Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/ac7aa5df-d1d1-35d0-a00d-095652940da5.roa
File: ac7aa5df-d1d1-35d0-a00d-095652940da5.roa (raw, json)
Hash identifier: 1xS5v5SVCfdvT1i9o916U8rPV3cC2psTLMuRpGfye5U=
Subject key identifier: 9A:FB:A8:9D:E2:C1:7F:8B:21:93:DA:DA:29:B1:B7:4B:53:C4:01:54
Certificate issuer: /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial: 010D0C9F432858435D7AC489459F9197AF067480
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/ac7aa5df-d1d1-35d0-a00d-095652940da5.roa
Signing time: Wed 27 Sep 2023 19:49:44 +0000
ROA not before: Wed 27 Sep 2023 19:49:44 +0000
ROA not after: Tue 26 Dec 2023 20:49:44 +0000
asID: 393384
IP address blocks: 162.220.117.0/24 maxlen: 24
162.220.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5d:7a:c4:89:45:9f:91:97:af:06:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Validity
Not Before: Sep 27 19:49:44 2023 GMT
Not After : Dec 26 20:49:44 2023 GMT
Subject: CN=265ce1c5-517f-44d1-91f6-b73b6bf4b7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:6d:7e:55:6b:06:a0:e4:e5:55:75:79:2e:
c5:71:5d:bf:78:cd:bd:8d:98:bc:13:a1:06:36:42:
73:a4:17:b6:20:5b:12:d3:2e:77:c6:68:8f:bc:c5:
6a:8a:df:dc:46:8d:a7:97:e8:bf:2a:ae:ce:e7:f5:
56:44:94:f3:13:29:c7:54:8a:ec:4b:7c:16:7a:cb:
e2:20:15:b9:de:b5:e8:09:49:38:95:42:67:30:a9:
52:5c:7b:ef:7a:64:d1:e8:fd:db:51:e9:0d:3d:9c:
2f:30:36:99:34:90:af:f4:e2:b5:c6:47:39:fd:22:
67:74:dd:a7:ab:5b:66:ee:3a:ff:09:c9:69:15:87:
90:e5:22:06:f0:ac:2d:57:d2:81:47:e8:9a:d0:9f:
ae:b0:6c:1e:4a:54:53:03:1a:8e:51:79:8c:04:86:
da:2e:12:97:64:36:ae:e5:5f:3f:28:69:2c:b7:88:
23:92:fc:ad:e6:5f:6c:08:56:af:0a:30:5f:3d:3c:
82:d1:e6:6b:26:0b:b2:f2:46:1f:43:34:7f:ac:1b:
43:84:c6:a0:3c:fa:17:3b:e3:c1:9a:6e:42:16:70:
b8:af:2d:55:7f:81:d3:90:de:4e:a8:46:0b:9e:51:
2f:25:79:10:e8:0d:0f:6d:dc:f3:4f:a7:1d:a3:3f:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:A8:9D:E2:C1:7F:8B:21:93:DA:DA:29:B1:B7:4B:53:C4:01:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/ac7aa5df-d1d1-35d0-a00d-095652940da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl
X509v3 Authority Key Identifier:
keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
sbgp-ipAddrBlock: critical
IPv4:
162.220.117.0-162.220.118.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:79:f7:b6:44:33:45:95:7a:31:9d:49:66:f7:ec:49:a3:75:
67:ff:40:cf:fc:0a:53:0f:f8:b8:6d:b8:83:27:5d:61:78:c7:
95:f2:ce:87:64:2c:f0:c5:79:61:51:37:db:2c:c9:4e:4a:7c:
