:8c:77:ca:ec:53:
d1:3c:9d:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERyCnrgWJQQIlsoJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
MjRiMmE3YzctMTBiMS00MmJiLWI3ZjgtYzYyMGExMDZlZDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fZ8jO0UBDdu8QxMj60G7LH2/2zoIDmm/6VW
pNrzpZbPIYh7ZJhJj+P3VlX+YeTg5ZNhpN9lQZ5V8jl2mLY3tujhejGZ92SB+qxO
HB0IlJ2betVOm863OXCx2aRe7ifdFwqbZCG5jSOIOz3t2lTe9BXNfDgyhFzG73up
8UbhAmqNAx7nk04eIMIpa0sefGjcJhUzFkHzgke0l/wv0rjPzxii6/+smf9+g4hF
gojjYXD/oWt4sp2NY60/eHhb9eBx9KQnOqQs2I3L3wnIHfGuXuQYfNTRMn/mPuVc
vuNBb1lZvNQYwa+8VT/Ho+wVuQYrJthkJzDRPLD3OF2RIQlBNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOyFRTBGINYKOTGp521b3KyDUpDdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGMwYjdlYmQtZjVhYi0z
YzlmLWIxZDEtOWIxODY4MWRmYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEin++XoQ/NkBEW7RuvBCYOh9JElEhrP6UxwSmYbr9Zqa03TnFVbV3p
JXXoMg/y5WNmVu7QpGtOYRuLhM14ktbEQwcuWTpu3CgaOGbu1g45EQWJ8vrH/IZz
7yXn0qfOc/2aNpkNSrOA9hL0tx+jDUtq7EoqHeu0B0O3rqVGWvIaM32hDR+yP6JS
Op37AC1TOh41EcZvr5pDLEmpE6OzEVxFcGCUCQx4/qm/juDKhO/g9WNqXDgQrFGH
+OnXCHACQopLHRPUYPBaYjKWc+G5ucn8HoUyZ/hp5FyvKRk8FBOSFb5UvwaPh1l5
N/JKuRR5meLcccZFMuaMd8rsU9E8nXg=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:29 2024 by rpki-client on console-fra.rpki-client.org