Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/0c1b4cdf-1738-304f-8d50-22a096ebcfef.roa
File: 0c1b4cdf-1738-304f-8d50-22a096ebcfef.roa (raw, json)
Hash identifier: Oobi+nbztdl94lUaV9+uUyhL8sjT4CZbtaT1yKkMkR4=
Subject key identifier: D5:B4:60:A6:44:A3:0D:6E:4B:34:67:58:6C:B5:36:91:A8:E5:37:AA
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F432858438C25355F0FF9A26E1D85C000
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/0c1b4cdf-1738-304f-8d50-22a096ebcfef.roa
Signing time: Sat 14 Oct 2023 13:00:18 +0000
ROA not before: Sat 14 Oct 2023 13:00:18 +0000
ROA not after: Fri 12 Jan 2024 14:00:18 +0000
asID: 398465
IP address blocks: 209.250.8.0/24 maxlen: 24
209.250.29.0/24 maxlen: 24
209.250.9.0/24 maxlen: 24
209.250.11.0/24 maxlen: 24
209.250.21.0/24 maxlen: 24
209.250.22.0/24 maxlen: 24
209.250.24.0/24 maxlen: 24
209.250.25.0/24 maxlen: 24
209.250.26.0/24 maxlen: 24
209.250.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:8c:25:35:5f:0f:f9:a2:6e:1d:85:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Oct 14 13:00:18 2023 GMT
Not After : Jan 12 14:00:18 2024 GMT
Subject: CN=0aa75331-381e-4df9-b4b0-e85e561acde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:61:8f:3e:e3:05:08:0a:7a:79:76:fd:4e:
7e:23:f8:84:02:c6:06:ab:5a:b9:4b:67:33:d2:aa:
36:68:c6:8d:b2:94:07:f5:82:68:88:5c:8b:cb:5a:
89:28:df:f6:da:4c:dc:61:50:f8:20:4e:bb:61:8f:
d9:d4:24:ad:b9:45:e2:cd:ad:a6:b8:24:2e:f0:ce:
95:f0:f5:8d:5c:c0:b1:1d:a2:9a:08:dc:13:87:73:
cd:56:6a:3f:42:e3:60:c7:6d:86:13:5e:89:11:f3:
e1:d8:1d:27:24:42:e0:de:27:da:7d:9d:b3:3b:5d:
03:4f:8a:1f:7a:a2:a5:af:df:83:f9:76:df:7d:c7:
ec:2d:f6:f3:d5:1f:b6:b0:63:a6:c8:1f:c1:dd:ba:
e4:57:ee:5a:05:79:74:6b:33:62:84:01:d6:f6:2f:
4f:11:97:69:f6:c1:31:51:58:ef:54:ae:9b:0f:04:
26:b1:61:a0:19:4d:e5:73:91:dc:b3:48:9e:d2:57:
9d:a7:47:e6:0b:35:65:65:82:bf:89:5d:6a:69:a7:
1c:53:81:a0:ef:fd:fd:07:57:8c:7b:5c:f4:95:60:
78:4b:4a:a6:d2:b1:b5:d0:44:a9:08:ea:82:70:b3:
0f:57:d3:3b:82:75:e0:ae:d1:28:a9:4d:b6:c3:50:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:60:A6:44:A3:0D:6E:4B:34:67:58:6C:B5:36:91:A8:E5:37:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/0c1b4cdf-1738-304f-8d50-22a096ebcfef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.8.0/23
209.250.11.0/24
209.250.21.0-209.250.22.255
209.250.24.0-209.250.26.255
209.250.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:23:b2:30:03:39:87:ff:e9:fe:31:6e:28:39:b4:64:b0:ff:
