Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4f53958f-3cb1-370f-8b1f-605a9357b954.roa
File: 4f53958f-3cb1-370f-8b1f-605a9357b954.roa (raw, json)
Hash identifier: dosa9tv5ukveKj8TxKbnZOf/4DBpS9zn3IZfhalgMRs=
Subject key identifier: 79:23:94:98:38:84:7B:B3:FC:8A:A7:71:71:12:D8:9B:7C:57:48:0F
Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial: 010D0C9F43285846DDA43FB5B9FFAED1EB44F040
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4f53958f-3cb1-370f-8b1f-605a9357b954.roa
Signing time: Tue 13 Aug 2024 19:57:36 +0000
ROA not before: Tue 13 Aug 2024 19:57:36 +0000
ROA not after: Mon 11 Nov 2024 20:57:36 +0000
asID: 46733
IP address blocks: 2602:f9f4:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Sep 2024 18:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:dd:a4:3f:b5:b9:ff:ae:d1:eb:44:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Validity
Not Before: Aug 13 19:57:36 2024 GMT
Not After : Nov 11 20:57:36 2024 GMT
Subject: CN=3346c255-638a-4412-bc11-e0fbba766be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:11:4f:4d:a1:1f:28:ed:d8:b5:ff:64:fb:
36:6e:74:5e:32:de:37:aa:cf:a0:c2:94:98:1a:c2:
5c:e6:4b:32:92:f4:67:8a:1c:ab:68:c6:1c:16:f3:
e9:a2:4c:57:b9:0a:05:68:99:f9:fe:89:3a:01:14:
4a:11:89:67:f1:67:d9:21:3e:84:56:98:4d:80:dc:
4e:8e:82:6d:4a:40:8d:aa:ce:6f:ad:63:2c:7f:89:
3f:02:61:cf:0b:13:14:6d:c8:0e:bb:a1:12:f8:51:
3f:d5:4d:f9:8a:b6:89:3f:30:e1:43:a9:8a:d9:11:
d4:80:d6:de:d3:38:d9:df:a7:85:47:ff:19:99:37:
cc:c7:24:c2:9f:60:42:57:4a:01:98:ee:53:3c:7c:
b1:64:ce:a5:8a:a6:07:38:17:63:76:93:62:24:9f:
f3:4d:93:20:84:7f:b1:39:62:30:9a:29:89:4d:16:
36:de:f5:18:68:79:36:d9:99:34:6b:a6:ba:85:65:
21:1a:d5:3f:91:0e:04:66:1d:bf:c6:67:dd:29:75:
01:79:a5:07:b5:dc:fa:a5:5d:88:ca:47:3a:d3:7a:
a9:96:ca:59:74:bc:8f:4a:70:52:fe:d7:fc:50:a4:
9a:27:25:4d:c9:96:65:da:bf:8c:39:67:20:d9:34:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:23:94:98:38:84:7B:B3:FC:8A:A7:71:71:12:D8:9B:7C:57:48:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4f53958f-3cb1-370f-8b1f-605a9357b954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl
X509v3 Authority Key Identifier:
keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f4:10::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:56:3d:ac:a1:7f:89:85:4b:eb:32:1f:3a:42:0a:fc:3e:5f:
d9:60:e1:a9:d4:1e:0c:55:e5:e5:83:00:c8:dc:60:2b:b3:fb:
08:ff:da:06:ff:eb:15:2d:71:58:87:04:69:cb:16:60:10:50:
a7:06:22:f4:67:0b:4c:b3:f7:5f:22:95:e1:a3:79:e9:83:0b:
6e:65:19:fa:96:72:c3:18:99:be:39:fb:96:72:62:56:dc:7a:
c5:cf:e3:05:bb:35:ae:ca:55:fe:39:25:59:e2:d9:0c:ff:13:
95:17:3d:40:e5:61:f7:3a:c3:96:b4:8d:1e:c5:ae:57:c3:ca:
76:56:8e:64:6d:4a:d3:08:a2:8c:c7:22:2c:80:b1:11:4e:d0:
ad:be:40:38:47:f3:bd:6d:49:55:e6:e4:22:ea:d0:52:83:db:
76:a6:08:69:38:a0:c2:16:f0:c1:14:6f:1b:1e:7c:12:77:80:
14:2a:3f:f5:2c:84:b6:a9:1b:6b:9d:ba:61:c3:ac:3b:94:0c:
c4:77:c2:39:52:5e:ca:24:69:fd:1c:c5:a7:af:d7:02:b3:03:
71:f5:c2:2d:72:aa:c1:97:c4:90:c2:45:2a:10:1a:70:a5:e7:
07:1e:fe:78:f8:e3:9c:7f:f7:79:07:ec:68:46:ad:19:f1:37:
58:b4:d4:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbdpD+1uf+u0etE8EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy
N2Y5MB4XDTI0MDgxMzE5NTczNloXDTI0MTExMTIwNTczNlowLzEtMCsGA1UEAxMk
MzM0NmMyNTUtNjM4YS00NDEyLWJjMTEtZTBmYmJhNzY2YmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJYRT02hHyjt2LX/ZPs2bnReMt43qs+gwpSY
GsJc5ksykvRnihyraMYcFvPpokxXuQoFaJn5/ok6ARRKEYln8WfZIT6EVphNgNxO
joJtSkCNqs5vrWMsf4k/AmHPCxMUbcgOu6ES+FE/1U35iraJPzDhQ6mK2RHUgNbe
0zjZ36eFR/8ZmTfMxyTCn2BCV0oBmO5TPHyxZM6liqYHOBdjdpNiJJ/zTZMghH+x
OWIwmimJTRY23vUYaHk22Zk0a6a6hWUhGtU/kQ4EZh2/xmfdKXUBeaUHtdz6pV2I
ykc603qplspZdLyPSnBS/tf8UKSaJyVNyZZl2r+MOWcg2TR2RQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHkjlJg4hHuz/IqncXES2Jt8V0gPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh
OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvNGY1Mzk1OGYtM2NiMS0z
NzBmLThiMWYtNjA1YTkzNTdiOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli
MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx
MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3
ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL59AAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJWPayhf4mFS+syHzpCCvw+X9lg4anUHgxV5eWDAMjcYCuz+wj/
2gb/6xUtcViHBGnLFmAQUKcGIvRnC0yz918ileGjeemDC25lGfqWcsMYmb45+5Zy
YlbcesXP4wW7Na7KVf45JVni2Qz/E5UXPUDlYfc6w5a0jR7FrlfDynZWjmRtStMI
oozHIiyAsRFO0K2+QDhH871tSVXm5CLq0FKD23amCGk4oMIW8MEUbxsefBJ3gBQq
P/UshLapG2udumHDrDuUDMR3wjlSXsokaf0cxaev1wKzA3H1wi1yqsGXxJDCRSoQ
GnCl5wce/nj445x/93kH7GhGrRnxN1i01Hk=
-----END CERTIFICATE-----
Generated at Tue Sep 10 19:38:25 2024 by rpki-client on console-fra.rpki-client.org