36:53:6a:b1:e5:d0:7a:bc:1d:0d:77:38:d8:32:b5:d9:44:bf:
b6:ae:ad:12:26:ba:68:1f:b1:78:48:d7:63:8c:f2:fa:f2:81:
9b:6f:7e:bf:61:74:56:5e:9f:6c:51:3c:a7:83:e5:1d:10:d2:
8e:66:d7:22:ad:d1:0f:43:5d:7e:09:97:1d:a1:f4:d0:3b:7c:
e9:94:37:c2:a9:35:c0:81:cb:c7:30:0e:ae:09:2e:68:76:15:
82:3c:b3:f1:2f:0a:4d:7d:7e:6b:d4:1f:a6:d3:5b:3d:2e:e8:
e8:4e:95:86:1b:ed:b2:46:6f:fd:5b:fc:12:d0:35:87:be:95:
65:ad:33:b8:6d:12:1a:bf:a6:47:0c:3c:e5:14:6d:0c:e0:d1:
1a:09:11:16:61:31:11:19:45:c8:c8:01:7f:7d:d6:85:ab:59:
27:0e:b9:99:60:71:b9:89:72:80:a2:68:de:87:ea:a9:f4:35:
22:37:7d:d7:54:e6:aa:28:d6:36:4b:f0:85:50:60:1e:db:f0:
8c:96:0a:37
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWENdesSJRZ+Rl68GdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzc3OWFkNWQtNWNhNy00YzIzLTkyOGYtMDkxZTBlMWEz
ZjkzMB4XDTIzMDkyNzE5NDk0NFoXDTIzMTIyNjIwNDk0NFowLzEtMCsGA1UEAxMk
MjY1Y2UxYzUtNTE3Zi00NGQxLTkxZjYtYjczYjZiZjRiN2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ixtflVrBqDk5VV1eS7FcV2/eM29jZi8E6EG
NkJzpBe2IFsS0y53xmiPvMVqit/cRo2nl+i/Kq7O5/VWRJTzEynHVIrsS3wWesvi
IBW53rXoCUk4lUJnMKlSXHvvemTR6P3bUekNPZwvMDaZNJCv9OK1xkc5/SJndN2n
q1tm7jr/CclpFYeQ5SIG8KwtV9KBR+ia0J+usGweSlRTAxqOUXmMBIbaLhKXZDau
5V8/KGkst4gjkvyt5l9sCFavCjBfPTyC0eZrJguy8kYfQzR/rBtDhMagPPoXO+PB
mm5CFnC4ry1Vf4HTkN5OqEYLnlEvJXkQ6A0PbdzzT6cdoz+TeQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJr7qJ3iwX+LIZPa2imxt0tTxAFUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5
YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFlMGUxYTNmOTMvYWM3YWE1ZGYtZDFkMS0z
NWQwLWEwMGQtMDk1NjUyOTQwZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzc3OWFkNWQtNWNhNy00YzIzLTky
OGYtMDkxZTBlMWEzZjkzLzM3NzlhZDVkLTVjYTctNGMyMy05MjhmLTA5MWUwZTFh
M2Y5My5jcmwwHwYDVR0jBBgwFoAU3UBYo70iE7ShZ8UHLgPVQAuSHEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFl
MGUxYTNmOTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACi3HUD
BACi3HYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEARHn3tkQzRZV6MZ1JZvfsSaN1Z/9Az/wKUw/4uG24gydd
YXjHlfLOh2Qs8MV5YVE32yzJTkp8NlNqseXQerwdDXc42DK12US/tq6tEia6aB+x
eEjXY4zy+vKBm29+v2F0Vl6fbFE8p4PlHRDSjmbXIq3RD0NdfgmXHaH00Dt86ZQ3
wqk1wIHLxzAOrgkuaHYVgjyz8S8KTX1+a9QfptNbPS7o6E6VhhvtskZv/Vv8EtA1
h76VZa0zuG0SGr+mRww85RRtDODRGgkRFmExERlFyMgBf33WhatZJw65mWBxuYly
gKJo3ofqqfQ1Ijd911TmqijWNkvwhVBgHtvwjJYKNw==
-----END CERTIFICATE-----
Generated at Wed Sep 27 21:11:24 2023 by rpki-client on console-ams.rpki-client.org