Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/a6350f73-43fc-378b-b093-f5e70c93838b.roa
File: a6350f73-43fc-378b-b093-f5e70c93838b.roa (raw, json)
Hash identifier: DE5hrXidTR+McP38u0dkRnV7ApbMEfQPpRP15UM59L0=
Subject key identifier: 3F:96:A4:93:24:BC:CF:59:71:CD:1E:83:A2:64:BB:75:DC:1E:2D:EB
Certificate issuer: /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Certificate serial: 010D0C9F43285847ED6D94CE921B9671B5895900
Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/a6350f73-43fc-378b-b093-f5e70c93838b.roa
Signing time: Tue 19 Nov 2024 04:27:19 +0000
ROA not before: Tue 19 Nov 2024 04:27:19 +0000
ROA not after: Mon 17 Feb 2025 04:27:19 +0000
asID: 6939
IP address blocks: 206.197.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 18:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:6d:94:ce:92:1b:96:71:b5:89:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Validity
Not Before: Nov 19 04:27:19 2024 GMT
Not After : Feb 17 04:27:19 2025 GMT
Subject: CN=e46c067f-3d44-4410-b39e-e9c07fe033de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:e2:77:1a:81:1b:b5:9f:e6:f5:20:d7:09:
96:f2:40:58:6f:7b:5b:84:24:3f:9d:f6:a5:45:bf:
e6:47:1e:dd:76:40:f0:6b:5b:e1:a6:47:24:b2:bc:
16:b6:36:43:ab:f0:97:36:0c:e2:95:a6:10:0f:bf:
f8:a8:ae:71:f5:85:e9:de:aa:00:50:a5:94:ad:5b:
e5:3d:f8:ec:82:94:3b:45:de:74:7e:02:92:df:cc:
e3:33:7b:47:e6:3e:f5:d2:82:be:11:09:dd:e9:17:
c6:ce:f9:e3:f9:5a:25:5d:17:35:17:c1:75:2a:42:
b8:da:d6:3e:f0:d9:1b:ad:79:9f:a7:83:7e:82:0f:
37:38:c3:84:f4:7f:22:da:ec:58:c4:19:4a:e4:46:
7e:62:22:12:ea:3b:e7:e9:49:3b:e1:a5:08:7f:3a:
b8:33:50:b5:10:4e:f3:14:0e:4d:2b:9b:98:ce:ac:
2c:bf:16:98:fb:52:01:00:7a:a7:77:48:91:8c:c2:
12:80:2a:16:a5:9f:b9:18:b1:50:43:89:c9:b7:9a:
c8:6b:50:62:c8:40:ac:ea:6a:52:88:ec:df:9f:54:
97:81:88:76:89:bd:ae:bb:13:5f:d4:a7:6f:e7:fe:
83:02:74:55:f2:2e:0c:9d:92:32:fc:99:81:a6:36:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:A4:93:24:BC:CF:59:71:CD:1E:83:A2:64:BB:75:DC:1E:2D:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/a6350f73-43fc-378b-b093-f5e70c93838b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl
X509v3 Authority Key Identifier:
keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
sbgp-ipAddrBlock: critical
IPv4:
206.197.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:6c:93:ae:37:c3:de:1c:42:fc:dd:b9:39:82:7f:46:f1:19:
43:f3:67:a0:38:63:36:2f:90:97:4e:c9:b2:af:fb:c5:79:a1:
