Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8723d487-8ec8-358a-8856-2d23fbfb001b.roa
File: 8723d487-8ec8-358a-8856-2d23fbfb001b.roa (raw, json)
Hash identifier: bT8JWDHpzkbqq6WWVq8Gt79iFCAIgF2hGqBKYfZ99zk=
Subject key identifier: 23:8D:36:D9:62:FE:C6:94:3E:3A:CF:CE:45:7D:D2:36:1B:EF:52:DC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA14A27F9F34377C41C3D7F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8723d487-8ec8-358a-8856-2d23fbfb001b.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:b00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:4a:27:f9:f3:43:77:c4:1c:3d:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=a82c8c60-0f21-4359-bc79-7de174f3b6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:b0:5c:fd:eb:52:10:54:a0:dc:90:65:f9:
ce:38:06:6a:f8:64:1e:74:6c:31:44:e2:5c:02:c4:
97:51:e9:af:b8:a5:f2:bd:61:2e:05:ad:dd:c2:a0:
30:9e:86:c3:08:6d:3b:a8:a7:e2:70:d6:08:4a:73:
fe:49:f5:09:27:f1:79:7a:77:2e:d5:dd:9f:89:df:
18:63:61:38:60:a8:f7:19:ee:8b:83:d0:54:0e:23:
e0:33:50:60:c5:1f:9b:5e:4f:dd:51:27:0d:19:80:
2e:8f:e7:3b:88:cb:80:b3:ec:23:29:54:cd:9b:9a:
f8:3f:34:22:5f:85:f6:07:e6:a3:04:32:1a:e2:79:
b6:4f:85:cf:7e:36:29:bd:dc:24:5c:91:90:75:ef:
3f:60:20:0b:15:8b:69:f8:b8:63:fb:5b:a6:bd:aa:
c3:b5:9d:84:03:b1:90:d9:f0:2c:5c:2b:bf:b1:2c:
05:55:3e:08:1a:c0:90:bb:37:d3:3e:d4:67:af:74:
b0:2b:34:53:67:c0:76:8e:65:a0:f5:e0:18:79:1f:
75:35:78:d8:fd:9d:26:55:b7:1d:83:71:40:ec:54:
10:89:2f:8e:28:a3:f8:b1:b6:19:c4:5d:3f:cd:c5:
d3:88:55:74:70:d6:d8:e6:cf:4b:ed:41:79:68:54:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8D:36:D9:62:FE:C6:94:3E:3A:CF:CE:45:7D:D2:36:1B:EF:52:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8723d487-8ec8-358a-8856-2d23fbfb001b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:b00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:8b:45:60:9d:c1:99:1c:e5:25:5d:04:9f:f2:40:d4:b9:ba:
98:02:41:3b:ae:b5:59:f5:8f:de:9d:4c:bf:84:3e:a8:4d:5a:
ae:d5:1f:64:e3:8b:cd:94:bf:aa:b7:8b:ff:e9:7b:68:07:ff:
3b:8f:f8:38:6c:9c:25:3d:f4:51:c3:ed:bd:aa:a8:fc:db:d0:
36:6c:94:3a:5e:1e:c1:23:44:88:37:96:ea:6a:df:d4:03:49:
5c:88:2f:52:16:7d:4b:6d:06:c4:ed:f9:df:c0:c5:d2:7a:22:
7d:2e:e9:84:8d:44:90:de:d5:85:d5:16:eb:51:f4:f6:6d:e0:
ca:ca:1b:d6:d9:eb:05:ae:86:f9:49:89:b1:36:f4:95:6d:96:
bf:79:21:3d:a7:63:27:6b:35:87:94:c5:29:06:5e:ca:9a:35:
f7:cf:b6:c5:8c:0b:c4:26:ed:6e:08:d5:07:5c:4a:11:d8:2e:
a6:df:3f:ff:ec:f7:06:da:81:c8:59:ce:46:38:74:c3:d2:c6:
6f:db:42:73:2b:81:1b:6a:ff:74:0c:43:94:5a:69:90:4c:98:
49:14:d3:9a:97:44:73:f9:a9:a9:69:ae:e0:29:c4:f3:0e:9b:
5c:95:ee:e2:73:b6:32:6b:5b:56:4a:18:55:f2:79:eb:c8:a7:
33:6a:c5:12
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWD2hSif580N3xBw9f4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDQxOTA0MDAwMFoXDTI4MDQxMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTgyYzhjNjAtMGYyMS00MzU5LWJjNzktN2RlMTc0ZjNiNmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpawXP3rUhBUoNyQZfnOOAZq+GQedGwxROJc
AsSXUemvuKXyvWEuBa3dwqAwnobDCG07qKficNYISnP+SfUJJ/F5encu1d2fid8Y
Y2E4YKj3Ge6Lg9BUDiPgM1BgxR+bXk/dUScNGYAuj+c7iMuAs+wjKVTNm5r4PzQi
X4X2B+ajBDIa4nm2T4XPfjYpvdwkXJGQde8/YCALFYtp+Lhj+1umvarDtZ2EA7GQ
2fAsXCu/sSwFVT4IGsCQuzfTPtRnr3SwKzRTZ8B2jmWg9eAYeR91NXjY/Z0mVbcd
g3FA7FQQiS+OKKP4sbYZxF0/zcXTiFV0cNbY5s9L7UF5aFQqOwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCONNtli/saUPjrPzkV90jYb71LcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODcyM2Q0ODctOGVjOC0z
NThhLTg4NTYtMmQyM2ZiZmIwMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfotFYJ3BmRzlJV0En/JA1Lm6mAJBO661WfWP3p1Mv4Q+qE1artUf
ZOOLzZS/qreL/+l7aAf/O4/4OGycJT30UcPtvaqo/NvQNmyUOl4ewSNEiDeW6mrf
1ANJXIgvUhZ9S20GxO3538DF0noifS7phI1EkN7VhdUW61H09m3gysob1tnrBa6G
+UmJsTb0lW2Wv3khPadjJ2s1h5TFKQZeypo198+2xYwLxCbtbgjVB1xKEdgupt8/
/+z3BtqByFnORjh0w9LGb9tCcyuBG2r/dAxDlFppkEyYSRTTmpdEc/mpqWmu4CnE
8w6bXJXu4nO2MmtbVkoYVfJ568inM2rFEg==
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:04 2024 by rpki-client on console-fra.rpki-client.org