Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc1ad1d2-0e3b-3092-a151-44e2642cfb82.roa
File: bc1ad1d2-0e3b-3092-a151-44e2642cfb82.roa (raw, json)
Hash identifier: lIFSvzO7tXWn0chtULlIdf96X4FGTl92qF8JphRJJZ4=
Subject key identifier: A2:4B:49:AA:40:B0:D8:ED:E8:A8:E6:3D:43:7A:E4:36:77:F4:C9:9E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A610207469F361D54E1E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc1ad1d2-0e3b-3092-a151-44e2642cfb82.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.154.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:61:02:07:46:9f:36:1d:54:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=804e454e-94f2-4ff7-a1ee-2d68d2ae21af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:55:28:68:a6:5c:22:57:f1:16:f6:15:4b:
ae:04:7d:8c:b0:83:e1:89:14:e2:06:65:d0:58:99:
44:ae:06:d2:70:ff:4c:b4:71:07:9a:9b:ed:96:47:
c6:e2:b4:ad:ef:b2:87:df:1f:39:51:c5:1f:ed:4f:
a6:e8:40:f1:db:c3:ad:8d:bb:45:7a:dd:8a:90:f5:
fc:b9:73:b5:e5:c8:e9:80:72:40:d2:db:64:f9:d2:
c7:21:9d:95:77:11:99:12:81:1d:0c:5f:2c:d4:2c:
53:49:f4:20:c5:0d:0a:50:1b:4c:27:88:21:e0:86:
f2:ec:14:02:a3:f3:47:75:04:48:39:05:6a:69:49:
35:6a:0d:d3:5d:a5:60:27:6c:5b:f0:55:7c:44:d0:
07:fe:7f:bc:39:c3:e0:30:c2:a5:b2:16:73:52:46:
03:00:33:16:92:d1:fb:a5:27:7c:a6:2a:46:83:50:
1b:d4:1a:66:f7:8d:c7:13:36:77:69:1e:4e:a8:27:
0d:44:d5:53:dd:2e:05:47:9b:7d:3e:0f:01:49:df:
32:a5:ce:01:9f:46:ad:4a:c3:77:2e:05:a2:55:45:
82:d1:de:5d:b7:68:c7:df:2b:40:1e:7f:f0:fb:32:
43:14:2d:66:17:ba:09:87:a0:63:2e:8d:dd:c7:ca:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:49:AA:40:B0:D8:ED:E8:A8:E6:3D:43:7A:E4:36:77:F4:C9:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc1ad1d2-0e3b-3092-a151-44e2642cfb82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:09:65:74:1e:b7:47:76:20:ff:3f:33:32:de:1f:2e:b6:12:
7f:89:a9:57:ef:96:52:42:c3:4b:83:ce:45:63:e8:34:77:ca:
01:62:93:29:26:59:2f:9b:b5:50:75:68:e2:cd:53:99:d7:f1:
d4:d8:ff:c4:ef:5a:d0:8f:43:d4:94:59:63:94:87:6a:bd:ef:
09:5b:1d:1f:86:4c:49:36:40:7b:19:9c:73:6d:f6:f6:d1:59:
5f:e6:01:21:67:d7:bd:1a:3f:dd:14:79:b8:a7:9e:72:16:77:
76:aa:4d:78:fd:ff:d3:85:63:a1:3d:dc:c1:66:53:41:00:23:
a1:60:0d:3a:e5:d2:0e:d1:a4:0b:10:08:82:a7:4c:13:a4:7d:
07:cf:b5:2c:c1:cd:be:10:ce:e4:fe:b2:0f:5c:04:95:40:2a:
79:55:77:67:72:73:ff:f6:f0:18:65:15:28:ce:92:2c:85:7a:
e1:71:ba:ec:09:8d:b1:18:59:51:43:bf:05:9b:2f:c8:fe:13:
5b:b1:2c:0a:ba:29:a1:1f:b2:ce:43:19:af:c8:f0:dd:8b:5e:
0c:96:84:5e:c5:f4:b8:2f:6d:6a:af:57:6f:b3:d7:ef:ac:e6:
58:b5:a7:9c:c0:c9:13:4d:32:f2:92:b0:73:3b:00:e3:c5:d0:
32:65:d7:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SmECB0afNh1U4eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ODA0ZTQ1NGUtOTRmMi00ZmY3LWExZWUtMmQ2OGQyYWUyMWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWFVKGimXCJX8Rb2FUuuBH2MsIPhiRTiBmXQ
WJlErgbScP9MtHEHmpvtlkfG4rSt77KH3x85UcUf7U+m6EDx28OtjbtFet2KkPX8
uXO15cjpgHJA0ttk+dLHIZ2VdxGZEoEdDF8s1CxTSfQgxQ0KUBtMJ4gh4Iby7BQC
o/NHdQRIOQVqaUk1ag3TXaVgJ2xb8FV8RNAH/n+8OcPgMMKlshZzUkYDADMWktH7
pSd8pipGg1Ab1Bpm943HEzZ3aR5OqCcNRNVT3S4FR5t9Pg8BSd8ypc4Bn0atSsN3
LgWiVUWC0d5dt2jH3ytAHn/w+zJDFC1mF7oJh6BjLo3dx8oX5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJLSapAsNjt6KjmPUN65DZ39MmeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmMxYWQxZDItMGUzYi0z
MDkyLWExNTEtNDRlMjY0MmNmYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYJZXQet0d2IP8/MzLeHy62En+JqVfvllJCw0uDzkVj6DR3ygFikykm
WS+btVB1aOLNU5nX8dTY/8TvWtCPQ9SUWWOUh2q97wlbHR+GTEk2QHsZnHNt9vbR
WV/mASFn170aP90UebinnnIWd3aqTXj9/9OFY6E93MFmU0EAI6FgDTrl0g7RpAsQ
CIKnTBOkfQfPtSzBzb4QzuT+sg9cBJVAKnlVd2dyc//28BhlFSjOkiyFeuFxuuwJ
jbEYWVFDvwWbL8j+E1uxLAq6KaEfss5DGa/I8N2LXgyWhF7F9LgvbWqvV2+z1++s
5li1p5zAyRNNMvKSsHM7AOPF0DJl17g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:28 2025 by rpki-client