Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/70b62b69-157c-3db2-8aa4-7899c3864a4b.roa
File: 70b62b69-157c-3db2-8aa4-7899c3864a4b.roa (raw, json)
Hash identifier: ftn856D7g0CX+aYbp33APuW5i7u7c1Bm8xkrMKLE/N0=
Subject key identifier: 92:F3:E8:70:DC:CF:7F:B2:CA:9A:81:91:8E:78:99:03:F0:BE:02:E3
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F43285847520AA31915453750699139E0
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/70b62b69-157c-3db2-8aa4-7899c3864a4b.roa
Signing time: Tue 24 Sep 2024 12:37:40 +0000
ROA not before: Tue 24 Sep 2024 12:37:40 +0000
ROA not after: Mon 23 Dec 2024 13:37:40 +0000
asID: 14618
IP address blocks: 216.24.226.0/24 maxlen: 24
216.24.227.0/24 maxlen: 24
216.24.228.0/24 maxlen: 24
216.24.229.0/24 maxlen: 24
216.24.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 13:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:52:0a:a3:19:15:45:37:50:69:91:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Sep 24 12:37:40 2024 GMT
Not After : Dec 23 13:37:40 2024 GMT
Subject: CN=f17cc14d-42b6-418d-b23b-2b16aa195c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:f2:31:a5:1e:74:1c:21:37:d4:70:b2:9e:
b6:a3:fd:95:bb:02:76:63:fe:bc:61:86:c4:1c:5d:
74:33:ef:f6:5f:5f:c5:52:84:ad:24:ca:f1:04:9a:
ac:3a:07:66:e5:c9:f0:70:7e:36:e6:ff:b6:41:88:
d1:8e:83:31:1e:4a:4d:b1:c7:ac:95:bb:bb:d3:07:
59:97:71:9f:69:ec:31:c9:bd:4a:c8:03:af:6d:3f:
c8:9f:0d:51:24:bf:67:af:36:5b:3d:3d:5e:a2:30:
0a:a2:cc:5d:82:8a:83:05:bd:29:46:ff:03:6d:ce:
b2:fd:53:81:8b:d8:c3:25:f6:7e:7d:3d:50:47:75:
51:a0:18:ae:0b:c3:01:4a:6a:41:5e:5b:e0:82:e3:
19:15:3e:1a:26:7d:2b:6b:d1:e6:4a:6a:21:fd:83:
3d:e4:35:23:ac:24:98:5e:3e:3b:a9:1e:1e:4b:c6:
62:6a:32:de:79:41:7b:cd:0b:10:d6:be:50:1a:fd:
51:b1:a0:34:22:1d:f3:29:90:15:c2:7c:55:ce:60:
c1:d5:d9:68:34:70:fe:66:96:8c:00:9c:f3:08:78:
0a:75:f7:6f:c7:75:e4:c8:af:ca:d9:6e:dc:4d:73:
ef:fa:af:e3:ff:fb:e5:df:45:32:23:0c:f6:76:71:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:E8:70:DC:CF:7F:B2:CA:9A:81:91:8E:78:99:03:F0:BE:02:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/70b62b69-157c-3db2-8aa4-7899c3864a4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.226.0-216.24.229.255
216.24.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:7d:fa:b4:80:05:46:75:b9:9b:44:5e:9d:96:ef:8e:f1:45:
d9:80:5a:83:d3:c9:8d:19:f5:a4:c8:3a:e5:ad:b4:f5:44:54:
d0:11:ed:c6:e2:ab:b4:56:14:12:aa:2b:71:03:dc:be:d5:cc:
79:8e:68:c4:18:52:5a:68:95:d2:1c:6b:f5:ca:bf:94:ca:50:
7f:79:63:ce:2e:53:6f:4b:d1:df:af:35:21:90:1c:28:87:63:
28:51:e2:c6:8b:b9:78:1f:72:56:ad:e2:36:d7:63:fb:e5:04:
58:44:76:72:16:d7:9f:e4:53:3d:bf:f5:23:93:2f:a2:3c:48:
d9:05:8f:2d:49:63:e5:81:0d:f5:75:b9:dc:fb:14:b3:e3:bb:
0c:1f:b6:56:f9:7c:9c:c8:91:32:df:21:71:d8:53:ad:4c:d1:
84:88:d9:46:ba:1a:36:86:c9:17:d8:ec:78:2e:c4:db:67:ae:
ce:38:ac:f4:39:57:0a:1b:20:42:93:0d:89:90:83:db:d4:56:
8a:d8:bf:09:a4:a2:1c:68:c1:ec:87:cf:ee:c2:c0:19:db:ba:
fe:d8:8c:83:bb:e7:1f:94:23:c7:cd:dc:fc:2d:c9:c8:23:79:
c0:5b:19:22:a6:64:09:93:8b:12:c1:0d:3f:c9:52:90:d1:e3:
5c:84:b7:ae
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEdSCqMZFUU3UGmROeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5
NWM5MB4XDTI0MDkyNDEyMzc0MFoXDTI0MTIyMzEzMzc0MFowLzEtMCsGA1UEAxMk
ZjE3Y2MxNGQtNDJiNi00MThkLWIyM2ItMmIxNmFhMTk1YzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOLyMaUedBwhN9Rwsp62o/2VuwJ2Y/68YYbE
HF10M+/2X1/FUoStJMrxBJqsOgdm5cnwcH425v+2QYjRjoMxHkpNsceslbu70wdZ
l3Gfaewxyb1KyAOvbT/Inw1RJL9nrzZbPT1eojAKosxdgoqDBb0pRv8Dbc6y/VOB
i9jDJfZ+fT1QR3VRoBiuC8MBSmpBXlvgguMZFT4aJn0ra9HmSmoh/YM95DUjrCSY
Xj47qR4eS8ZiajLeeUF7zQsQ1r5QGv1RsaA0Ih3zKZAVwnxVzmDB1dloNHD+ZpaM
AJzzCHgKdfdvx3XkyK/K2W7cTXPv+q/j//vl30UyIwz2dnGTqwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFJLz6HDcz3+yypqBkY54mQPwvgLjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj
YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvNzBiNjJiNjktMTU3Yy0z
ZGIyLThhYTQtNzg5OWMzODY0YTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1
YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0
OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm
ZDc0NDk1YzkuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHYGOID
BAHYGOQDBADYGO8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEALn36tIAFRnW5m0RenZbvjvFF2YBag9PJjRn1
pMg65a209URU0BHtxuKrtFYUEqorcQPcvtXMeY5oxBhSWmiV0hxr9cq/lMpQf3lj
zi5Tb0vR3681IZAcKIdjKFHixou5eB9yVq3iNtdj++UEWER2chbXn+RTPb/1I5Mv
ojxI2QWPLUlj5YEN9XW53PsUs+O7DB+2Vvl8nMiRMt8hcdhTrUzRhIjZRroaNobJ
F9jseC7E22euzjis9DlXChsgQpMNiZCD29RWiti/CaSiHGjB7IfP7sLAGdu6/tiM
g7vnH5Qjx83c/C3JyCN5wFsZIqZkCZOLEsENP8lSkNHjXIS3rg==
-----END CERTIFICATE-----
Generated at Tue Sep 24 16:53:35 2024 by rpki-client on console-fra.rpki-client.org