Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d81100a0-de37-3f87-9b2d-d7b96558a5f4.roa
File: d81100a0-de37-3f87-9b2d-d7b96558a5f4.roa (raw, json)
Hash identifier: OVl+f89M1jRZUL+DXREFvqsfsGSRJHaNPl2P8prDOP4=
Subject key identifier: CE:CC:C8:FA:52:49:F8:88:42:DB:21:2A:7F:CF:5B:99:93:2C:FA:3D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858476B363C76748826CA5DD7C100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d81100a0-de37-3f87-9b2d-d7b96558a5f4.roa
Signing time: Thu 03 Oct 2024 13:00:41 +0000
ROA not before: Thu 03 Oct 2024 13:00:41 +0000
ROA not after: Wed 01 Jan 2025 14:00:41 +0000
asID: 9009
IP address blocks: 172.94.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 11:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6b:36:3c:76:74:88:26:ca:5d:d7:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 3 13:00:41 2024 GMT
Not After : Jan 1 14:00:41 2025 GMT
Subject: CN=1852a85e-7231-42ae-b861-c4fc04519363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fd:f6:33:1e:d4:17:8e:a7:1f:cb:2d:2b:cd:
1e:18:8f:f2:39:ce:80:78:19:38:ff:cc:ca:5e:5d:
8b:f2:78:bd:91:55:38:26:99:d9:1e:40:30:a1:b9:
a3:fb:40:2c:e3:4d:bf:05:7f:fd:4c:7f:8f:5f:d0:
ce:b9:65:ad:3b:f8:70:4c:6f:d4:d4:6f:48:06:4a:
5b:46:f9:ea:9f:a9:88:60:98:36:6a:d4:70:08:14:
85:6f:5e:93:17:07:bc:41:89:c4:37:1a:fe:db:c9:
ae:76:cd:81:72:8f:ef:04:ed:ec:56:ac:44:0e:bd:
08:7c:e6:df:6a:d4:3f:7f:50:5b:b9:de:4f:6b:43:
92:55:4e:7d:12:cb:3a:25:e7:65:e7:83:a9:cb:8c:
cd:4f:40:ec:8f:96:54:9a:60:12:5d:31:d6:c2:c4:
36:e9:c5:b6:1c:dd:9a:43:b6:95:51:f3:e5:16:f0:
7a:45:d9:f0:08:48:25:5a:cf:18:4a:99:4b:6a:b1:
6d:67:3d:12:69:02:51:57:9e:0a:ed:a5:1b:73:1d:
df:c2:2d:99:6d:db:35:80:ce:7b:ed:5c:82:dd:9c:
96:7f:a0:e6:64:5f:cf:a8:cb:92:21:d7:9a:d8:79:
63:c4:c4:af:d2:41:af:7d:ab:ea:85:10:01:ae:20:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CC:C8:FA:52:49:F8:88:42:DB:21:2A:7F:CF:5B:99:93:2C:FA:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d81100a0-de37-3f87-9b2d-d7b96558a5f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:99:a8:35:ff:30:c3:82:91:eb:d0:ec:b7:28:88:b4:8c:80:
47:13:92:25:fe:f0:ea:a8:e4:3d:d8:54:8e:20:73:b1:00:e7:
d1:a6:65:20:d1:93:a6:17:59:3f:92:8b:8d:50:ab:f0:75:93:
f1:39:58:3d:e3:4a:f1:0a:2a:58:a2:95:87:d0:7e:79:f9:41:
52:64:20:99:2a:d7:91:df:05:72:54:70:9a:ed:cd:dd:59:68:
6f:bb:0c:4c:11:89:79:18:cf:8d:43:e1:88:90:19:db:18:a8:
e9:a3:f3:0c:d0:92:9f:24:56:11:8c:ed:b4:85:68:a0:29:59:
49:a9:62:e8:ec:b9:54:b5:45:2d:32:7c:51:ae:57:45:c5:2b:
b4:af:6e:ae:f3:09:1b:99:94:c7:3c:c2:42:2b:db:ef:12:20:
d6:70:b1:94:50:e8:03:1d:11:0f:3c:8c:9a:27:87:ec:6f:6d:
3f:fb:7b:70:b6:0b:de:09:49:70:ec:fe:1f:ae:2e:f7:14:20:
df:9b:71:31:9d:6f:5c:0e:91:79:97:b5:e8:7f:e3:f9:29:65:
b1:84:82:84:01:a2:88:38:8f:01:ed:87:89:b4:89:d7:e3:b7:
81:ed:13:69:9d:c2:9c:86:2e:5c:75:f4:2e:59:dd:e8:14:b2:
de:88:5c:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNjx2dIgmyl3XwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk
MTg1MmE4NWUtNzIzMS00MmFlLWI4NjEtYzRmYzA0NTE5MzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f32Mx7UF46nH8stK80eGI/yOc6AeBk4/8zK
Xl2L8ni9kVU4JpnZHkAwobmj+0As402/BX/9TH+PX9DOuWWtO/hwTG/U1G9IBkpb
Rvnqn6mIYJg2atRwCBSFb16TFwe8QYnENxr+28muds2Bco/vBO3sVqxEDr0IfObf
atQ/f1Bbud5Pa0OSVU59Ess6Jedl54Opy4zNT0Dsj5ZUmmASXTHWwsQ26cW2HN2a
Q7aVUfPlFvB6RdnwCEglWs8YSplLarFtZz0SaQJRV54K7aUbcx3fwi2Zbds1gM57
7VyC3ZyWf6DmZF/PqMuSIdea2HljxMSv0kGvfavqhRABriC2MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7MyPpSSfiIQtshKn/PW5mTLPo9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDgxMTAwYTAtZGUzNy0z
Zjg3LTliMmQtZDdiOTY1NThhNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+ZqDX/MMOCkevQ7LcoiLSMgEcTkiX+8Oqo5D3YVI4gc7EA59GmZSDR
k6YXWT+Si41Qq/B1k/E5WD3jSvEKKliilYfQfnn5QVJkIJkq15HfBXJUcJrtzd1Z
aG+7DEwRiXkYz41D4YiQGdsYqOmj8wzQkp8kVhGM7bSFaKApWUmpYujsuVS1RS0y
fFGuV0XFK7Svbq7zCRuZlMc8wkIr2+8SINZwsZRQ6AMdEQ88jJonh+xvbT/7e3C2
C94JSXDs/h+uLvcUIN+bcTGdb1wOkXmXteh/4/kpZbGEgoQBoog4jwHth4m0idfj
t4HtE2mdwpyGLlx19C5Z3egUst6IXHo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:52 2024 by rpki-client on console-ams.rpki-client.org