Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8959ea38-8879-3e82-bcdf-c502ef21765e.roa
File: 8959ea38-8879-3e82-bcdf-c502ef21765e.roa (raw, json)
Hash identifier: 8tTA+/LpZEuEeN7JLWTxaIYrc1JXdOXtakLlprQ0pEw=
Subject key identifier: B9:28:7F:85:A4:64:0A:D1:55:10:FA:21:1F:A2:12:AF:2F:CA:96:79
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A06458ADDB1124408A0D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8959ea38-8879-3e82-bcdf-c502ef21765e.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.113.140.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 16 Jan 2025 14:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:64:58:ad:db:11:24:40:8a:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=4f02f732-934d-47c0-b4db-89ce81865c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:3b:5f:db:7b:2d:7c:f7:65:42:c5:37:c7:
9b:6d:df:56:34:6a:32:17:1c:95:a6:a1:e4:58:4d:
04:0d:13:2d:e1:60:92:c9:85:d6:5c:56:e8:47:c7:
7f:b6:16:d2:c1:df:09:5e:c6:5b:44:03:27:9f:1a:
0e:81:47:cc:48:e6:89:d3:fe:41:e9:35:de:0a:9a:
67:e1:36:69:54:04:6e:b7:2b:9b:c8:c4:29:70:01:
ae:00:fa:eb:1d:35:34:a5:f7:40:e0:44:a7:89:a4:
c8:c0:61:17:73:d1:37:c5:41:5c:27:3e:51:fb:35:
5e:60:71:d5:ce:46:c6:0b:bd:af:c3:dd:73:7c:3f:
ca:9b:ec:75:51:26:b6:f9:23:33:2f:24:fb:56:69:
4e:57:1a:ae:70:25:9b:0c:68:50:f0:5f:14:b6:cf:
0e:24:99:5f:75:7a:42:62:20:b4:d6:c3:b7:51:f5:
33:2e:47:5c:67:e7:01:51:3d:ae:53:65:69:8e:ed:
0f:8e:76:5b:1c:a7:d6:71:58:48:b1:83:a7:9f:0f:
ab:dc:ea:7b:0b:76:c3:e7:2b:d8:0d:fe:cc:85:ea:
07:cb:3f:b6:97:ec:b7:d5:a7:35:9c:b7:67:b5:27:
d0:1f:5c:fa:52:b2:f6:fc:d9:dc:f8:35:68:ae:74:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:7F:85:A4:64:0A:D1:55:10:FA:21:1F:A2:12:AF:2F:CA:96:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8959ea38-8879-3e82-bcdf-c502ef21765e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.113.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:96:66:58:f6:00:bb:67:75:aa:8b:c5:d3:2f:ac:15:50:c1:
49:8d:82:6a:f4:80:be:7b:2e:07:2c:4f:c4:36:0a:63:38:01:
df:50:27:3f:9e:43:4d:f9:b3:a7:fc:63:e1:20:46:dc:5b:2f:
96:d7:df:57:f4:92:39:a6:21:ec:59:19:ea:74:15:8b:66:1d:
c9:22:ae:21:fa:bb:d7:73:b0:d3:c5:4b:cc:d7:1e:50:60:ca:
6a:ab:dd:eb:27:0b:fb:a6:96:59:ee:4c:7d:9e:5d:f1:d5:1b:
a1:98:56:bc:8f:fd:6f:42:8b:3c:73:07:1d:c7:e9:4a:f0:be:
44:7f:53:0a:19:15:2e:86:68:22:2b:43:59:1e:3e:8d:04:50:
b2:8c:66:81:c1:ed:19:bb:ae:fb:17:2a:07:c7:10:4b:c9:f6:
69:c4:e2:0a:bc:01:b3:f5:5c:78:78:9a:6a:af:90:82:b2:93:
d2:7c:d0:ae:f2:45:04:37:35:58:ce:85:ab:07:b0:21:54:fa:
ab:c3:5d:e3:f0:6f:8b:fe:7c:f2:10:e6:4d:25:aa:58:28:d7:
2b:d5:d0:3b:66:77:d5:44:5d:28:74:4c:45:90:6f:d7:57:0a:
6b:00:11:f2:c3:cc:2c:c0:0e:a0:77:60:5f:fe:9c:e4:14:14:
52:7a:bf:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoGRYrdsRJECKDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
NGYwMmY3MzItOTM0ZC00N2MwLWI0ZGItODljZTgxODY1YzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSI7X9t7LXz3ZULFN8ebbd9WNGoyFxyVpqHk
WE0EDRMt4WCSyYXWXFboR8d/thbSwd8JXsZbRAMnnxoOgUfMSOaJ0/5B6TXeCppn
4TZpVARutyubyMQpcAGuAPrrHTU0pfdA4ESniaTIwGEXc9E3xUFcJz5R+zVeYHHV
zkbGC72vw91zfD/Km+x1USa2+SMzLyT7VmlOVxqucCWbDGhQ8F8Uts8OJJlfdXpC
YiC01sO3UfUzLkdcZ+cBUT2uU2Vpju0PjnZbHKfWcVhIsYOnnw+r3Op7C3bD5yvY
Df7MheoHyz+2l+y31ac1nLdntSfQH1z6UrL2/Nnc+DVornT4qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLkof4WkZArRVRD6IR+iEq8vypZ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk1OWVhMzgtODg3OS0z
ZTgyLWJjZGYtYzUwMmVmMjE3NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaHGMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmWZlj2ALtndaqLxdMvrBVQwUmNgmr0gL57LgcsT8Q2CmM4Ad9QJz+e
Q035s6f8Y+EgRtxbL5bX31f0kjmmIexZGep0FYtmHckiriH6u9dzsNPFS8zXHlBg
ymqr3esnC/umllnuTH2eXfHVG6GYVryP/W9CizxzBx3H6UrwvkR/UwoZFS6GaCIr
Q1kePo0EULKMZoHB7Rm7rvsXKgfHEEvJ9mnE4gq8AbP1XHh4mmqvkIKyk9J80K7y
RQQ3NVjOhasHsCFU+qvDXePwb4v+fPIQ5k0lqlgo1yvV0Dtmd9VEXSh0TEWQb9dX
CmsAEfLDzCzADqB3YF/+nOQUFFJ6v3U=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:29 2025 by rpki-client