fb:b6:82:e6:80:0a:0b:f4:4a:ac:b6:c5:bc:03:c3:ad:7c:c6:
43:56:55:0e:df:34:e9:2e:32:76:f1:1e:ab:b2:08:7f:fc:1e:
04:86:bf:b8:4d:30:5b:42:35:26:50:0e:99:52:90:5b:a8:15:
2e:07:4a:ad:2c:67:05:7d:cd:5f:26:d9:1e:e0:b0:8d:23:e8:
03:44:21:db:d7:c7:0b:13:14:72:40:32:fc:bf:66:07:8b:b9:
fe:86:d3:68:c5:83:8e:1d:68:ff:66:3c:88:2e:2c:2e:94:07:
f4:30:f0:ef:17:de:20:da:c8:56:7b:e1:91:af:1d:d2:9d:8a:
38:58:ad:7b:b9:41:45:44:33:8c:2a:21:f8:1b:d2:04:5d:c1:
56:e3:b2:d8:50:da:5b:40:e1:0f:67:7e:ca:ea:28:c5:8b:a5:
71:5a:76:df:b3:ef:2f:9f:ae:21:99:17:75:9a:dd:0a:be:d3:
d1:d6:33:53:6d:f1:36:63:03:d2:8a:20:16:c5:e6:ec:8f:d1:
9d:22:c2:73:70:74:4c:ce:16:d7:c2:32:b2:1b:22:40:53:d1:
bd:be:3d:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftbZTOkhuWcbWJWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyNjk1YjctZTgyMy00Zjc0LTkzYjgtOThkYmJmNzc1
YmNmMB4XDTI0MTExOTA0MjcxOVoXDTI1MDIxNzA0MjcxOVowLzEtMCsGA1UEAxMk
ZTQ2YzA2N2YtM2Q0NC00NDEwLWIzOWUtZTljMDdmZTAzM2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB3idxqBG7Wf5vUg1wmW8kBYb3tbhCQ/nfal
Rb/mRx7ddkDwa1vhpkcksrwWtjZDq/CXNgzilaYQD7/4qK5x9YXp3qoAUKWUrVvl
PfjsgpQ7Rd50fgKS38zjM3tH5j710oK+EQnd6RfGzvnj+VolXRc1F8F1KkK42tY+
8NkbrXmfp4N+gg83OMOE9H8i2uxYxBlK5EZ+YiIS6jvn6Uk74aUIfzq4M1C1EE7z
FA5NK5uYzqwsvxaY+1IBAHqnd0iRjMISgCoWpZ+5GLFQQ4nJt5rIa1BiyECs6mpS
iOzfn1SXgYh2ib2uuxNf1Kdv5/6DAnRV8i4MnZIy/JmBpjY3yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+WpJMkvM9Zcc0eg6Jku3XcHi3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2
OTViNy1lODIzLTRmNzQtOTNiOC05OGRiYmY3NzViY2YvYTYzNTBmNzMtNDNmYy0z
NzhiLWIwOTMtZjVlNzBjOTM4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGEyNjk1YjctZTgyMy00Zjc0LTkz
YjgtOThkYmJmNzc1YmNmLzhhMjY5NWI3LWU4MjMtNGY3NC05M2I4LTk4ZGJiZjc3
NWJjZi5jcmwwHwYDVR0jBBgwFoAUQwpY7vmeeMU73CWitIOTgUZpxGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2OTViNy1lODIzLTRmNzQtOTNiOC05OGRi
YmY3NzViY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsXPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBsk643w94cQvzduTmCf0bxGUPzZ6A4YzYvkJdOybKv+8V5ofu2guaA
Cgv0Sqy2xbwDw618xkNWVQ7fNOkuMnbxHquyCH/8HgSGv7hNMFtCNSZQDplSkFuo
FS4HSq0sZwV9zV8m2R7gsI0j6ANEIdvXxwsTFHJAMvy/ZgeLuf6G02jFg44daP9m
PIguLC6UB/Qw8O8X3iDayFZ74ZGvHdKdijhYrXu5QUVEM4wqIfgb0gRdwVbjsthQ
2ltA4Q9nfsrqKMWLpXFadt+z7y+friGZF3Wa3Qq+09HWM1Nt8TZjA9KKIBbF5uyP
0Z0iwnNwdEzOFtfCMrIbIkBT0b2+PXY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:23 2025 by rpki-client