Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c78fdc72-dfd2-3f66-b144-a18f85410236.roa
File: c78fdc72-dfd2-3f66-b144-a18f85410236.roa (raw, json)
Hash identifier: B5OOMtQZ4VSTjlTHuyADyY7VI2PPJ0NDeoXA9Z/oqEg=
Subject key identifier: 3E:1D:0F:41:ED:01:F2:4E:B0:D0:93:71:51:09:92:55:93:B6:4D:90
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584680B4E02AE65129DE982F9010
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c78fdc72-dfd2-3f66-b144-a18f85410236.roa
Signing time: Thu 11 Jul 2024 13:00:34 +0000
ROA not before: Thu 11 Jul 2024 13:00:34 +0000
ROA not after: Wed 09 Oct 2024 13:00:34 +0000
asID: 16839
IP address blocks: 149.96.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 13 Sep 2024 06:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:80:b4:e0:2a:e6:51:29:de:98:2f:90:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Jul 11 13:00:34 2024 GMT
Not After : Oct 9 13:00:34 2024 GMT
Subject: CN=d0463dad-962d-4908-907f-b1af57048051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:17:f9:81:8a:4a:31:5b:d3:c6:be:43:8d:8b:
c3:70:69:39:4c:92:4a:71:48:9a:6d:fe:46:a1:da:
23:0f:31:81:37:6f:af:8e:d8:86:84:e5:ce:ac:84:
31:5b:b5:0a:a1:c4:fb:44:58:50:ca:3a:77:ba:92:
f3:59:8d:56:3d:67:81:a5:c0:5b:4f:7d:f0:9f:c0:
14:18:3e:b0:35:d9:dd:79:2c:28:6e:74:7d:c1:34:
cd:80:6b:a0:35:f2:d6:f1:8b:c5:fc:75:b1:8d:29:
44:26:bd:af:16:0a:b4:36:24:a1:1d:93:c9:7a:9a:
3e:d1:6d:cd:53:6a:66:33:16:4b:55:dd:3c:bb:15:
2c:4c:80:e4:b2:b5:46:ae:fe:37:14:59:43:17:0a:
5c:87:07:b8:41:49:45:a7:0d:4b:f4:a8:a7:0f:59:
e2:78:4f:f1:90:c6:4f:30:a6:0b:73:5d:ab:34:f9:
ac:57:7a:35:9f:e1:61:3a:ff:41:d2:d1:fd:d4:38:
92:8f:e3:a0:ce:ad:c0:24:90:0e:ef:96:07:ad:2c:
07:0d:51:de:ce:f8:63:16:d2:d7:90:c9:bb:10:89:
88:b1:a8:0c:00:4a:31:97:29:5d:18:cf:59:3a:96:
2d:69:20:ab:0c:70:b9:f6:33:4e:70:3d:2b:09:05:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:0F:41:ED:01:F2:4E:B0:D0:93:71:51:09:92:55:93:B6:4D:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c78fdc72-dfd2-3f66-b144-a18f85410236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:96:a3:1b:01:4d:a2:85:86:28:49:e8:b8:f1:57:ab:27:8c:
61:16:13:82:6d:70:4a:5f:1f:7c:1f:a1:0d:2d:e4:65:a5:e0:
d5:f5:49:dd:94:e0:aa:03:80:6a:52:0d:e6:23:e0:2f:1a:af:
57:c0:25:40:2c:22:6d:3d:a3:ba:62:1f:dd:90:54:62:cb:c7:
4d:ae:76:1c:55:d5:68:21:23:f6:d6:cc:b3:9c:d6:e6:0d:a5:
cb:ab:83:8e:14:f9:5f:5a:2c:b7:f6:2c:14:13:95:64:29:ac:
1f:17:ee:05:7e:44:50:1c:81:66:4e:46:ea:92:90:ad:56:35:
7f:7a:39:7a:c2:3c:df:77:87:16:5d:6c:81:f2:40:5a:f6:48:
98:38:b2:51:c8:f0:92:89:af:9b:5c:78:db:87:eb:d7:f8:fe:
17:5a:aa:9b:3b:ae:d1:cf:f9:54:ef:43:f1:58:5e:ff:87:50:
7c:ed:35:a4:9c:42:42:57:3e:d1:2c:d5:2f:fd:7e:1f:57:23:
6e:bf:82:36:f2:26:2f:3b:c8:e5:62:47:bb:70:eb:71:a9:05:
a1:14:c2:63:64:34:9a:5a:ab:d3:fe:34:a7:7e:3b:f8:8c:9c:
cf:d5:00:55:8c:c4:5e:57:e1:5b:6e:3a:b4:fb:fd:77:da:30:
ca:1f:9b:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaAtOAq5lEp3pgvkBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MDcxMTEzMDAzNFoXDTI0MTAwOTEzMDAzNFowLzEtMCsGA1UEAxMk
ZDA0NjNkYWQtOTYyZC00OTA4LTkwN2YtYjFhZjU3MDQ4MDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRf5gYpKMVvTxr5DjYvDcGk5TJJKcUiabf5G
odojDzGBN2+vjtiGhOXOrIQxW7UKocT7RFhQyjp3upLzWY1WPWeBpcBbT33wn8AU
GD6wNdndeSwobnR9wTTNgGugNfLW8YvF/HWxjSlEJr2vFgq0NiShHZPJepo+0W3N
U2pmMxZLVd08uxUsTIDksrVGrv43FFlDFwpchwe4QUlFpw1L9KinD1nieE/xkMZP
MKYLc12rNPmsV3o1n+FhOv9B0tH91DiSj+Ogzq3AJJAO75YHrSwHDVHezvhjFtLX
kMm7EImIsagMAEoxlyldGM9ZOpYtaSCrDHC59jNOcD0rCQU29wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4dD0HtAfJOsNCTcVEJklWTtk2QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzc4ZmRjNzItZGZkMi0z
ZjY2LWIxNDQtYTE4Zjg1NDEwMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSWoxsBTaKFhihJ6LjxV6snjGEWE4JtcEpfH3wfoQ0t5GWl4NX1Sd2U
4KoDgGpSDeYj4C8ar1fAJUAsIm09o7piH92QVGLLx02udhxV1WghI/bWzLOc1uYN
pcurg44U+V9aLLf2LBQTlWQprB8X7gV+RFAcgWZORuqSkK1WNX96OXrCPN93hxZd
bIHyQFr2SJg4slHI8JKJr5tceNuH69f4/hdaqps7rtHP+VTvQ/FYXv+HUHztNaSc
QkJXPtEs1S/9fh9XI26/gjbyJi87yOViR7tw63GpBaEUwmNkNJpaq9P+NKd+O/iM
nM/VAFWMxF5X4VtuOrT7/XfaMMofm48=
-----END CERTIFICATE-----
Generated at Fri Sep 13 07:51:12 2024 by rpki-client on console-ams.rpki-client.org