Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56e781ff-f749-3604-ab6e-12c6d6b5a61c.roa
File: 56e781ff-f749-3604-ab6e-12c6d6b5a61c.roa (raw, json)
Hash identifier: Sm+M88/lML3aGrj7ua6mRnvwzKnrrKF4i5CjO4P5mWY=
Subject key identifier: 3A:B8:54:50:C0:67:FD:62:DB:C4:EE:03:BF:53:8B:7C:4F:8C:EF:BA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5C56BB8A19A734888F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56e781ff-f749-3604-ab6e-12c6d6b5a61c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.156.240.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5c:56:bb:8a:19:a7:34:88:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=b48fcf3b-5b4d-4e3e-b26b-8e23264a4cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:e5:c5:be:5a:d3:10:58:1e:0c:a6:70:3b:
94:7b:a4:0f:22:51:5c:8f:90:a7:c5:51:fe:29:09:
2f:ed:01:09:f3:9d:7b:c1:87:00:9f:fe:7b:ba:0e:
e1:68:b2:f1:3d:7d:ea:5d:90:cf:77:07:03:58:03:
03:39:e0:08:6f:e8:7e:c9:d5:71:c7:87:42:e7:8f:
c6:de:d6:67:b8:1e:f3:72:e4:62:ae:3d:84:49:75:
ff:c6:7b:6a:12:31:eb:13:fd:cd:ea:15:f3:66:2e:
66:f1:93:b0:a6:66:2c:69:12:bd:67:e3:76:fd:b7:
a7:a1:a3:7c:ab:5b:7b:d1:1a:fd:66:04:74:b0:bd:
aa:24:4e:8e:a2:4c:f6:76:1c:ef:f6:e8:76:62:78:
a4:65:bb:c5:14:60:b2:d5:22:ee:e9:ef:f4:dc:44:
d8:c9:c4:76:4a:c4:19:f3:af:ba:2f:13:1c:5f:5a:
83:18:b3:20:d9:a8:db:9b:07:2a:88:62:7c:4f:f9:
48:12:5c:c9:22:93:5e:e7:64:ee:c5:89:1b:7a:12:
67:97:5a:c2:0a:2f:fe:70:77:1f:db:fb:5a:2f:a9:
0d:0e:2a:90:6d:df:0c:30:3b:63:5b:1d:08:ed:ca:
07:d7:17:c5:61:89:e6:a5:f7:b1:5b:90:48:02:0f:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:54:50:C0:67:FD:62:DB:C4:EE:03:BF:53:8B:7C:4F:8C:EF:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56e781ff-f749-3604-ab6e-12c6d6b5a61c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:20:92:54:d2:76:27:03:4d:5e:91:f3:67:e7:6f:dc:5d:d1:
5d:c2:fb:ad:ab:8a:2d:5b:85:c8:f6:14:72:26:ee:f3:e5:b9:
a5:f5:f7:9d:14:5b:ae:38:c3:2b:59:58:01:0f:0b:bb:52:c0:
2c:56:bd:f5:ae:43:69:ac:62:34:37:ea:d8:3c:c7:b9:b2:92:
d9:d9:8f:b8:75:02:fd:80:2a:a2:ca:ec:aa:87:63:fa:de:ad:
f5:c3:06:30:e6:aa:16:4d:e1:b5:aa:e4:a2:43:25:eb:a2:b0:
21:40:e1:fa:a3:9a:c7:d9:1c:bf:40:62:e6:85:f5:c0:8a:31:
d1:85:ec:e1:97:69:02:35:e9:97:12:db:57:ed:9c:ff:02:f8:
74:e0:c1:a9:97:be:15:06:df:7a:86:75:06:c8:22:a9:08:a3:
d8:54:40:80:b3:2f:ed:89:8c:90:ec:ca:d3:bc:ea:47:04:59:
78:41:9b:66:21:d3:8b:0d:1a:21:fa:0a:26:fe:56:bd:13:c9:
85:89:1f:f1:3a:fd:ef:83:ee:ae:f1:30:f3:47:92:85:89:d0:
77:06:c5:7c:74:3a:88:88:da:4a:7a:03:e4:4e:d3:93:51:b5:
d6:6f:d8:f2:88:63:90:86:3b:a8:65:88:4a:db:bf:80:d3:16:
b6:05:5f:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SlxWu4oZpzSIj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YjQ4ZmNmM2ItNWI0ZC00ZTNlLWIyNmItOGUyMzI2NGE0Y2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE3lxb5a0xBYHgymcDuUe6QPIlFcj5CnxVH+
KQkv7QEJ8517wYcAn/57ug7haLLxPX3qXZDPdwcDWAMDOeAIb+h+ydVxx4dC54/G
3tZnuB7zcuRirj2ESXX/xntqEjHrE/3N6hXzZi5m8ZOwpmYsaRK9Z+N2/benoaN8
q1t70Rr9ZgR0sL2qJE6Ookz2dhzv9uh2YnikZbvFFGCy1SLu6e/03ETYycR2SsQZ
86+6LxMcX1qDGLMg2ajbmwcqiGJ8T/lIElzJIpNe52TuxYkbehJnl1rCCi/+cHcf
2/taL6kNDiqQbd8MMDtjWx0I7coH1xfFYYnmpfexW5BIAg8VFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDq4VFDAZ/1i28TuA79Ti3xPjO+6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTZlNzgxZmYtZjc0OS0z
NjA0LWFiNmUtMTJjNmQ2YjVhNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8gklTSdicDTV6R82fnb9xd0V3C+62rii1bhcj2FHIm7vPluaX1950U
W644wytZWAEPC7tSwCxWvfWuQ2msYjQ36tg8x7myktnZj7h1Av2AKqLK7KqHY/re
rfXDBjDmqhZN4bWq5KJDJeuisCFA4fqjmsfZHL9AYuaF9cCKMdGF7OGXaQI16ZcS
21ftnP8C+HTgwamXvhUG33qGdQbIIqkIo9hUQICzL+2JjJDsytO86kcEWXhBm2Yh
04sNGiH6Cib+Vr0TyYWJH/E6/e+D7q7xMPNHkoWJ0HcGxXx0OoiI2kp6A+RO05NR
tdZv2PKIY5CGO6hliErbv4DTFrYFXxQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:27 2025 by rpki-client