02:96:c0:62:47:fa:c0:50:06:a2:28:89:43:fa:ad:6d:8b:37:
96:65:1c:ee:7e:de:49:41:45:66:36:d5:f9:9f:66:12:80:13:
f4:47:bc:36:b7:f1:5d:7c:82:c5:33:6e:6d:3b:19:c5:58:14:
3e:ab:2d:85:0b:34:8e:be:88:98:64:16:cc:35:5b:64:46:6e:
27:71:a0:b9:2a:78:f7:8e:97:39:23:a1:ea:e5:9e:ff:bd:13:
9f:c8:7d:51:de:88:ef:5b:ae:e6:8d:88:9d:c1:b2:4d:8b:25:
bd:6e:da:40:fa:1e:40:ed:9a:e9:54:8f:20:2e:86:13:0f:19:
d1:2e:c5:12:9b:18:bc:56:94:e6:d3:30:d9:9d:6b:0d:17:64:
43:9c:6d:d8:13:fe:c9:08:29:e8:ee:aa:82:71:95:7f:61:12:
3a:b3:a3:75:e0:76:14:04:96:a0:bf:70:b4:9d:a2:ce:40:37:
89:8f:20:73:90:62:7f:75:1d:92:cc:a1:18:ee:ac:a4:70:e8:
6c:f9:5f:fe:fe:ac:7e:7c:53:5f:87:04:fc:60:48:54:14:f0:
ae:c0:54:d3:c0:57:a8:22:10:25:19:d2:e9:64:e1:c4:01:9f:
da:4a:71:d8
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEOMJTVfD/mibh2FwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3
ZGQ0MB4XDTIzMTAxNDEzMDAxOFoXDTI0MDExMjE0MDAxOFowLzEtMCsGA1UEAxMk
MGFhNzUzMzEtMzgxZS00ZGY5LWI0YjAtZTg1ZTU2MWFjZGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqithjz7jBQgKenl2/U5+I/iEAsYGq1q5S2cz
0qo2aMaNspQH9YJoiFyLy1qJKN/22kzcYVD4IE67YY/Z1CStuUXiza2muCQu8M6V
8PWNXMCxHaKaCNwTh3PNVmo/QuNgx22GE16JEfPh2B0nJELg3ifafZ2zO10DT4of
eqKlr9+D+XbffcfsLfbz1R+2sGOmyB/B3brkV+5aBXl0azNihAHW9i9PEZdp9sEx
UVjvVK6bDwQmsWGgGU3lc5Hcs0ie0ledp0fmCzVlZYK/iV1qaaccU4Gg7/39B1eM
e1z0lWB4S0qm0rG10ESpCOqCcLMPV9M7gnXgrtEoqU22w1D+HQIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFNW0YKZEow1uSzRnWGy1NpGo5TeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi
NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMGMxYjRjZGYtMTczOC0z
MDRmLThkNTAtMjJhMDk2ZWJjZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz
NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj
N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2
ZmNkYzdkZDQuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQB0foIAwQA
0foLMAwDBADR+hUDBADR+hYwDAMEA9H6GAMEANH6GgMEAdH6HDBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8
I7IwAzmH/+n+MW4oObRksP8ClsBiR/rAUAaiKIlD+q1tizeWZRzuft5JQUVmNtX5
n2YSgBP0R7w2t/FdfILFM25tOxnFWBQ+qy2FCzSOvoiYZBbMNVtkRm4ncaC5Knj3
jpc5I6Hq5Z7/vROfyH1R3ojvW67mjYidwbJNiyW9btpA+h5A7ZrpVI8gLoYTDxnR
LsUSmxi8VpTm0zDZnWsNF2RDnG3YE/7JCCno7qqCcZV/YRI6s6N14HYUBJagv3C0
naLOQDeJjyBzkGJ/dR2SzKEY7qykcOhs+V/+/qx+fFNfhwT8YEhUFPCuwFTTwFeo
IhAlGdLpZOHEAZ/aSnHY
-----END CERTIFICATE-----
Generated at Thu Dec 28 04:57:56 2023 by rpki-client on console-ams.rpki-client.org