Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7c57687b-6d10-365e-a841-8351dd9151fe.roa
File: 7c57687b-6d10-365e-a841-8351dd9151fe.roa (raw, json)
Hash identifier: A+WQIX8cZo4pEo5oBFYI5mwUKr2ISCji6z4I9fbopms=
Subject key identifier: A4:A3:89:A8:EA:4F:A8:3E:63:5F:2F:06:E0:64:B7:1B:1B:FF:63:EA
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584429FEA63CC9F152A574CBEBC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7c57687b-6d10-365e-a841-8351dd9151fe.roa
Signing time: Sun 10 Dec 2023 02:00:16 +0000
ROA not before: Sun 10 Dec 2023 02:00:16 +0000
ROA not after: Sat 09 Mar 2024 02:00:16 +0000
asID: 9009
IP address blocks: 172.94.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:29:fe:a6:3c:c9:f1:52:a5:74:cb:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 10 02:00:16 2023 GMT
Not After : Mar 9 02:00:16 2024 GMT
Subject: CN=f46ec2f3-e856-4460-8bda-5d98aa92d1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:70:2a:b0:06:49:ff:fa:93:3a:bc:9d:ba:
40:25:b5:14:f5:28:b6:3e:6e:9f:6b:ec:23:a3:0b:
68:62:c5:d4:f4:f0:70:ae:cb:29:bf:e6:a1:cb:32:
dd:8c:44:0c:98:92:b1:0c:73:3a:a9:d0:18:ef:40:
9c:62:9e:09:ea:5a:91:1c:ee:f8:6f:18:38:83:bb:
d5:ac:9e:ae:66:a4:34:b1:a4:30:67:07:fc:14:d1:
91:e3:52:41:cb:3b:84:79:1d:69:59:e9:81:a1:62:
15:de:92:7d:19:5f:5c:aa:24:6f:39:52:42:e1:a0:
6c:f0:37:cc:75:e9:b1:ce:df:d4:f8:ff:b0:b5:fc:
67:6a:e3:17:62:40:4a:f6:8b:f1:4f:ce:b3:a1:f3:
9d:f6:6f:a8:4e:d0:b5:4a:2f:c1:06:e9:21:0a:51:
62:62:16:70:8f:67:4f:2e:72:15:c5:12:dd:e3:9e:
34:31:a1:0b:4f:2d:60:52:c2:07:b0:c4:11:f3:a0:
6c:9c:c7:e6:7e:47:e8:e9:54:bf:ba:17:c0:ff:a3:
85:ca:18:06:f5:a4:a7:c8:c4:fc:6d:31:59:c4:60:
af:fe:3f:0b:02:49:9f:55:9f:82:26:f2:7d:09:0f:
f5:6e:01:1c:d6:5e:b2:10:e4:47:01:28:9f:3c:8f:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:89:A8:EA:4F:A8:3E:63:5F:2F:06:E0:64:B7:1B:1B:FF:63:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7c57687b-6d10-365e-a841-8351dd9151fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:09:e5:ea:24:79:76:63:c2:28:d8:5a:2a:92:f1:90:9a:8d:
0c:17:a3:cd:89:11:cb:87:0c:3b:c1:0d:1a:61:1b:53:c7:d7:
40:95:44:e0:d2:ff:95:a9:e1:c8:30:91:bb:d7:54:b5:bc:9e:
c0:8d:8e:18:50:31:ca:7b:03:43:6d:6d:17:a7:91:09:cc:94:
be:f1:d5:72:9b:49:91:c9:02:91:9d:86:fc:88:51:cf:6d:15:
65:cb:ec:6a:39:13:e1:8c:f5:31:01:d9:fe:2a:76:9e:d1:95:
7f:18:f0:d9:62:5c:63:77:c5:66:59:b1:67:06:10:0f:09:8e:
07:60:ac:ee:ff:b3:35:92:c6:f1:6b:cf:44:33:71:d2:bf:32:
65:60:bf:b2:aa:da:01:24:0c:f9:8d:3c:a7:ad:fe:e1:e2:c7:
a3:68:32:49:d5:a4:39:63:b6:92:80:4d:7d:67:1a:89:3e:f0:
3b:c9:7f:7e:03:c5:82:de:89:43:74:72:af:6c:c8:dc:b6:e3:
1a:4c:15:9b:e0:27:b2:88:00:94:78:76:d4:a0:4d:fb:d0:74:
79:df:ed:8a:ed:57:9e:16:bf:de:3d:05:06:5b:e3:be:9a:86:
e0:fa:a9:e2:ca:b1:d2:8c:c0:ff:a1:59:4c:c9:6c:8e:cd:94:
64:fc:fc:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQp/qY8yfFSpXTL68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMTIxMDAyMDAxNloXDTI0MDMwOTAyMDAxNlowLzEtMCsGA1UEAxMk
ZjQ2ZWMyZjMtZTg1Ni00NDYwLThiZGEtNWQ5OGFhOTJkMWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXhwKrAGSf/6kzq8nbpAJbUU9Si2Pm6fa+wj
owtoYsXU9PBwrsspv+ahyzLdjEQMmJKxDHM6qdAY70CcYp4J6lqRHO74bxg4g7vV
rJ6uZqQ0saQwZwf8FNGR41JByzuEeR1pWemBoWIV3pJ9GV9cqiRvOVJC4aBs8DfM
demxzt/U+P+wtfxnauMXYkBK9ovxT86zofOd9m+oTtC1Si/BBukhClFiYhZwj2dP
LnIVxRLd4540MaELTy1gUsIHsMQR86BsnMfmfkfo6VS/uhfA/6OFyhgG9aSnyMT8
bTFZxGCv/j8LAkmfVZ+CJvJ9CQ/1bgEc1l6yEORHASifPI/dVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSjiajqT6g+Y18vBuBktxsb/2PqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2M1NzY4N2ItNmQxMC0z
NjVlLWE4NDEtODM1MWRkOTE1MWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsJ5eokeXZjwijYWiqS8ZCajQwXo82JEcuHDDvBDRphG1PH10CVRODS
/5Wp4cgwkbvXVLW8nsCNjhhQMcp7A0NtbRenkQnMlL7x1XKbSZHJApGdhvyIUc9t
FWXL7Go5E+GM9TEB2f4qdp7RlX8Y8NliXGN3xWZZsWcGEA8JjgdgrO7/szWSxvFr
z0QzcdK/MmVgv7Kq2gEkDPmNPKet/uHix6NoMknVpDljtpKATX1nGok+8DvJf34D
xYLeiUN0cq9syNy24xpMFZvgJ7KIAJR4dtSgTfvQdHnf7YrtV54Wv949BQZb476a
huD6qeLKsdKMwP+hWUzJbI7NlGT8/EE=
-----END CERTIFICATE-----
Generated at Thu Dec 28 09:45:13 2023 by rpki-client on console-ams.rpki-client.org