Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6793e914-b666-37e6-99f2-2d669cd5f77d.roa
File: 6793e914-b666-37e6-99f2-2d669cd5f77d.roa (raw, json)
Hash identifier: vlAJNuTdeK0ltEe8sL0+W3RFFoaTGLrDF4Vd7BVdAEc=
Subject key identifier: C7:80:97:6D:8D:B3:45:9A:35:C6:23:8E:45:DC:56:34:DA:23:F0:3F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5DADE1134FAAB825F080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6793e914-b666-37e6-99f2-2d669cd5f77d.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.86.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5d:ad:e1:13:4f:aa:b8:25:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=aadd3ff6-c6b3-4ae5-b572-a75034bd15a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:85:2c:43:84:89:18:7c:78:54:00:3d:42:
93:80:02:d8:f4:30:c7:e1:15:ad:e6:7b:d0:d8:ce:
b7:26:e1:5b:67:2c:fc:73:39:11:3e:c7:ee:4c:90:
4c:bc:28:c5:93:4c:07:db:c7:2e:55:6d:7e:c1:c2:
ae:96:2c:a3:d1:aa:e8:5d:0c:a7:3b:f5:15:f2:26:
0a:e8:aa:e9:50:4c:89:40:fd:27:8b:7c:89:38:5f:
f0:d3:d7:c5:cb:86:ab:e5:da:9d:dc:7b:55:e8:8b:
56:d2:fe:d5:b9:b1:bb:3c:7c:ae:84:9d:f3:a5:70:
3f:56:17:af:a1:ab:1c:12:7b:48:ef:66:12:4c:ca:
5f:81:94:e2:c7:95:4c:9e:41:31:5f:d6:2f:9b:20:
e1:67:42:6a:13:da:14:8f:e8:28:c1:e7:9a:30:50:
f3:c3:ba:64:5b:58:ec:70:5c:3d:be:31:d9:76:aa:
d4:70:33:5a:c6:99:4e:a5:2d:bb:4a:91:dd:06:f0:
95:72:c1:67:d1:52:7f:04:7a:14:66:e7:f9:ac:70:
fa:71:1c:37:bb:72:a7:34:50:19:da:9a:6c:63:b4:
17:3d:41:1c:28:19:d5:74:46:e4:19:3d:40:ff:5b:
4c:8e:c2:4b:e4:d4:2f:49:fe:91:c5:87:d4:50:72:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:97:6D:8D:B3:45:9A:35:C6:23:8E:45:DC:56:34:DA:23:F0:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6793e914-b666-37e6-99f2-2d669cd5f77d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:f5:e8:27:b7:37:77:f0:3d:42:72:be:9a:f0:9b:e5:b2:03:
41:1d:d2:83:7b:bc:ef:ff:db:35:a1:e2:50:52:58:f9:3f:3a:
f5:e6:20:ca:69:86:5c:8d:16:31:4f:5e:43:34:a5:25:20:e2:
47:cf:38:6c:47:cd:e1:5d:fe:c4:d4:ed:78:7d:b5:5e:9f:67:
f2:a4:55:e7:c3:15:d7:70:7e:16:45:8e:ba:75:e7:ac:92:d3:
90:84:96:48:4b:20:7a:81:db:75:30:df:e7:89:28:fe:94:a8:
b2:88:10:21:f4:84:6a:05:f3:ad:06:fd:22:42:80:2e:83:c3:
b1:b8:19:40:a2:82:83:16:29:98:f0:98:6e:1a:f4:be:f8:76:
69:5f:0a:fd:12:fa:65:89:2f:eb:a6:d8:ac:98:ba:6e:b1:1b:
47:72:c4:e7:1f:4d:be:53:02:59:5c:ae:97:75:58:0a:d9:bd:
a8:f4:16:e9:f1:ea:48:f4:f8:7a:f2:2d:9e:f1:21:10:dd:f5:
bc:28:37:9c:b1:84:18:fe:ec:55:bb:f7:c6:cf:87:72:78:01:
2b:13:99:77:e8:60:a9:17:15:0c:2b:4d:c1:0b:93:c8:00:3b:
34:e6:98:fa:5f:2f:73:d0:9b:58:7f:6b:f0:c3:41:6f:e2:a3:
b5:1f:a5:98
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEf/Sl2t4RNPqrgl8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YWFkZDNmZjYtYzZiMy00YWU1LWI1NzItYTc1MDM0YmQxNWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc6FLEOEiRh8eFQAPUKTgALY9DDH4RWt5nvQ
2M63JuFbZyz8czkRPsfuTJBMvCjFk0wH28cuVW1+wcKuliyj0aroXQynO/UV8iYK
6KrpUEyJQP0ni3yJOF/w09fFy4ar5dqd3HtV6ItW0v7VubG7PHyuhJ3zpXA/Vhev
oascEntI72YSTMpfgZTix5VMnkExX9YvmyDhZ0JqE9oUj+goweeaMFDzw7pkW1js
cFw9vjHZdqrUcDNaxplOpS27SpHdBvCVcsFn0VJ/BHoUZuf5rHD6cRw3u3KnNFAZ
2ppsY7QXPUEcKBnVdEbkGT1A/1tMjsJL5NQvSf6RxYfUUHKTxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMeAl22Ns0WaNcYjjkXcVjTaI/A/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjc5M2U5MTQtYjY2Ni0z
N2U2LTk5ZjItMmQ2NjljZDVmNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIlYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg/XoJ7c3d/A9QnK+mvCb5bIDQR3Sg3u87//bNaHiUFJY+T869eYgymmG
XI0WMU9eQzSlJSDiR884bEfN4V3+xNTteH21Xp9n8qRV58MV13B+FkWOunXnrJLT
kISWSEsgeoHbdTDf54ko/pSosogQIfSEagXzrQb9IkKALoPDsbgZQKKCgxYpmPCY
bhr0vvh2aV8K/RL6ZYkv66bYrJi6brEbR3LE5x9NvlMCWVyul3VYCtm9qPQW6fHq
SPT4evItnvEhEN31vCg3nLGEGP7sVbv3xs+HcngBKxOZd+hgqRcVDCtNwQuTyAA7
NOaY+l8vc9CbWH9r8MNBb+KjtR+lmA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:02 2025 by rpki-client