Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b5a8ebb4-3e50-329a-831d-2a9d15bceb34.roa
File: b5a8ebb4-3e50-329a-831d-2a9d15bceb34.roa (raw, json)
Hash identifier: 6y+kkO1u8tIF9jRONc7YqD0hvlPkItGbxn2vaSUUNOI=
Subject key identifier: BB:85:DE:FF:2E:78:5F:5A:A5:02:CF:7B:6B:09:C7:74:A7:5A:16:33
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584692DA19FBC8785F8176056980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b5a8ebb4-3e50-329a-831d-2a9d15bceb34.roa
Signing time: Thu 18 Jul 2024 01:00:24 +0000
ROA not before: Thu 18 Jul 2024 01:00:24 +0000
ROA not after: Wed 16 Oct 2024 01:00:24 +0000
asID: 23470
IP address blocks: 24.235.20.0/24 maxlen: 24
24.235.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 11:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:92:da:19:fb:c8:78:5f:81:76:05:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Jul 18 01:00:24 2024 GMT
Not After : Oct 16 01:00:24 2024 GMT
Subject: CN=33352de8-6cdd-45bb-9d4d-2f280af438cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:a2:62:21:54:98:42:00:22:17:e8:96:a6:
76:2c:c0:86:fa:81:64:ef:33:a9:7a:67:ec:a3:96:
9b:15:40:4d:1f:e4:4c:a4:0e:6c:4d:f1:2c:5e:22:
fc:ba:92:7d:15:98:70:a2:df:f4:b3:c4:ca:9a:5d:
18:29:be:5f:ca:f0:ca:7d:75:58:11:45:7f:be:08:
d2:24:04:9e:71:e2:6c:3f:e2:3b:67:da:ae:d6:bf:
aa:33:3b:eb:fe:8c:0b:1d:92:42:d4:f8:4e:59:3e:
03:85:13:aa:b4:6b:cf:d3:3e:87:2e:4d:97:a7:86:
9d:d2:e0:45:0a:6d:c0:cd:ca:b4:ea:72:4f:61:76:
63:42:71:85:77:57:0f:c5:9d:46:dd:17:ff:12:7c:
cb:44:19:78:37:61:54:74:7e:c0:30:fd:80:b6:43:
85:3e:2c:ec:f8:ab:5d:17:a7:91:13:aa:dc:11:cf:
9c:4b:74:dc:58:4d:cc:ae:e7:d9:f3:0e:ef:22:44:
b3:4a:9f:b5:76:0d:10:38:98:06:ef:f7:19:66:c6:
94:be:42:0a:d2:90:54:49:d7:52:74:a0:c4:63:ab:
0d:c0:d4:5f:ab:b0:0c:ba:38:c7:8b:74:01:b1:1b:
7e:a8:67:af:12:29:19:8a:99:e1:06:ab:d0:77:a4:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:85:DE:FF:2E:78:5F:5A:A5:02:CF:7B:6B:09:C7:74:A7:5A:16:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b5a8ebb4-3e50-329a-831d-2a9d15bceb34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
24.235.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:4b:71:d6:99:59:22:5f:d0:8d:4f:f5:d8:5d:a1:36:5a:e5:
87:47:cb:d5:04:54:b4:8f:cb:66:80:52:4b:cd:43:16:6a:cd:
95:66:98:c3:47:3a:ac:24:35:a5:20:86:10:7f:60:3d:12:8e:
a4:cc:d1:17:1c:f0:73:bf:64:eb:b1:bf:3b:dd:44:79:d6:13:
d0:72:c6:8a:46:8a:c5:1b:66:40:96:7f:97:ff:93:8f:04:3f:
5f:44:7f:ea:40:7b:8b:fc:b4:8b:ac:bf:7a:41:9a:3e:81:0b:
76:11:79:50:44:65:9c:7d:20:42:8a:50:1c:48:f2:60:e1:67:
03:dd:ca:8c:cd:24:d5:fd:a8:75:23:bc:84:26:0a:ff:c1:c1:
13:38:fc:d8:a9:70:50:db:6a:1b:f3:4d:3a:e0:ed:78:4d:ca:
19:a2:b7:65:bd:a6:94:d6:63:42:62:45:84:6b:c6:14:86:b7:
e4:e9:92:d6:e2:ca:0e:96:ae:f2:b4:9f:5d:e5:37:d2:3b:37:
d2:66:05:e0:5b:09:f4:2e:c5:3b:46:22:c3:90:2a:4c:c9:76:
06:db:9e:bb:18:9e:fc:13:72:89:2e:7c:6a:02:47:b2:ec:4c:
ca:e4:ec:fd:57:bd:e8:fa:b0:a9:b9:76:bd:74:99:02:09:0d:
40:01:c1:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaS2hn7yHhfgXYFaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MDcxODAxMDAyNFoXDTI0MTAxNjAxMDAyNFowLzEtMCsGA1UEAxMk
MzMzNTJkZTgtNmNkZC00NWJiLTlkNGQtMmYyODBhZjQzOGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlCiYiFUmEIAIhfolqZ2LMCG+oFk7zOpemfs
o5abFUBNH+RMpA5sTfEsXiL8upJ9FZhwot/0s8TKml0YKb5fyvDKfXVYEUV/vgjS
JASeceJsP+I7Z9qu1r+qMzvr/owLHZJC1PhOWT4DhROqtGvP0z6HLk2Xp4ad0uBF
Cm3Azcq06nJPYXZjQnGFd1cPxZ1G3Rf/EnzLRBl4N2FUdH7AMP2AtkOFPizs+Ktd
F6eRE6rcEc+cS3TcWE3MrufZ8w7vIkSzSp+1dg0QOJgG7/cZZsaUvkIK0pBUSddS
dKDEY6sNwNRfq7AMujjHi3QBsRt+qGevEikZipnhBqvQd6Q8RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLuF3v8ueF9apQLPe2sJx3SnWhYzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYjVhOGViYjQtM2U1MC0z
MjlhLTgzMWQtMmE5ZDE1YmNlYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGOsUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdLcdaZWSJf0I1P9dhdoTZa5YdHy9UEVLSPy2aAUkvNQxZqzZVmmMNH
OqwkNaUghhB/YD0SjqTM0Rcc8HO/ZOuxvzvdRHnWE9ByxopGisUbZkCWf5f/k48E
P19Ef+pAe4v8tIusv3pBmj6BC3YReVBEZZx9IEKKUBxI8mDhZwPdyozNJNX9qHUj
vIQmCv/BwRM4/NipcFDbahvzTTrg7XhNyhmit2W9ppTWY0JiRYRrxhSGt+Tpktbi
yg6WrvK0n13lN9I7N9JmBeBbCfQuxTtGIsOQKkzJdgbbnrsYnvwTcokufGoCR7Ls
TMrk7P1Xvej6sKm5dr10mQIJDUABwXE=
-----END CERTIFICATE-----
Generated at Tue Sep 3 14:51:06 2024 by rpki-client on console-ams.rpki-client.org