Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44777ee0-63c9-3b26-bb3b-f1ad5fe24225.roa
File: 44777ee0-63c9-3b26-bb3b-f1ad5fe24225.roa (raw, json)
Hash identifier: ggeSQjynkSz3yjsJEw8LfeUfLG83P0TxC+5K9DUhMLI=
Subject key identifier: 57:A5:73:68:39:41:B5:61:CC:57:45:95:1E:7C:3A:57:33:85:F5:14
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584586B23610DD9C0FFF146AAA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44777ee0-63c9-3b26-bb3b-f1ad5fe24225.roa
Signing time: Fri 12 Apr 2024 23:43:28 +0000
ROA not before: Fri 12 Apr 2024 23:43:28 +0000
ROA not after: Thu 11 Jul 2024 23:43:28 +0000
asID: 3561
IP address blocks: 172.120.22.0/24 maxlen: 24
172.252.153.0/24 maxlen: 24
107.164.9.0/24 maxlen: 24
104.253.130.0/24 maxlen: 24
104.253.43.0/24 maxlen: 24
104.253.41.0/24 maxlen: 24
104.253.36.0/24 maxlen: 24
107.164.167.0/24 maxlen: 24
142.252.21.0/24 maxlen: 24
142.252.6.0/24 maxlen: 24
172.252.165.0/24 maxlen: 24
107.164.13.0/24 maxlen: 24
172.121.17.0/24 maxlen: 24
172.121.131.0/24 maxlen: 24
172.121.28.0/24 maxlen: 24
172.121.6.0/24 maxlen: 24
172.120.24.0/24 maxlen: 24
107.164.103.0/24 maxlen: 24
142.252.31.0/24 maxlen: 24
172.120.6.0/24 maxlen: 24
142.252.184.0/24 maxlen: 24
142.252.55.0/24 maxlen: 24
142.252.116.0/24 maxlen: 24
172.252.186.0/24 maxlen: 24
172.252.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 20:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:86:b2:36:10:dd:9c:0f:ff:14:6a:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 12 23:43:28 2024 GMT
Not After : Jul 11 23:43:28 2024 GMT
Subject: CN=60fe1cc2-ad9d-4d42-a5cd-66d0caf0f036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:0a:40:ee:0b:d6:1d:32:c1:fe:9b:9b:74:
8f:48:92:ae:60:d5:6c:02:41:91:2a:fd:2f:e2:46:
cc:89:54:15:e5:0f:e4:0a:e6:20:33:f7:8b:c1:88:
ab:32:06:a9:db:fa:14:d1:60:2b:f6:6c:f0:25:e3:
42:83:2a:3a:c1:7d:7e:a5:17:af:bb:31:9d:2d:4f:
bf:fc:a4:90:c4:f0:4c:e1:8b:7d:eb:e6:73:ea:fb:
e3:90:54:4b:6b:81:a5:5f:99:df:15:6c:b0:60:bb:
68:f0:19:e7:94:2d:20:3f:40:00:92:fc:45:c6:22:
64:f8:24:f8:4c:1b:1c:6c:dd:bf:07:61:55:3e:57:
63:f9:41:d8:56:d4:f9:66:bb:29:7a:94:64:fa:c3:
2d:23:44:58:9c:70:06:a0:3f:f6:68:d8:06:33:8b:
0b:0d:a4:bd:06:8f:9d:cc:e8:4b:f8:72:a1:c8:75:
47:9d:c9:fb:1b:ef:d9:b6:0e:a8:83:d5:6e:56:d6:
40:e2:3f:59:5c:63:23:56:89:87:a1:20:88:71:85:
d6:c5:73:66:7c:03:2e:20:ce:f5:67:10:16:b9:6a:
53:ef:59:74:ff:68:10:fe:45:88:b1:c3:4d:0b:39:
dd:cb:2e:0c:95:eb:02:ee:38:b3:8d:0e:33:11:90:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:73:68:39:41:B5:61:CC:57:45:95:1E:7C:3A:57:33:85:F5:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44777ee0-63c9-3b26-bb3b-f1ad5fe24225.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.36.0/24
104.253.41.0/24
104.253.43.0/24
