Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/81e34224-f322-30f0-8252-54faf3b2306f.roa
File: 81e34224-f322-30f0-8252-54faf3b2306f.roa (raw, json)
Hash identifier: 43WLIKwJmi/pDUGh/wk90bpAyMsbvQNGYH2AhOVOx3Q=
Subject key identifier: 65:89:54:D3:7A:E8:D5:F1:2F:5C:55:E7:4C:A0:44:A0:55:23:35:61
Certificate issuer: /CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
Certificate serial: 010D0C9F43285846B45A576F9E7F43E024F1EAC0
Authority key identifier: 69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/81e34224-f322-30f0-8252-54faf3b2306f.roa
Signing time: Tue 30 Jul 2024 01:00:28 +0000
ROA not before: Tue 30 Jul 2024 01:00:28 +0000
ROA not after: Mon 28 Oct 2024 01:00:28 +0000
asID: 32920
IP address blocks: 216.27.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 15:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b4:5a:57:6f:9e:7f:43:e0:24:f1:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
Validity
Not Before: Jul 30 01:00:28 2024 GMT
Not After : Oct 28 01:00:28 2024 GMT
Subject: CN=8d755fd1-56c7-4442-9672-4b88d5841415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:2a:ca:72:82:e9:ef:37:a5:9a:0c:60:53:
49:94:da:a0:ff:69:a9:e4:07:a2:d4:f7:b9:cf:42:
03:59:a8:da:ea:15:65:10:bc:54:c7:f6:04:32:0d:
b2:cd:f6:34:d6:2c:21:bc:5c:6b:18:1c:fd:f5:a1:
60:9b:64:e6:cf:7c:ab:67:54:33:ba:42:35:61:76:
ca:f1:a2:af:1f:56:d7:42:f9:c6:cc:08:f3:cb:df:
b2:f7:4e:7a:5c:62:13:9c:d6:65:26:77:fe:e1:55:
61:38:6d:89:22:fc:85:2e:8d:35:8f:3f:21:88:44:
08:59:ce:bd:76:2a:b1:21:eb:12:53:db:77:9a:46:
66:82:90:ff:99:04:11:55:3e:ba:1e:89:18:d7:05:
f0:d7:53:93:62:86:5b:62:62:5e:48:3c:05:61:4f:
6c:3f:19:4d:5e:43:e7:22:ab:b3:9a:6d:38:00:74:
b1:4e:66:c9:fd:c8:02:e8:c9:89:49:38:06:df:fc:
23:73:df:35:b3:f9:84:7f:b2:89:de:35:62:94:95:
5f:90:57:26:30:f9:1a:b3:e5:19:93:e3:a5:e5:7f:
97:e4:a8:f8:aa:1c:45:91:50:80:69:12:80:2d:66:
f9:02:a9:1a:af:6d:bb:9d:7f:18:3e:27:73:c7:14:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:89:54:D3:7A:E8:D5:F1:2F:5C:55:E7:4C:A0:44:A0:55:23:35:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/81e34224-f322-30f0-8252-54faf3b2306f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl
X509v3 Authority Key Identifier:
keyid:69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
sbgp-ipAddrBlock: critical
IPv4:
216.27.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:fa:30:62:f2:53:67:fa:c8:58:62:27:f3:c5:e7:b5:c3:57:
66:16:b5:e1:c1:c1:3a:cd:3c:57:46:75:f3:1f:2d:79:09:fd:
