Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/f2c10a91-a5f8-35bf-8aa6-9d2324d80aeb.roa
File: f2c10a91-a5f8-35bf-8aa6-9d2324d80aeb.roa (raw, json)
Hash identifier: kbH0UBCCKwhf/hZ+TuldEaRbmXE4RcZqx1GqRA0vX/o=
Subject key identifier: CC:A7:FE:F6:2F:C9:E4:C0:4E:92:F9:06:AD:03:A0:11:72:C9:51:4F
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F432858477A90E8AE656EF6A505EB6580
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/f2c10a91-a5f8-35bf-8aa6-9d2324d80aeb.roa
Signing time: Wed 09 Oct 2024 01:00:31 +0000
ROA not before: Wed 09 Oct 2024 01:00:31 +0000
ROA not after: Tue 07 Jan 2025 02:00:31 +0000
asID: 9009
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 29 Oct 2024 12:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:7a:90:e8:ae:65:6e:f6:a5:05:eb:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Oct 9 01:00:31 2024 GMT
Not After : Jan 7 02:00:31 2025 GMT
Subject: CN=374b2d2e-6458-4e21-bf7a-4a7d9d6063bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:95:42:7a:32:34:81:10:25:a2:5c:cb:56:
89:5b:44:e8:d8:f1:b4:95:d7:c7:4e:7f:a7:1d:ac:
2f:54:7e:c9:74:9b:30:b2:fa:bd:d7:96:60:06:d7:
6d:14:7d:28:55:86:a0:2e:ac:59:66:50:aa:54:24:
b4:fb:36:1f:14:f6:08:5a:6f:64:b1:12:7f:34:40:
72:88:a0:c5:93:17:8a:2c:96:a8:fe:8d:db:3a:27:
b4:4b:47:aa:a7:b1:b8:ec:41:74:26:21:87:e1:58:
e6:d0:f4:b9:c6:dd:72:d9:60:1d:b3:09:bf:ce:c1:
02:7b:0c:a9:ae:5d:af:ba:ce:ed:5a:23:fe:49:f3:
58:d5:0f:38:83:36:ce:d6:e6:30:76:f3:68:10:72:
d9:df:5e:6a:10:f5:98:ab:1b:77:21:43:78:b2:53:
3d:27:a9:db:8d:a1:2d:dd:87:fd:55:0a:63:a9:a9:
92:77:62:9a:79:90:9f:db:90:8b:df:b5:ca:ee:b1:
f5:75:e5:c2:86:26:1a:6e:3d:f6:90:f0:2f:ae:5a:
12:75:0f:f3:11:6a:a9:78:f1:1c:61:2b:8e:f0:e3:
16:d2:08:28:34:bc:29:cd:5c:6c:cc:7d:f0:5d:4a:
e1:1b:fe:8d:6e:93:c8:ee:23:9c:af:8c:0e:8c:05:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:FE:F6:2F:C9:E4:C0:4E:92:F9:06:AD:03:A0:11:72:C9:51:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/f2c10a91-a5f8-35bf-8aa6-9d2324d80aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:e4:fa:11:7d:2b:27:41:88:6a:5e:40:1f:fd:51:d4:1e:24:
91:75:5d:92:68:4a:ca:31:62:7e:14:10:99:62:6a:1f:0d:d4:
47:af:0e:c5:e5:34:fc:5d:6c:6a:a9:83:29:24:23:12:a5:f7:
95:f2:ca:26:a7:1b:3e:77:6f:14:53:a1:bb:45:92:11:58:bd:
d6:a6:a6:62:2e:dd:e2:74:dc:20:7d:63:38:5e:5a:45:8d:7a:
01:13:2e:d9:d1:7c:d9:20:d2:50:10:8d:7d:ad:82:c7:ec:22:
5a:26:3b:26:6a:43:49:d1:64:b2:2d:30:f2:88:92:19:5d:d1:
18:d2:6e:45:5b:74:ac:f3:8c:db:5a:59:51:14:8c:10:b6:97:
8b:fb:9f:ed:2e:5e:bb:0d:e1:06:a8:c0:2c:42:04:02:ca:54:
c5:b7:7c:e9:c4:5b:9e:55:84:38:ca:07:06:d1:44:44:af:e2:
eb:ee:a7:be:0f:80:7c:31:80:2d:32:7e:08:e1:f6:27:db:29:
b9:2f:ad:0e:48:7e:69:cb:ae:a3:38:ba:3e:3f:0f:cc:ea:9a:
95:2d:fc:fd:5a:bc:60:dc:f8:5a:da:a1:16:b1:19:be:15:97:
f8:22:6f:82:09:9d:56:45:68:b1:4a:9b:14:1a:87:bc:87:32:
47:51:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:50:23 2024 by rpki-client on console-fra.rpki-client.org