Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4de0ab53-6b3c-32de-b9c8-d091087441e1.roa
File: 4de0ab53-6b3c-32de-b9c8-d091087441e1.roa (raw, json)
Hash identifier: FGMp6vyTEAv28lxJ7wvk/HR+zcZKRe4LdeAIZMyZIH0=
Subject key identifier: 95:46:D0:84:FF:02:8F:E6:7A:12:93:03:FC:73:84:FA:25:65:7A:4B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7A9E39E5F92472476480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4de0ab53-6b3c-32de-b9c8-d091087441e1.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.167.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7a:9e:39:e5:f9:24:72:47:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=665d96ea-4246-4444-be30-bdedf060093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:2c:df:41:84:e4:7f:23:18:fd:f2:70:75:
3d:30:76:d8:e2:f1:f8:ac:64:46:a0:0f:62:b3:62:
39:d2:15:a8:09:3d:0c:fe:81:ac:51:9d:e1:cc:2c:
0f:94:a4:35:43:80:1b:8f:59:35:d1:49:3e:e1:09:
37:96:5b:41:53:02:ed:2a:7c:13:1f:cd:c3:c1:89:
26:52:1d:aa:64:4f:6d:20:4a:67:7b:c3:2b:60:7f:
7a:7b:1f:f0:b5:6c:28:fb:ae:7a:5b:20:2b:a1:f3:
21:74:f9:b0:e4:5b:1f:41:3b:75:97:33:07:c6:83:
9e:77:4d:31:9e:cb:0d:e3:6d:2f:cc:39:b1:b0:5b:
5d:31:a7:49:bd:7d:b9:38:8d:a4:e5:1e:a3:40:93:
d6:29:9e:76:85:53:be:2a:4b:26:84:dd:c3:04:4e:
f1:63:a9:db:fd:13:cb:70:d4:cf:37:43:cd:02:7e:
5c:a4:db:f4:ad:e8:1b:a7:e8:65:75:25:1b:1d:02:
f3:1f:31:51:e4:55:d0:36:78:43:30:ea:d0:07:a7:
3b:73:8e:9a:36:d4:9c:f5:a5:44:1f:b6:34:32:60:
1e:2d:95:c6:90:ab:b0:82:4f:a9:62:94:d0:6c:d0:
98:bf:07:d2:dc:b3:50:aa:0d:4a:c8:e2:ed:2d:8c:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:D0:84:FF:02:8F:E6:7A:12:93:03:FC:73:84:FA:25:65:7A:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4de0ab53-6b3c-32de-b9c8-d091087441e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:2c:56:87:1f:f4:9d:98:d5:2f:f8:14:5d:7e:e2:29:10:5b:
58:ea:6d:22:f2:d5:97:96:a0:09:82:f2:be:08:ad:00:db:43:
93:7c:45:3b:b9:c0:bc:9a:96:a5:f2:4c:9d:17:ca:0c:92:f5:
4b:24:61:76:5c:3c:7c:c8:2e:e0:7b:ff:af:d2:0c:02:98:57:
1a:fd:c4:66:62:4a:46:57:ad:ed:9f:73:59:4f:75:6c:4f:c7:
77:2f:b5:80:46:3b:a3:0c:e8:16:56:19:ab:fe:05:91:e3:5f:
fb:c8:c6:3a:c2:d5:65:f2:7b:50:51:43:be:91:39:69:74:42:
a3:fe:06:40:61:14:e5:3f:17:39:a6:a6:83:48:cb:a0:d0:b5:
e8:9e:08:94:20:f6:aa:60:54:33:ee:74:68:11:ce:3a:0f:1b:
a0:2d:63:bc:87:0b:e0:31:1b:0d:db:e7:8c:b6:16:ba:de:44:
98:a6:e5:f6:ab:d8:41:fb:29:de:f4:c3:7c:82:3b:3c:9f:5c:
9e:6c:04:c5:b9:66:7d:8a:00:4e:c4:1f:d6:90:a0:62:7e:aa:
fd:b1:bf:60:40:eb:c6:12:aa:86:e2:0f:fc:cc:ae:58:5e:f2:
5c:13:41:61:4c:de:73:88:b0:1d:ba:2d:e1:4c:e9:f2:b3:1f:
d4:ab:92:9b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEf/SnqeOeX5JHJHZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
NjY1ZDk2ZWEtNDI0Ni00NDQ0LWJlMzAtYmRlZGYwNjAwOTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+0s30GE5H8jGP3ycHU9MHbY4vH4rGRGoA9i
s2I50hWoCT0M/oGsUZ3hzCwPlKQ1Q4Abj1k10Uk+4Qk3lltBUwLtKnwTH83DwYkm
Uh2qZE9tIEpne8MrYH96ex/wtWwo+656WyArofMhdPmw5FsfQTt1lzMHxoOed00x
nssN420vzDmxsFtdMadJvX25OI2k5R6jQJPWKZ52hVO+KksmhN3DBE7xY6nb/RPL
cNTPN0PNAn5cpNv0regbp+hldSUbHQLzHzFR5FXQNnhDMOrQB6c7c46aNtSc9aVE
H7Y0MmAeLZXGkKuwgk+pYpTQbNCYvwfS3LNQqg1KyOLtLYw6swIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJVG0IT/Ao/mehKTA/xzhPolZXpLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRlMGFiNTMtNmIzYy0z
MmRlLWI5YzgtZDA5MTA4NzQ0MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmyxWhx/0nZjVL/gUXX7iKRBbWOptIvLVl5agCYLyvgitANtDk3xFO7nA
vJqWpfJMnRfKDJL1SyRhdlw8fMgu4Hv/r9IMAphXGv3EZmJKRlet7Z9zWU91bE/H
dy+1gEY7owzoFlYZq/4FkeNf+8jGOsLVZfJ7UFFDvpE5aXRCo/4GQGEU5T8XOaam
g0jLoNC16J4IlCD2qmBUM+50aBHOOg8boC1jvIcL4DEbDdvnjLYWut5EmKbl9qvY
Qfsp3vTDfII7PJ9cnmwExblmfYoATsQf1pCgYn6q/bG/YEDrxhKqhuIP/MyuWF7y
XBNBYUzec4iwHbot4Uzp8rMf1KuSmw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:48 2025 by rpki-client