Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/461be41e-e573-3ee2-a870-df9d3babb7d3.roa
File: 461be41e-e573-3ee2-a870-df9d3babb7d3.roa (raw, json)
Hash identifier: 23KNM+chI1VgKK0xxXxgsTcMuz7iYrM15XYFuxTE0p0=
Subject key identifier: E6:7F:AB:FF:19:C6:14:A7:08:93:A4:83:9C:FF:CF:18:F4:A6:DD:4C
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A0AA9424BE4827AABF2C840
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/461be41e-e573-3ee2-a870-df9d3babb7d3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:a9:42:4b:e4:82:7a:ab:f2:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=00002007-768e-4432-9112-f165842eb4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:b5:41:10:cc:f0:de:0a:5f:38:66:a7:65:
33:3e:77:fd:02:83:67:5e:8a:58:bc:7a:50:e2:a2:
cf:1a:62:fd:a2:53:27:7f:f5:03:09:31:8e:db:00:
f6:b7:01:29:62:02:1e:20:16:d7:a8:95:21:48:4d:
e3:c7:45:c7:81:db:a5:87:3e:eb:87:db:b8:28:e7:
ea:2d:2e:cc:25:99:a6:7a:8d:95:e7:1c:19:93:e9:
f3:17:c5:8c:7f:42:01:b6:1a:98:06:e9:f9:80:d1:
65:9b:08:36:39:71:f0:28:b4:eb:81:78:66:08:b6:
03:b4:5e:59:cf:44:41:a8:a0:37:22:f5:2d:a4:68:
44:23:6b:d9:01:a1:a3:15:03:7b:71:42:5d:77:93:
26:7d:2f:f9:10:af:08:38:25:29:e8:4e:0b:24:aa:
1a:76:b6:f7:b7:be:e5:95:d7:10:bf:89:d9:4b:0d:
93:58:58:52:a2:a0:91:ed:10:49:6f:3d:a9:3e:18:
54:52:e0:ba:fd:32:4b:2e:06:75:fd:a4:c8:02:46:
90:c2:cf:6a:b8:e0:19:79:8a:c8:a2:0b:62:7f:08:
cf:03:5e:dd:c0:d2:0b:bf:96:f0:4f:d0:aa:28:34:
47:3b:aa:a0:c2:31:8d:eb:5b:6e:ea:5c:5e:af:b3:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:AB:FF:19:C6:14:A7:08:93:A4:83:9C:FF:CF:18:F4:A6:DD:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/461be41e-e573-3ee2-a870-df9d3babb7d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d4:ad:f9:25:01:33:ff:fb:a0:4b:01:6b:df:ab:c3:d2:c1:
16:7f:2e:8f:5a:52:d4:dd:4d:0b:81:18:d2:17:6f:5a:99:46:
9e:35:8e:d5:fd:b8:73:93:a6:56:5b:a3:57:27:d0:62:cb:b5:
60:9c:87:79:e2:26:2c:e4:53:94:aa:99:cf:44:74:37:62:a3:
82:3a:d4:b3:f4:5d:f5:58:04:0f:6f:25:81:7f:9a:12:70:9b:
b5:f7:db:d8:2c:7f:9e:f7:49:cd:d4:e5:b9:5f:13:bb:d9:6d:
70:e9:5c:a5:83:90:38:07:80:05:c7:62:df:44:00:d7:dd:38:
eb:85:92:d1:a6:2b:6f:53:ea:89:22:a0:ab:6b:bc:cf:25:62:
3e:f9:f6:a2:82:96:56:f8:da:0f:33:9d:f6:91:a1:37:8f:de:
e0:66:1e:4c:70:31:4b:e0:ca:2f:ee:46:d5:8f:b0:d2:a3:b7:
ac:05:30:8e:99:b9:18:16:d8:e1:e7:28:07:f8:bb:40:fe:06:
08:11:3c:2c:70:0d:7d:22:43:ab:80:ab:9e:a7:83:55:a5:fa:
0a:1a:5b:7c:31:e6:ce:30:52:7f:15:7c:22:b8:6f:cd:25:31:
67:6c:1f:22:17:bc:c3:af:44:9f:92:5e:81:e0:86:b1:7c:a0:
db:d7:34:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCqlCS+SCeqvyyEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDAwMDIwMDctNzY4ZS00NDMyLTkxMTItZjE2NTg0MmViNGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwya1QRDM8N4KXzhmp2UzPnf9AoNnXopYvHpQ
4qLPGmL9olMnf/UDCTGO2wD2twEpYgIeIBbXqJUhSE3jx0XHgdulhz7rh9u4KOfq
LS7MJZmmeo2V5xwZk+nzF8WMf0IBthqYBun5gNFlmwg2OXHwKLTrgXhmCLYDtF5Z
z0RBqKA3IvUtpGhEI2vZAaGjFQN7cUJdd5MmfS/5EK8IOCUp6E4LJKoadrb3t77l
ldcQv4nZSw2TWFhSoqCR7RBJbz2pPhhUUuC6/TJLLgZ1/aTIAkaQws9quOAZeYrI
ogtifwjPA17dwNILv5bwT9CqKDRHO6qgwjGN61tu6lxer7MjvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZ/q/8ZxhSnCJOkg5z/zxj0pt1MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNDYxYmU0MWUtZTU3My0z
ZWUyLWE4NzAtZGY5ZDNiYWJiN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvUrfklATP/+6BLAWvfq8PSwRZ/Lo9aUtTdTQuBGNIXb1qZRp41jtX9
uHOTplZbo1cn0GLLtWCch3niJizkU5Sqmc9EdDdio4I61LP0XfVYBA9vJYF/mhJw
m7X329gsf573Sc3U5blfE7vZbXDpXKWDkDgHgAXHYt9EANfdOOuFktGmK29T6oki
oKtrvM8lYj759qKCllb42g8znfaRoTeP3uBmHkxwMUvgyi/uRtWPsNKjt6wFMI6Z
uRgW2OHnKAf4u0D+BggRPCxwDX0iQ6uAq56ng1Wl+goaW3wx5s4wUn8VfCK4b80l
MWdsHyIXvMOvRJ+SXoHghrF8oNvXNGg=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org