Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/db57d04e-b138-3881-a48a-ceac3741c4aa.roa
File: db57d04e-b138-3881-a48a-ceac3741c4aa.roa (raw, json)
Hash identifier: Jw96+qEAMA5h7DJQHUgNykhHeVHFs/sqKRokWsFHpfY=
Subject key identifier: BB:5A:F3:0A:98:19:E0:E1:78:BD:D7:3C:0C:20:98:8A:81:D4:53:0F
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A00C3C0FB547338942E1780
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/db57d04e-b138-3881-a48a-ceac3741c4aa.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.110.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:00:c3:c0:fb:54:73:38:94:2e:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=05985ef7-22d0-497d-a78a-238bc5758eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:87:1c:17:ec:b5:2e:38:34:d4:9d:be:4d:
a0:28:05:a1:3a:72:db:94:43:5a:1a:68:a1:f2:f1:
9b:8c:e9:f2:ef:f6:26:50:4c:22:f2:01:bf:d4:71:
c5:d2:06:05:53:12:30:3a:e9:db:a4:46:b4:b0:c3:
5b:f0:ea:11:da:a4:3e:b4:9c:20:73:26:8d:42:b5:
b3:bb:28:4c:35:e0:9c:86:44:6b:ee:fa:cf:50:3e:
d1:06:f2:a5:a9:84:78:bc:4b:86:73:e9:43:a5:3c:
f6:b7:2c:54:da:6b:7d:37:4e:a4:d9:43:fc:8a:0c:
ae:3c:b9:f5:9f:00:a8:a0:f8:7e:04:bc:2c:6e:e1:
0c:5f:a3:a5:4b:99:4d:12:6c:af:30:25:37:8b:21:
9c:ef:56:51:47:ef:09:99:43:49:82:6c:4e:1d:d2:
da:bf:1f:73:9c:ba:0d:a9:0f:b0:4c:e1:5d:7b:c5:
58:c3:37:eb:25:c7:3c:75:46:1d:3e:aa:27:f7:93:
5b:03:03:ef:d6:2c:2a:27:b2:24:0f:1a:ae:48:ec:
49:1b:12:79:2e:ba:7b:0a:c7:63:16:e0:03:ae:0b:
75:54:b8:60:24:34:80:5d:00:36:d1:2b:e0:61:a3:
a3:b5:0c:f2:d8:83:28:4a:c0:7b:62:66:b9:67:2a:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:F3:0A:98:19:E0:E1:78:BD:D7:3C:0C:20:98:8A:81:D4:53:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/db57d04e-b138-3881-a48a-ceac3741c4aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
172.110.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:db:6e:d5:d0:6f:da:26:ae:75:33:7a:94:44:99:0b:5b:51:
b1:e0:96:a8:6b:70:9d:25:32:23:3e:2b:8d:6e:8e:04:dd:fa:
c2:92:b0:02:50:77:fd:01:94:3d:50:33:c8:d3:5d:48:76:16:
95:99:fd:53:27:6d:39:91:06:23:4f:64:3c:3d:0b:62:cb:36:
1d:9b:b1:15:b7:34:78:ab:be:df:8f:8c:3d:18:a9:82:34:f6:
d8:1a:a1:50:ce:c5:75:9b:82:76:87:b6:45:76:e6:54:bb:65:
6f:c6:1a:bb:f4:67:ca:70:98:c1:95:ed:c9:aa:eb:47:44:0e:
03:94:7c:5c:04:e1:ab:ed:e8:e7:07:c4:d0:fb:92:25:0c:1f:
ff:c7:05:a5:93:89:22:ed:9d:19:f2:61:0f:de:ea:25:69:c8:
91:be:96:4f:43:dd:97:18:02:e6:a9:f6:bc:ae:90:79:0e:1e:
a2:26:9e:aa:94:c1:87:78:91:42:83:a2:36:f2:06:55:e5:be:
ae:d5:02:0d:2d:2e:77:c5:79:9e:bd:38:ca:6a:6e:95:71:6c:
25:81:7d:2b:05:43:48:66:5d:e1:11:66:6e:52:c0:8e:ff:6b:
de:24:98:34:ba:1c:6f:94:3b:d8:19:e3:c0:25:7a:38:bf:96:
db:bf:33:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKAMPA+1RzOJQuF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDU5ODVlZjctMjJkMC00OTdkLWE3OGEtMjM4YmM1NzU4ZWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDOHHBfstS44NNSdvk2gKAWhOnLblENaGmih
8vGbjOny7/YmUEwi8gG/1HHF0gYFUxIwOunbpEa0sMNb8OoR2qQ+tJwgcyaNQrWz
uyhMNeCchkRr7vrPUD7RBvKlqYR4vEuGc+lDpTz2tyxU2mt9N06k2UP8igyuPLn1
nwCooPh+BLwsbuEMX6OlS5lNEmyvMCU3iyGc71ZRR+8JmUNJgmxOHdLavx9znLoN
qQ+wTOFde8VYwzfrJcc8dUYdPqon95NbAwPv1iwqJ7IkDxquSOxJGxJ5Lrp7Csdj
FuADrgt1VLhgJDSAXQA20SvgYaOjtQzy2IMoSsB7Yma5ZyoIjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLta8wqYGeDheL3XPAwgmIqB1FMPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZGI1N2QwNGUtYjEzOC0z
ODgxLWE0OGEtY2VhYzM3NDFjNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrG4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDbbtXQb9omrnUzepREmQtbUbHglqhrcJ0lMiM+K41ujgTd+sKSsAJQ
d/0BlD1QM8jTXUh2FpWZ/VMnbTmRBiNPZDw9C2LLNh2bsRW3NHirvt+PjD0YqYI0
9tgaoVDOxXWbgnaHtkV25lS7ZW/GGrv0Z8pwmMGV7cmq60dEDgOUfFwE4avt6OcH
xND7kiUMH//HBaWTiSLtnRnyYQ/e6iVpyJG+lk9D3ZcYAuap9ryukHkOHqImnqqU
wYd4kUKDojbyBlXlvq7VAg0tLnfFeZ69OMpqbpVxbCWBfSsFQ0hmXeERZm5SwI7/
a94kmDS6HG+UO9gZ48Aleji/ltu/M8c=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org