Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/82012694-7e9d-3ae2-9e6c-b9bd9f42728c.roa
File: 82012694-7e9d-3ae2-9e6c-b9bd9f42728c.roa (raw, json)
Hash identifier: S3P0hG+pk//IMCcM0w81jSjoywRayCR5vy1lilL0f5Q=
Subject key identifier: 6A:6B:1F:16:ED:46:5E:D0:08:8E:F6:22:F8:80:9A:40:AE:A3:0E:80
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858451CE036F3A80360EDA6633880
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/82012694-7e9d-3ae2-9e6c-b9bd9f42728c.roa
Signing time: Wed 06 Mar 2024 02:00:25 +0000
ROA not before: Wed 06 Mar 2024 02:00:25 +0000
ROA not after: Tue 04 Jun 2024 01:00:25 +0000
asID: 19437
IP address blocks: 144.168.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1c:e0:36:f3:a8:03:60:ed:a6:63:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Mar 6 02:00:25 2024 GMT
Not After : Jun 4 01:00:25 2024 GMT
Subject: CN=8c9ce621-97c9-4fd4-8e8d-95bced3558d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:b4:5d:e6:91:39:d8:91:e0:8e:85:c9:3b:
b1:bb:0e:3b:39:40:95:67:ff:28:a3:c2:c6:0c:8d:
3e:08:56:eb:6b:8c:e5:f5:3c:ba:7e:12:97:cb:2f:
2c:56:cf:80:b5:6d:21:fd:ab:82:5e:32:37:ff:77:
2e:01:24:81:78:1e:c5:4d:7f:7d:bc:ee:13:67:65:
91:6b:8b:3e:11:94:19:dc:c1:0c:38:6c:48:1e:60:
8a:e4:38:82:a6:fe:aa:bb:a7:85:12:e9:a7:37:05:
15:49:cb:d0:9e:4e:ff:fa:c5:f0:3b:f5:05:e8:30:
57:31:07:84:61:17:c6:e2:ab:ae:db:2d:9f:7f:96:
89:86:cf:3c:58:ce:aa:21:41:2e:7a:be:5e:1e:50:
c9:30:54:29:c1:27:20:45:3e:38:8e:c5:af:35:67:
c5:dc:d1:2c:0d:a5:ae:74:88:87:aa:6a:b2:fc:72:
33:fa:10:96:9a:a1:d1:a6:76:d0:54:e6:57:d6:f7:
7e:39:78:b2:3d:86:83:68:02:2f:20:41:ff:21:11:
75:d3:5c:e9:ff:e2:49:05:b2:c3:13:df:c6:6e:08:
c5:92:c8:c8:1d:ba:c2:20:8b:b9:bf:31:38:d8:5c:
49:fd:a0:fb:c4:f2:82:38:1e:fb:af:b2:eb:e3:a8:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6B:1F:16:ED:46:5E:D0:08:8E:F6:22:F8:80:9A:40:AE:A3:0E:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/82012694-7e9d-3ae2-9e6c-b9bd9f42728c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:49:75:68:20:d5:71:8a:04:f7:30:5f:b3:1f:2c:1e:ff:ca:
38:6b:80:c4:70:ac:32:d8:1e:91:7a:49:98:10:fd:e1:14:9a:
35:1d:0d:44:42:79:c7:60:48:52:13:80:47:2d:66:a5:7f:e0:
88:fd:47:0b:8d:96:c9:d0:34:e8:e6:13:2c:20:fd:ee:04:ff:
4a:21:89:a2:82:d9:14:7f:13:5d:f1:97:b5:17:60:fd:46:61:
f7:4b:bf:f0:fc:01:9d:06:93:24:29:fd:6a:70:fc:9f:88:8a:
2b:f9:eb:6e:19:cc:ee:6b:67:1a:74:84:ab:51:50:03:2e:d2:
73:06:cb:97:57:5c:7b:af:f0:ed:ea:29:f4:00:6d:16:69:e1:
98:96:9b:dc:f5:16:16:31:ba:c5:f9:c9:9a:a5:ba:b1:79:25:
2f:af:98:84:0b:48:82:40:8e:8b:d4:ba:8c:a6:07:fd:fe:87:
eb:b8:33:d5:cc:ff:14:df:5b:59:55:b6:81:14:4c:a0:67:5a:
61:10:41:61:20:8b:67:9a:a7:ee:d5:43:d7:63:24:c5:12:2c:
d1:d0:b6:83:c9:21:71:50:e9:6e:0b:18:20:f0:55:dc:5f:bb:
89:4e:be:36:24:9b:25:27:b9:9c:bc:47:3a:ae:8e:de:76:29:
49:b5:5d:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUc4DbzqANg7aZjOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTI0MDMwNjAyMDAyNVoXDTI0MDYwNDAxMDAyNVowLzEtMCsGA1UEAxMk
OGM5Y2U2MjEtOTdjOS00ZmQ0LThlOGQtOTViY2VkMzU1OGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHS0XeaROdiR4I6FyTuxuw47OUCVZ/8oo8LG
DI0+CFbra4zl9Ty6fhKXyy8sVs+AtW0h/auCXjI3/3cuASSBeB7FTX99vO4TZ2WR
a4s+EZQZ3MEMOGxIHmCK5DiCpv6qu6eFEumnNwUVScvQnk7/+sXwO/UF6DBXMQeE
YRfG4quu2y2ff5aJhs88WM6qIUEuer5eHlDJMFQpwScgRT44jsWvNWfF3NEsDaWu
dIiHqmqy/HIz+hCWmqHRpnbQVOZX1vd+OXiyPYaDaAIvIEH/IRF101zp/+JJBbLD
E9/GbgjFksjIHbrCIIu5vzE42FxJ/aD7xPKCOB77r7Lr46iZLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGprHxbtRl7QCI72IviAmkCuow6AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvODIwMTI2OTQtN2U5ZC0z
YWUyLTllNmMtYjliZDlmNDI3MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKgEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFJdWgg1XGKBPcwX7MfLB7/yjhrgMRwrDLYHpF6SZgQ/eEUmjUdDURC
ecdgSFITgEctZqV/4Ij9RwuNlsnQNOjmEywg/e4E/0ohiaKC2RR/E13xl7UXYP1G
YfdLv/D8AZ0GkyQp/Wpw/J+Iiiv5624ZzO5rZxp0hKtRUAMu0nMGy5dXXHuv8O3q
KfQAbRZp4ZiWm9z1FhYxusX5yZqlurF5JS+vmIQLSIJAjovUuoymB/3+h+u4M9XM
/xTfW1lVtoEUTKBnWmEQQWEgi2eap+7VQ9djJMUSLNHQtoPJIXFQ6W4LGCDwVdxf
u4lOvjYkmyUnuZy8Rzqujt52KUm1XUc=
-----END CERTIFICATE-----
Generated at Fri Mar 15 10:43:00 2024 by rpki-client on console-ams.rpki-client.org