Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/38dd2e41-2869-3f04-9bb9-bb48cde850ba.roa
File: 38dd2e41-2869-3f04-9bb9-bb48cde850ba.roa (raw, json)
Hash identifier: IMixooXTXyPbGN9KsCF1suC4vYHXJxO7I4nnw86cISw=
Subject key identifier: 81:17:13:C6:30:EF:B1:0F:AA:6A:7D:83:1E:F0:3E:CC:AC:E7:73:FA
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F432858478481CF851881AECCBFF623C0
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/38dd2e41-2869-3f04-9bb9-bb48cde850ba.roa
Signing time: Sat 12 Oct 2024 14:28:12 +0000
ROA not before: Sat 12 Oct 2024 14:28:12 +0000
ROA not after: Fri 10 Jan 2025 15:28:12 +0000
asID: 40065
IP address blocks: 67.220.64.0/24 maxlen: 24
67.220.90.0/23 maxlen: 24
67.220.92.0/23 maxlen: 24
68.168.16.0/23 maxlen: 24
68.168.22.0/24 maxlen: 24
68.168.24.0/22 maxlen: 24
68.168.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 20:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:84:81:cf:85:18:81:ae:cc:bf:f6:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Oct 12 14:28:12 2024 GMT
Not After : Jan 10 15:28:12 2025 GMT
Subject: CN=a9fd1fab-7a57-4735-a7bb-93d8b24d5434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:3e:fe:6a:57:a4:24:24:a6:26:77:35:34:
e4:49:49:87:a0:c8:95:aa:78:da:9f:b1:99:01:0d:
1f:e4:29:ce:b4:36:0a:4b:96:d1:07:af:47:d3:6d:
ed:62:0e:1f:8c:97:22:d5:35:e1:7d:d6:90:66:82:
51:6d:0e:71:7c:7d:38:ad:dd:1b:81:6e:3c:e7:9d:
c3:58:73:63:0a:31:d6:53:0c:66:81:2b:39:e2:a0:
29:ca:5c:98:df:98:e0:dd:93:0c:07:45:32:75:38:
ff:b5:8f:0b:e8:32:07:19:c2:4a:d6:8a:d0:6c:06:
d1:a0:2a:fc:e2:7f:c3:75:52:e8:86:99:2e:87:31:
95:4d:f1:3d:d7:5a:45:f4:fb:51:ac:1c:b6:99:c0:
4a:f0:ea:38:c4:8f:95:aa:b4:cd:a9:0a:9c:68:bc:
7e:8a:38:b9:cd:c0:80:02:37:1b:a5:10:ac:5d:05:
43:9a:1e:60:a2:b6:68:dd:c9:32:c8:42:11:f9:cc:
6f:54:74:a8:9f:0e:ea:a1:86:20:eb:e4:b7:72:41:
97:d4:71:17:b4:fe:f3:8f:50:fd:66:45:53:80:a9:
76:7b:55:d4:c3:be:73:68:a0:34:51:fd:d8:6b:8a:
22:0b:e3:53:9b:a8:57:63:37:7f:9a:35:3c:6c:a6:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:13:C6:30:EF:B1:0F:AA:6A:7D:83:1E:F0:3E:CC:AC:E7:73:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/38dd2e41-2869-3f04-9bb9-bb48cde850ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.64.0/24
67.220.90.0-67.220.93.255
68.168.16.0/23
68.168.22.0/24
68.168.24.0-68.168.28.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f2:72:3b:a5:1f:3f:d0:e3:f7:70:db:91:c4:20:a6:4b:b8:
65:ae:02:97:3a:95:2f:ac:34:5b:a6:e1:74:fc:17:3c:66:87:
a9:e4:0b:41:30:ef:09:9e:30:5c:aa:55:46:a2:4d:bc:03:79:
fd:ec:82:b7:5a:59:70:7a:ec:9f:98:c6:5b:3f:67:a6:c9:8d:
71:eb:98:63:35:80:fb:7a:02:6e:e2:20:66:5a:78:88:ef:d4:
2f:2c:b7:22:c2:e8:a1:8f:a9:30:be:ca:33:a4:5b:c7:a6:65:
90:46:e2:6b:83:21:36:b2:53:75:9d:53:80:4a:b1:c9:d0:48:
d1:8e:bd:4b:fc:94:40:e3:d5:e6:9a:0e:c0:a7:7a:62:97:2c:
51:66:5a:00:89:26:38:b3:7e:7b:3e:72:c5:55:c2:f9:80:ed:
e9:42:fb:26:ff:67:ff:ee:44:be:17:e1:6c:07:5f:0e:87:db:
87:42:97:cf:b7:70:8c:b6:86:04:b6:83:6f:a7:5c:ef:c5:6e:
51:1a:7a:12:05:74:be:1b:cf:9d:d8:53:a6:8b:37:fd:6b:1e:
11:13:5e:1e:69:aa:ca:98:3c:91:c7:4f:9f:86:8c:3d:b8:e4:
cb:1e:f1:df:dd:0c:b2:2a:cd:ad:3b:54:6e:70:6d:45:07:7d:
0c:f2:57:00
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEeEgc+FGIGuzL/2I8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI0MTAxMjE0MjgxMloXDTI1MDExMDE1MjgxMlowLzEtMCsGA1UEAxMk
YTlmZDFmYWItN2E1Ny00NzM1LWE3YmItOTNkOGIyNGQ1NDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp58+/mpXpCQkpiZ3NTTkSUmHoMiVqnjan7GZ
AQ0f5CnOtDYKS5bRB69H023tYg4fjJci1TXhfdaQZoJRbQ5xfH04rd0bgW48553D
WHNjCjHWUwxmgSs54qApylyY35jg3ZMMB0UydTj/tY8L6DIHGcJK1orQbAbRoCr8
4n/DdVLohpkuhzGVTfE911pF9PtRrBy2mcBK8Oo4xI+VqrTNqQqcaLx+iji5zcCA
AjcbpRCsXQVDmh5gorZo3ckyyEIR+cxvVHSonw7qoYYg6+S3ckGX1HEXtP7zj1D9
ZkVTgKl2e1XUw75zaKA0Uf3Ya4oiC+NTm6hXYzd/mjU8bKZdGwIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFIEXE8Yw77EPqmp9gx7wPsys53P6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMzhkZDJlNDEtMjg2OS0z
ZjA0LTliYjktYmI0OGNkZTg1MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAQ9xAMAwD
BAFD3FoDBAFD3FwDBAFEqBADBABEqBYwDAMEA0SoGAMEAESoHDBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBh
8nI7pR8/0OP3cNuRxCCmS7hlrgKXOpUvrDRbpuF0/Bc8Zoep5AtBMO8JnjBcqlVG
ok28A3n97IK3WllweuyfmMZbP2emyY1x65hjNYD7egJu4iBmWniI79QvLLciwuih
j6kwvsozpFvHpmWQRuJrgyE2slN1nVOASrHJ0EjRjr1L/JRA49Xmmg7Ap3pilyxR
ZloAiSY4s357PnLFVcL5gO3pQvsm/2f/7kS+F+FsB18Oh9uHQpfPt3CMtoYEtoNv
p1zvxW5RGnoSBXS+G8+d2FOmizf9ax4RE14eaarKmDyRx0+fhow9uOTLHvHf3Qyy
Ks2tO1RucG1FB30M8lcA
-----END CERTIFICATE-----
Generated at Tue Oct 15 22:18:32 2024 by rpki-client on console-fra.rpki-client.org