Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3863e75a-452a-3e05-bcae-d25908085195.roa
File: 3863e75a-452a-3e05-bcae-d25908085195.roa (raw, json)
Hash identifier: X5J38lKrcWwc2Rhwh/ef6KWxg0hkCiZOLcRrz+amCL0=
Subject key identifier: C4:13:6C:9E:61:D3:D1:70:F0:D7:42:3A:5D:68:6A:EB:A0:98:3B:45
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A189AEA8C94A3A1CC605410
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3863e75a-452a-3e05-bcae-d25908085195.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:9a:ea:8c:94:a3:a1:cc:60:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=63b05800-5f5c-406a-8105-138069b0302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:e7:69:83:f1:d9:7c:7c:1e:7f:2f:81:5e:
5d:49:07:4d:89:87:9f:b9:5a:13:66:c4:c5:cd:03:
53:58:76:d6:59:5a:63:f2:38:5c:7a:fd:1e:60:b4:
8c:ec:3f:08:7b:df:55:f1:c1:8a:61:26:b4:7e:65:
4f:49:4f:e5:0a:2b:a6:9e:fd:6c:33:cf:32:5c:a3:
ee:4d:50:cd:5a:8a:62:9d:12:4b:4b:45:02:08:0a:
42:ef:64:64:af:24:07:dc:05:b3:cb:64:9c:07:30:
77:9d:6b:10:ca:98:fb:d5:c0:a0:a4:b2:f4:22:db:
eb:d9:8f:20:0d:e5:1e:78:4b:f8:c8:4c:d3:84:60:
de:8e:79:e9:b6:c3:9f:f1:ed:2a:94:7f:a3:42:d9:
cc:a8:59:23:6b:07:ed:ad:db:15:64:f3:57:bf:ad:
63:e9:30:26:74:c0:74:d4:37:f8:1c:95:64:22:fc:
48:72:e2:f7:d4:69:58:d1:41:a7:66:33:df:4a:f4:
a5:75:46:45:c1:00:82:c6:77:c7:a6:5d:6c:ec:97:
51:55:d9:75:23:e9:c0:2c:2d:8c:a9:55:bb:4e:c7:
a7:25:2f:6a:4f:95:51:4f:63:6d:97:98:8b:49:2b:
8d:06:4a:3f:9d:7a:dc:68:d1:69:0b:ff:ab:d3:6e:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:6C:9E:61:D3:D1:70:F0:D7:42:3A:5D:68:6A:EB:A0:98:3B:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3863e75a-452a-3e05-bcae-d25908085195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:9c:2d:3f:b2:62:22:eb:60:23:e6:60:8c:f6:12:d7:6c:59:
84:60:2b:17:56:0d:09:a9:a6:5d:2f:15:ab:92:7e:44:77:cc:
0f:51:e7:ea:06:19:2d:50:12:53:21:b8:d8:20:80:6d:27:9e:
56:37:29:55:52:ff:36:7c:7d:8f:d8:aa:35:4b:23:89:e0:d5:
95:3e:a4:86:62:44:3f:f2:0f:16:f0:a3:32:64:c1:ea:8b:e7:
32:60:78:28:57:05:76:08:f1:be:f8:8c:95:2c:3c:ac:ca:9d:
28:26:b4:14:42:ac:50:fa:d8:11:85:29:41:9b:b9:98:19:95:
e5:4c:84:d3:f4:b1:36:3a:f5:45:54:f7:f7:74:cf:1d:59:c0:
1e:41:37:88:27:10:92:1b:ea:74:a3:d5:90:b9:a4:64:24:bd:
2b:b2:25:4d:26:20:aa:79:6e:63:1a:78:15:7e:22:9c:13:3a:
6c:e9:86:54:75:3e:a9:2a:90:6a:31:46:ce:89:31:6b:17:82:
a7:1d:c7:95:e7:32:71:63:68:6f:b8:5b:84:1e:8a:2b:aa:4e:
0e:ee:19:65:a4:c7:e9:3b:29:fc:c5:b1:9a:ef:cd:8c:2c:76:
65:a1:17:da:78:12:ad:79:f5:01:c7:4e:d6:e2:4e:40:4b:e8:
d3:4f:74:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGJrqjJSjocxgVBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjNiMDU4MDAtNWY1Yy00MDZhLTgxMDUtMTM4MDY5YjAzMDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyPnaYPx2Xx8Hn8vgV5dSQdNiYefuVoTZsTF
zQNTWHbWWVpj8jhcev0eYLSM7D8Ie99V8cGKYSa0fmVPSU/lCiumnv1sM88yXKPu
TVDNWopinRJLS0UCCApC72RkryQH3AWzy2ScBzB3nWsQypj71cCgpLL0Itvr2Y8g
DeUeeEv4yEzThGDejnnptsOf8e0qlH+jQtnMqFkjawftrdsVZPNXv61j6TAmdMB0
1Df4HJVkIvxIcuL31GlY0UGnZjPfSvSldUZFwQCCxnfHpl1s7JdRVdl1I+nALC2M
qVW7TsenJS9qT5VRT2Ntl5iLSSuNBko/nXrcaNFpC/+r025ZBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQTbJ5h09Fw8NdCOl1oauugmDtFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzg2M2U3NWEtNDUyYS0z
ZTA1LWJjYWUtZDI1OTA4MDg1MTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABScLT+yYiLrYCPmYIz2EtdsWYRgKxdWDQmppl0vFauSfkR3zA9R5+oG
GS1QElMhuNgggG0nnlY3KVVS/zZ8fY/YqjVLI4ng1ZU+pIZiRD/yDxbwozJkweqL
5zJgeChXBXYI8b74jJUsPKzKnSgmtBRCrFD62BGFKUGbuZgZleVMhNP0sTY69UVU
9/d0zx1ZwB5BN4gnEJIb6nSj1ZC5pGQkvSuyJU0mIKp5bmMaeBV+IpwTOmzphlR1
PqkqkGoxRs6JMWsXgqcdx5XnMnFjaG+4W4QeiiuqTg7uGWWkx+k7KfzFsZrvzYws
dmWhF9p4Eq159QHHTtbiTkBL6NNPdBQ=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:55 2024 by rpki-client on console-fra.rpki-client.org