90:38:b6:f5:ac:df:30:11:f2:3c:ca:07:b5:aa:67:7c:1e:31:
e7:69:ec:b1:5b:49:d7:b6:48:5e:e2:66:64:4c:34:4d:dd:fe:
ae:f7:81:6c:fc:b6:f9:24:be:b5:05:ef:1f:83:04:5b:2d:d3:
7a:3e:f6:b9:76:81:a4:58:a4:f1:08:8f:5e:e9:47:6e:ad:df:
8d:70:06:0b:fb:53:79:f7:4b:ad:3c:f5:4b:62:3f:98:d2:92:
e5:fd:32:b6:49:40:69:75:f5:4c:5f:be:0d:e0:d0:30:f6:c8:
65:de:45:5e:ac:6b:61:d3:91:3d:77:fb:cf:ce:8e:0d:57:ec:
8d:9b:8b:9a:a3:9e:f6:e4:67:aa:ce:e1:59:b7:7a:80:d8:bb:
01:43:81:ee:30:0d:ac:cf:69:c5:0d:75:75:7e:c5:25:97:26:
d0:76:20:d4:63:ea:63:0a:ca:6f:43:a7:92:3e:bd:c6:cd:e0:
e5:11:24:76:ce:11:1f:d9:df:d6:25:a6:f2:e6:86:98:99:3f:
c5:18:9e:fd:2b:ed:79:fd:84:be:07:5c:e3:e0:4b:30:07:f8:
b4:28:3c:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEa0Wldvnn9D4CTx6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2MDdkMjMtOGM5Mi00ZmZjLTljNTQtOTA0MThhNGM0
NTQ0MB4XDTI0MDczMDAxMDAyOFoXDTI0MTAyODAxMDAyOFowLzEtMCsGA1UEAxMk
OGQ3NTVmZDEtNTZjNy00NDQyLTk2NzItNGI4OGQ1ODQxNDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPQqynKC6e83pZoMYFNJlNqg/2mp5Aei1Pe5
z0IDWaja6hVlELxUx/YEMg2yzfY01iwhvFxrGBz99aFgm2Tmz3yrZ1QzukI1YXbK
8aKvH1bXQvnGzAjzy9+y9056XGITnNZlJnf+4VVhOG2JIvyFLo01jz8hiEQIWc69
diqxIesSU9t3mkZmgpD/mQQRVT66HokY1wXw11OTYoZbYmJeSDwFYU9sPxlNXkPn
Iquzmm04AHSxTmbJ/cgC6MmJSTgG3/wjc981s/mEf7KJ3jVilJVfkFcmMPkas+UZ
k+Ol5X+X5Kj4qhxFkVCAaRKALWb5Aqkar227nX8YPidzxxRr6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGWJVNN66NXxL1xV50ygRKBVIzVhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjYw
N2QyMy04YzkyLTRmZmMtOWM1NC05MDQxOGE0YzQ1NDQvODFlMzQyMjQtZjMyMi0z
MGYwLTgyNTItNTRmYWYzYjIzMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2MDdkMjMtOGM5Mi00ZmZjLTlj
NTQtOTA0MThhNGM0NTQ0LzNmNjA3ZDIzLThjOTItNGZmYy05YzU0LTkwNDE4YTRj
NDU0NC5jcmwwHwYDVR0jBBgwFoAUaTjMka986+bkHCCBh/FqEpFiQPEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjYwN2QyMy04YzkyLTRmZmMtOWM1NC05MDQx
OGE0YzQ1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BtnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFj6MGLyU2f6yFhiJ/PF57XDV2YWteHBwTrNPFdGdfMfLXkJ/ZA4tvWs
3zAR8jzKB7WqZ3weMedp7LFbSde2SF7iZmRMNE3d/q73gWz8tvkkvrUF7x+DBFst
03o+9rl2gaRYpPEIj17pR26t341wBgv7U3n3S6089UtiP5jSkuX9MrZJQGl19Uxf
vg3g0DD2yGXeRV6sa2HTkT13+8/Ojg1X7I2bi5qjnvbkZ6rO4Vm3eoDYuwFDge4w
DazPacUNdXV+xSWXJtB2INRj6mMKym9Dp5I+vcbN4OURJHbOER/Z39YlpvLmhpiZ
P8UYnv0r7Xn9hL4HXOPgSzAH+LQoPFI=
-----END CERTIFICATE-----
Generated at Tue Sep 10 17:30:57 2024 by rpki-client on console-fra.rpki-client.org