104.253.130.0/24
107.164.9.0/24
107.164.13.0/24
107.164.103.0/24
107.164.167.0/24
142.252.6.0/24
142.252.21.0/24
142.252.31.0/24
142.252.55.0/24
142.252.116.0/24
142.252.184.0/24
172.120.6.0/24
172.120.22.0/24
172.120.24.0/24
172.121.6.0/24
172.121.17.0/24
172.121.28.0/24
172.121.131.0/24
172.252.153.0/24
172.252.165.0/24
172.252.184.0/24
172.252.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:db:35:fb:d5:b1:7f:67:80:32:d2:b0:0b:50:96:6f:b9:63:
fe:68:a5:47:ab:e7:20:7e:1b:b0:c1:49:55:b4:e7:c2:7d:86:
a2:d8:db:b4:2f:f5:31:0e:89:8e:e1:35:b0:39:f7:b4:6a:74:
c8:03:a0:17:2d:e8:6e:f7:d9:0c:35:ce:ea:27:19:03:82:6e:
32:cc:7e:59:16:e7:e8:d4:35:96:bb:ed:d4:a7:37:59:a4:25:
31:51:be:20:ea:90:c9:99:18:c8:a6:52:d5:06:47:63:c4:19:
9f:3f:a8:77:8b:d6:00:7f:f5:de:c3:51:a7:ab:83:5a:db:e8:
c5:7b:fa:05:2f:04:a2:53:20:d4:7f:ce:86:4c:1d:d1:b7:9b:
59:a9:4e:48:c6:70:f8:32:39:61:ea:57:db:ec:35:7d:2a:ce:
de:d0:a5:e4:ca:0e:8d:ec:72:d8:22:9e:c2:0d:95:83:66:89:
29:42:23:f1:52:b6:80:27:bc:22:7a:62:81:79:ff:23:60:f5:
25:9a:dc:94:e9:48:bd:e7:09:9e:19:f7:86:28:e3:63:59:56:
4d:1c:b6:22:7e:b9:04:01:a3:da:30:87:8d:ef:0f:5a:45:bc:
48:b8:aa:63:f4:c4:8c:87:40:1a:2d:ee:07:55:40:e2:52:05:
d7:0e:e7:bb
-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWEWGsjYQ3ZwP/xRqqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQxMjIzNDMyOFoXDTI0MDcxMTIzNDMyOFowLzEtMCsGA1UEAxMk
NjBmZTFjYzItYWQ5ZC00ZDQyLWE1Y2QtNjZkMGNhZjBmMDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhecKQO4L1h0ywf6bm3SPSJKuYNVsAkGRKv0v
4kbMiVQV5Q/kCuYgM/eLwYirMgap2/oU0WAr9mzwJeNCgyo6wX1+pRevuzGdLU+/
/KSQxPBM4Yt96+Zz6vvjkFRLa4GlX5nfFWywYLto8BnnlC0gP0AAkvxFxiJk+CT4
TBscbN2/B2FVPldj+UHYVtT5ZrspepRk+sMtI0RYnHAGoD/2aNgGM4sLDaS9Bo+d
zOhL+HKhyHVHncn7G+/Ztg6og9VuVtZA4j9ZXGMjVomHoSCIcYXWxXNmfAMuIM71
ZxAWuWpT71l0/2gQ/kWIscNNCzndyy4MlesC7jizjQ4zEZC8WQIDAQABo4ID6jCC
A+YwHQYDVR0OBBYEFFelc2g5QbVhzFdFlR58OlczhfUUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDQ3NzdlZTAtNjNjOS0z
YjI2LWJiM2ItZjFhZDVmZTI0MjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBABo
/SQDBABo/SkDBABo/SsDBABo/YIDBABrpAkDBABrpA0DBABrpGcDBABrpKcDBACO
/AYDBACO/BUDBACO/B8DBACO/DcDBACO/HQDBACO/LgDBACseAYDBACseBYDBACs
eBgDBACseQYDBACseREDBACseRwDBACseYMDBACs/JkDBACs/KUDBACs/LgDBACs
/LowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAHds1+9Wxf2eAMtKwC1CWb7lj/milR6vnIH4bsMFJVbTnwn2G
otjbtC/1MQ6JjuE1sDn3tGp0yAOgFy3obvfZDDXO6icZA4JuMsx+WRbn6NQ1lrvt
1Kc3WaQlMVG+IOqQyZkYyKZS1QZHY8QZnz+od4vWAH/13sNRp6uDWtvoxXv6BS8E
olMg1H/Ohkwd0bebWalOSMZw+DI5YepX2+w1fSrO3tCl5MoOjexy2CKewg2Vg2aJ
KUIj8VK2gCe8InpigXn/I2D1JZrclOlIvecJnhn3hijjY1lWTRy2In65BAGj2jCH
je8PWkW8SLiqY/TEjIdAGi3uB1VA4lIF1w7nuw==
-----END CERTIFICATE-----
Generated at Wed Apr 24 23:56:39 2024 by rpki-client on console-fra.rpki-client.org