Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ade723da-fdbe-3dda-8d6f-f514bc80c823.roa
File: ade723da-fdbe-3dda-8d6f-f514bc80c823.roa (raw, json)
Hash identifier: zqQn9SkB4ErD8ioy/lp7eo+kwNwX09QbgUQnE8pi8Mk=
Subject key identifier: A2:D6:6B:28:67:3B:EF:F2:F9:0F:97:CA:8C:61:2B:A6:CD:7E:35:32
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285846A2AC483FAC57EBA0E5533C00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ade723da-fdbe-3dda-8d6f-f514bc80c823.roa
Signing time: Tue 23 Jul 2024 17:01:06 +0000
ROA not before: Tue 23 Jul 2024 17:01:06 +0000
ROA not after: Mon 21 Oct 2024 17:01:06 +0000
asID: 4922
IP address blocks: 104.244.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 23 Jul 2024 19:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a2:ac:48:3f:ac:57:eb:a0:e5:53:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jul 23 17:01:06 2024 GMT
Not After : Oct 21 17:01:06 2024 GMT
Subject: CN=873f8530-a5e6-42ac-9665-16bbf20e702a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f8:66:13:ca:41:ea:17:b9:fa:bb:5c:78:01:
d8:98:3f:d5:91:e3:aa:b6:69:33:d7:53:4e:e7:22:
ca:bf:07:05:a7:f5:c8:48:d6:a6:4f:a7:cd:44:db:
d8:e9:eb:6b:c9:0a:71:ea:62:97:89:34:3f:e7:39:
eb:83:1b:be:69:12:03:3c:62:12:d5:01:bc:47:9b:
22:c8:0c:96:34:6e:ce:6d:f4:e4:e6:7d:7a:dd:89:
65:56:09:39:9d:84:a0:cc:35:59:10:7d:bc:ab:ab:
61:a6:59:60:22:ea:ea:6e:a5:59:01:fb:9e:5d:36:
5c:86:72:c0:f7:0b:f1:c7:68:e4:7f:9f:7e:a0:b7:
59:4f:dd:c9:1d:a0:73:43:26:f9:8e:b0:68:65:82:
e1:25:00:6b:23:59:bd:f0:0b:12:b0:29:c2:76:a6:
30:b3:ce:04:e9:6d:15:2b:0c:e5:0a:a5:7c:a3:08:
52:4e:ba:b8:1f:b0:5f:b5:a1:09:d4:0b:a8:43:fa:
99:e4:38:29:ea:cc:63:b7:cd:7f:29:7e:1d:f2:95:
84:20:9f:cc:c6:f9:20:2e:b4:f4:57:d4:49:9d:4a:
f9:f5:f2:d8:b6:d5:b9:ab:a8:eb:ab:51:cc:9b:c1:
fe:bd:dd:22:c6:43:fa:d7:91:6b:cf:2e:90:86:7c:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D6:6B:28:67:3B:EF:F2:F9:0F:97:CA:8C:61:2B:A6:CD:7E:35:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ade723da-fdbe-3dda-8d6f-f514bc80c823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:0b:51:65:51:02:8b:73:f4:59:19:18:5e:e9:cb:31:37:dd:
28:82:03:2e:27:86:1e:5c:24:1c:30:df:b3:ff:1e:a5:8a:86:
29:ea:ce:46:b1:bc:43:df:fc:f0:95:73:47:3a:57:63:cc:58:
ff:59:66:67:d7:24:52:a8:60:d2:34:ef:1a:0f:aa:24:08:c1:
b7:ac:c8:3c:8a:96:d5:1b:a6:7d:88:ef:06:d7:a9:72:12:63:
e1:77:af:b9:a7:41:22:1e:29:db:bc:58:b8:8c:c4:ce:ed:f9:
03:61:27:62:a3:67:ee:cc:f4:25:c4:59:44:10:ce:1f:c5:5d:
ae:06:7e:07:71:de:cf:b1:e8:c2:26:41:3a:56:d2:bd:89:79:
62:76:40:45:c2:98:27:d0:48:ff:c6:16:6a:76:72:c9:a7:c9:
3f:17:7e:b3:a1:3d:c8:6f:f9:ea:91:c4:aa:35:03:ec:a2:f7:
06:22:82:22:85:e1:9a:8b:34:d9:37:32:1d:08:11:69:b3:af:
f6:b5:37:23:91:03:db:17:97:5a:6b:f1:bf:44:97:0e:0c:47:
56:c3:5c:8b:0c:5f:f8:a0:a1:93:93:1a:de:2d:e3:14:e4:80:
35:df:eb:a1:1a:d3:8a:b5:9a:f3:b3:e6:c5:db:27:5f:ef:fe:
89:ad:47:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEairEg/rFfroOVTPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI0MDcyMzE3MDEwNloXDTI0MTAyMTE3MDEwNlowLzEtMCsGA1UEAxMk
ODczZjg1MzAtYTVlNi00MmFjLTk2NjUtMTZiYmYyMGU3MDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPhmE8pB6he5+rtceAHYmD/VkeOqtmkz11NO
5yLKvwcFp/XISNamT6fNRNvY6etryQpx6mKXiTQ/5znrgxu+aRIDPGIS1QG8R5si
yAyWNG7ObfTk5n163YllVgk5nYSgzDVZEH28q6thpllgIurqbqVZAfueXTZchnLA
9wvxx2jkf59+oLdZT93JHaBzQyb5jrBoZYLhJQBrI1m98AsSsCnCdqYws84E6W0V
KwzlCqV8owhSTrq4H7BftaEJ1AuoQ/qZ5Dgp6sxjt81/KX4d8pWEIJ/MxvkgLrT0
V9RJnUr59fLYttW5q6jrq1HMm8H+vd0ixkP615Frzy6QhnyIjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLWayhnO+/y+Q+XyoxhK6bNfjUyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYWRlNzIzZGEtZmRiZS0z
ZGRhLThkNmYtZjUxNGJjODBjODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPRoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQLUWVRAotz9FkZGF7pyzE33SiCAy4nhh5cJBww37P/HqWKhinqzkax
vEPf/PCVc0c6V2PMWP9ZZmfXJFKoYNI07xoPqiQIwbesyDyKltUbpn2I7wbXqXIS
Y+F3r7mnQSIeKdu8WLiMxM7t+QNhJ2KjZ+7M9CXEWUQQzh/FXa4Gfgdx3s+x6MIm
QTpW0r2JeWJ2QEXCmCfQSP/GFmp2csmnyT8XfrOhPchv+eqRxKo1A+yi9wYigiKF
4ZqLNNk3Mh0IEWmzr/a1NyORA9sXl1pr8b9Elw4MR1bDXIsMX/igoZOTGt4t4xTk
gDXf66Ea04q1mvOz5sXbJ1/v/omtRzY=
-----END CERTIFICATE-----
Generated at Tue Jul 23 22:49:39 2024 by rpki-client on console-ams.rpki-client.org