Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a8a85e4b-4359-31d9-85d4-a6680cc83de3.roa
File: a8a85e4b-4359-31d9-85d4-a6680cc83de3.roa (raw, json)
Hash identifier: tJX6d3UgGrRNoMjQeyE+bOu4Hm1C5Uyi5OyLbq8xcDg=
Subject key identifier: AA:4D:02:E9:6B:DC:3C:A7:0B:70:91:AF:CB:7D:A5:7B:F7:4A:CB:B8
Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial: 010D0C9F4328583D414973D8D194485320691900
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a8a85e4b-4359-31d9-85d4-a6680cc83de3.roa
Signing time: Wed 16 Mar 2022 04:00:00 +0000
ROA not before: Wed 16 Mar 2022 04:00:00 +0000
ROA not after: Mon 01 Jan 2029 05:00:00 +0000
asID: 10368
IP address blocks: 168.91.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 May 2023 10:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:41:49:73:d8:d1:94:48:53:20:69:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Validity
Not Before: Mar 16 04:00:00 2022 GMT
Not After : Jan 1 05:00:00 2029 GMT
Subject: CN=878ec8cf-6db6-41ef-8f97-3a5f9d4e61f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:9a:90:8f:94:c3:39:6f:ad:dd:c5:47:61:
d1:86:e3:e0:d5:9c:26:2f:e7:fe:94:f1:a6:81:ce:
8d:e4:a6:f9:8a:d1:7d:67:f6:b6:6f:ad:56:6c:4f:
e1:a8:4a:7a:5f:9e:53:eb:b6:56:f0:5b:c3:b1:d2:
55:f1:2b:6e:d4:4d:6d:f8:fe:63:9c:a1:a2:fa:c9:
d5:52:6d:45:7c:d8:37:00:15:1d:97:db:f0:a6:dc:
ce:0b:91:61:d1:81:c3:7f:1e:4d:62:57:17:de:c0:
f7:78:5f:60:38:59:e8:6c:f1:22:df:2b:e4:7b:63:
b7:26:6b:9d:3f:79:1e:5e:ac:de:f7:64:4f:b9:5d:
26:e8:8d:8d:a7:e3:3a:84:8f:c5:b4:da:46:7e:bb:
3b:34:02:c1:c9:96:8e:fc:7c:61:ed:a8:13:d4:83:
24:88:51:bf:05:9b:37:3f:b2:38:e3:af:62:ad:28:
ac:14:8a:ee:96:87:07:36:40:05:0c:1d:6b:12:dc:
10:46:81:53:32:8b:be:b4:4c:ff:47:0e:8c:4f:fe:
89:c1:3a:e5:43:fd:83:93:6e:5b:0f:f3:e5:0e:b2:
65:70:8c:f0:07:4f:61:29:8e:9c:b9:44:e6:2e:33:
67:f3:a2:5c:eb:3b:8e:8c:fb:33:e0:40:79:3e:20:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:02:E9:6B:DC:3C:A7:0B:70:91:AF:CB:7D:A5:7B:F7:4A:CB:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a8a85e4b-4359-31d9-85d4-a6680cc83de3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
X509v3 Authority Key Identifier:
keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:34:d5:e9:22:87:a4:20:ce:00:f2:6f:1e:a4:8c:14:3d:b6:
68:62:65:51:0f:9f:43:44:4c:f9:30:04:92:57:00:86:75:ea:
f2:cc:c3:81:d9:57:20:ec:90:a5:53:c2:05:1d:98:38:57:72:
11:a3:f7:39:2d:70:3e:b3:09:5f:f1:fe:a5:b9:b0:8e:fe:32:
7b:16:35:00:d5:86:38:c4:ce:f4:40:03:32:e8:80:30:01:19:
2c:d1:67:65:b8:6f:2b:3f:ad:6d:fb:36:47:70:aa:92:8f:8c:
cc:b5:52:28:f8:8c:77:17:d8:2e:29:51:32:92:89:7b:d8:cb:
ea:9a:be:91:7e:3c:8e:b2:1e:8c:70:ce:ee:c5:a6:48:8a:33:
c4:9c:f3:41:13:eb:70:11:2e:ee:7e:d5:52:eb:00:06:85:e5:
bc:9d:93:c7:4b:59:39:64:a7:1f:f6:c8:c6:a5:1e:fd:ce:7c:
6f:e6:27:32:79:6b:b8:29:be:2f:4c:42:47:87:17:67:be:fd:
2d:3d:c6:40:20:97:0b:0d:44:ef:08:4b:e9:6f:be:d8:db:fd:
66:c4:2a:cb:84:3c:50:18:6d:23:9d:60:c8:c7:7d:b1:8a:fb:
e1:d7:b0:2b:a6:2a:ee:52:64:34:b4:45:0a:b4:b3:09:37:0b:
54:a5:7f:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1BSXPY0ZRIUyBpGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2
ODczMB4XDTIyMDMxNjA0MDAwMFoXDTI5MDEwMTA1MDAwMFowLzEtMCsGA1UEAxMk
ODc4ZWM4Y2YtNmRiNi00MWVmLThmOTctM2E1ZjlkNGU2MWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsSakI+Uwzlvrd3FR2HRhuPg1ZwmL+f+lPGm
gc6N5Kb5itF9Z/a2b61WbE/hqEp6X55T67ZW8FvDsdJV8Stu1E1t+P5jnKGi+snV
Um1FfNg3ABUdl9vwptzOC5Fh0YHDfx5NYlcX3sD3eF9gOFnobPEi3yvke2O3Jmud
P3keXqze92RPuV0m6I2Np+M6hI/FtNpGfrs7NALByZaO/Hxh7agT1IMkiFG/BZs3
P7I4469irSisFIrulocHNkAFDB1rEtwQRoFTMou+tEz/Rw6MT/6JwTrlQ/2Dk25b
D/PlDrJlcIzwB09hKY6cuUTmLjNn86Jc6zuOjPsz4EB5PiAElQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpNAulr3DynC3CRr8t9pXv3Ssu4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0
NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYThhODVlNGItNDM1OS0z
MWQ5LTg1ZDQtYTY2ODBjYzgzZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli
MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk
Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw
MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJg01ekih6QgzgDybx6kjBQ9tmhiZVEPn0NETPkwBJJXAIZ16vLMw4HZ
VyDskKVTwgUdmDhXchGj9zktcD6zCV/x/qW5sI7+MnsWNQDVhjjEzvRAAzLogDAB
GSzRZ2W4bys/rW37NkdwqpKPjMy1Uij4jHcX2C4pUTKSiXvYy+qavpF+PI6yHoxw
zu7FpkiKM8Sc80ET63ARLu5+1VLrAAaF5bydk8dLWTlkpx/2yMalHv3OfG/mJzJ5
a7gpvi9MQkeHF2e+/S09xkAglwsNRO8IS+lvvtjb/WbEKsuEPFAYbSOdYMjHfbGK
++HXsCumKu5SZDS0RQq0swk3C1Slf54=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org