Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/72e0d9a7-e8d5-3f64-8efd-f15036f6616e.roa
File: 72e0d9a7-e8d5-3f64-8efd-f15036f6616e.roa (raw, json)
Hash identifier: 4Jxa6ApTKY7VCLM5iALjX3P4J8k4ahW0bKnol4vOFcM=
Subject key identifier: AA:15:45:7A:F8:52:CE:16:A3:0F:BA:11:2B:B8:05:06:DF:79:81:1D
Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial: 010D0C9F432858477230DC812DE4276A75D3C600
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/72e0d9a7-e8d5-3f64-8efd-f15036f6616e.roa
Signing time: Sun 06 Oct 2024 01:00:31 +0000
ROA not before: Sun 06 Oct 2024 01:00:31 +0000
ROA not after: Sat 04 Jan 2025 02:00:31 +0000
asID: 399575
IP address blocks: 206.204.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 18:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:72:30:dc:81:2d:e4:27:6a:75:d3:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Validity
Not Before: Oct 6 01:00:31 2024 GMT
Not After : Jan 4 02:00:31 2025 GMT
Subject: CN=916ca081-a20e-4b4b-bd2f-32b8c49bca3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:fc:0f:2f:84:85:3f:b3:b2:10:cf:37:7a:
89:46:59:ff:79:69:8b:78:83:c2:7f:0b:62:f1:2a:
9b:4f:e4:78:47:d3:f4:8f:22:2b:1e:c6:56:9c:00:
a4:6b:92:a6:12:17:b9:01:99:d0:ab:82:6c:11:75:
17:0d:15:12:08:bb:a9:28:b7:7b:be:e9:bf:17:f5:
da:46:8b:83:49:ee:a1:86:b4:7c:62:ce:13:1a:e7:
00:bb:e3:4f:2a:dd:75:41:d8:2c:85:90:0f:74:6b:
b0:7d:ee:78:99:e4:73:24:91:58:08:ab:12:2f:a0:
db:2a:8b:ae:9a:62:5e:2e:7d:ba:b2:29:62:eb:79:
82:01:d4:8a:e7:3e:3d:3d:27:e7:62:ea:77:5f:2d:
2e:96:dd:cd:ba:9e:c2:41:94:74:c4:7f:2a:f9:40:
c3:76:a3:ca:92:f5:dd:07:2f:0e:c1:68:76:3d:0c:
bb:eb:e5:33:94:4c:74:bc:3f:5e:80:6a:45:c2:69:
71:8c:42:e6:88:81:9b:40:16:38:e2:06:e0:76:ca:
a4:8e:47:4b:05:05:ed:03:11:06:4d:3e:7f:15:5e:
bb:56:dc:3b:57:3c:96:af:13:08:94:78:bc:76:d1:
da:4a:9a:d1:d9:e4:de:0a:1b:1b:50:65:77:4c:0f:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:45:7A:F8:52:CE:16:A3:0F:BA:11:2B:B8:05:06:DF:79:81:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/72e0d9a7-e8d5-3f64-8efd-f15036f6616e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
X509v3 Authority Key Identifier:
keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
sbgp-ipAddrBlock: critical
IPv4:
206.204.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:99:4f:7b:0a:c2:24:70:0e:a8:4f:12:a3:2e:44:bd:3a:50:
95:5e:cd:8e:18:c7:69:7e:26:8b:d2:08:0e:d3:34:97:fe:90:
05:10:b5:fc:8e:0f:35:40:34:3c:c9:07:1e:26:ff:eb:9c:90:
18:38:dc:49:64:5c:b2:45:60:0e:22:94:c1:76:cd:a7:57:b9:
66:ff:27:bb:8d:42:36:11:d6:4b:fb:6f:04:5d:77:7e:15:6c:
20:54:dd:6b:83:5d:b8:12:84:3f:87:27:b5:23:fa:af:9c:fc:
79:20:54:40:e2:57:58:ec:0d:02:83:b7:38:5f:4e:c0:cd:d5:
d2:e9:2f:34:2b:ea:07:fe:ae:c8:44:e3:e8:66:54:2f:85:7b:
f5:e8:80:df:3e:69:f6:01:5c:7c:3b:20:d9:21:ce:19:88:e4:
07:9f:e4:f0:4d:17:f2:bc:0e:22:72:3b:b6:7e:cd:47:55:b9:
9a:95:e0:44:2d:63:c9:d3:07:c8:1d:d2:b7:f2:75:8c:9a:c0:
d4:d7:14:99:2e:e0:4e:8c:d6:cd:f9:44:d6:ef:50:33:14:7c:
e5:68:91:96:2b:c0:3f:5b:b5:e8:e3:78:c2:34:cd:23:9e:48:
92:28:fb:94:3f:33:e9:de:bd:c3:d5:85:5a:64:b9:ce:7b:d3:
b2:6a:fe:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMNyBLeQnanXTxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm
OGNhMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
OTE2Y2EwODEtYTIwZS00YjRiLWJkMmYtMzJiOGM0OWJjYTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8j8Dy+EhT+zshDPN3qJRln/eWmLeIPCfwti
8SqbT+R4R9P0jyIrHsZWnACka5KmEhe5AZnQq4JsEXUXDRUSCLupKLd7vum/F/Xa
RouDSe6hhrR8Ys4TGucAu+NPKt11QdgshZAPdGuwfe54meRzJJFYCKsSL6DbKouu
mmJeLn26sili63mCAdSK5z49PSfnYup3Xy0ult3Nup7CQZR0xH8q+UDDdqPKkvXd
By8OwWh2PQy76+UzlEx0vD9egGpFwmlxjELmiIGbQBY44gbgdsqkjkdLBQXtAxEG
TT5/FV67Vtw7VzyWrxMIlHi8dtHaSprR2eTeChsbUGV3TA9OGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKoVRXr4Us4Wow+6ESu4BQbfeYEdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4
N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvNzJlMGQ5YTctZThkNS0z
ZjY0LThlZmQtZjE1MDM2ZjY2MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1
YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj
ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4
NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzszrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqZT3sKwiRwDqhPEqMuRL06UJVezY4Yx2l+JovSCA7TNJf+kAUQtfyO
DzVANDzJBx4m/+uckBg43ElkXLJFYA4ilMF2zadXuWb/J7uNQjYR1kv7bwRdd34V
bCBU3WuDXbgShD+HJ7Uj+q+c/HkgVEDiV1jsDQKDtzhfTsDN1dLpLzQr6gf+rshE
4+hmVC+Fe/XogN8+afYBXHw7INkhzhmI5Aef5PBNF/K8DiJyO7Z+zUdVuZqV4EQt
Y8nTB8gd0rfydYyawNTXFJku4E6M1s35RNbvUDMUfOVokZYrwD9btejjeMI0zSOe
SJIo+5Q/M+nevcPVhVpkuc5707Jq/k8=
-----END CERTIFICATE-----
Generated at Tue Nov 19 21:22:06 2024 by rpki-client on console-fra.rpki-client.org