Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a7b15a0-b2e5-360f-a53a-465a72a3675c.roa
File: 0a7b15a0-b2e5-360f-a53a-465a72a3675c.roa (raw, json)
Hash identifier: j3GNH/DCpiJuUSRWDwsdZhDDfF6ceAXxbKiLQhuJ34k=
Subject key identifier: 3A:A9:5E:8B:8D:80:EF:4D:F0:1A:67:5C:DB:65:DB:89:E1:F1:04:1F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DDDF2FD0171FD86B6BEF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a7b15a0-b2e5-360f-a53a-465a72a3675c.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 2001:4860:4829::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:df:2f:d0:17:1f:d8:6b:6b:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=8c98027c-f1a8-42db-981c-4ac2aeade322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:95:dd:d3:c1:14:ea:f2:fe:b8:22:bc:6b:
1b:e6:6f:93:19:7a:2f:60:36:a5:91:e5:26:f8:1b:
79:d9:56:93:0e:7a:00:57:2c:58:91:e7:01:d6:0b:
00:1e:54:58:db:7a:99:96:a1:2b:0c:aa:45:08:d5:
aa:6f:cc:a3:2b:ce:82:c2:06:04:de:0c:92:fa:ae:
16:89:92:52:a8:1b:06:05:54:27:66:26:d6:16:91:
2c:f2:d8:b6:a4:c2:74:22:3a:d4:8f:e1:87:f5:fd:
dd:02:90:cf:16:88:1f:32:51:05:6e:b2:1a:c0:72:
42:1f:2e:d0:23:0d:28:7e:51:83:50:fa:d9:b2:c7:
30:ae:d7:55:1e:15:e0:90:da:96:f4:90:98:1f:3c:
a8:c8:c1:51:ac:92:84:14:c1:14:e5:e0:b7:0c:f4:
43:f4:f4:ca:ff:3a:c3:2e:b0:87:d8:e1:8b:07:54:
c6:6b:6f:ff:c1:ec:af:66:46:4b:45:e6:95:ce:f0:
6a:f1:17:fc:9c:2c:91:61:d0:42:7b:c2:c7:0f:29:
60:82:a4:30:a0:d6:78:8e:99:c8:08:c2:74:f1:4d:
70:83:75:ef:d8:a8:b2:76:ee:c0:c5:6f:29:4f:e3:
57:f5:30:b7:eb:15:d0:92:ed:46:cd:87:32:9b:33:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A9:5E:8B:8D:80:EF:4D:F0:1A:67:5C:DB:65:DB:89:E1:F1:04:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a7b15a0-b2e5-360f-a53a-465a72a3675c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:4829::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:6c:5a:e9:bd:ec:f5:02:46:2b:cf:02:41:6c:f2:c0:d2:0b:
ab:5d:1a:3b:73:88:dd:2b:e1:f4:23:24:5c:2d:6b:5f:71:e2:
38:c2:2a:48:b2:29:7f:a0:b5:84:fc:ec:1a:55:27:af:13:21:
d7:66:01:b7:8e:cb:57:c9:1f:13:74:da:35:b7:bb:00:29:82:
98:aa:25:88:0f:da:b0:1b:f6:1e:80:d7:25:c9:be:9c:98:b3:
cf:c5:6a:9d:1d:5f:4a:16:ea:4c:bb:01:ec:f6:c1:ad:7e:8a:
89:a5:0d:56:af:d3:7b:ef:9f:f9:e9:6a:b8:45:6b:c7:ad:f0:
2d:a2:2d:b6:57:02:a2:28:48:47:49:a7:8d:0c:db:93:cb:3c:
fe:67:11:26:d0:98:10:e9:a9:55:68:00:2a:9b:05:e8:ba:fc:
78:b9:99:38:66:4f:26:d9:cd:87:d0:f6:34:7a:d2:5d:4c:de:
e3:c5:16:17:35:74:9a:0d:65:82:11:a5:25:99:10:f7:76:89:
55:9a:2e:78:55:76:e1:35:af:28:dc:0a:2c:d9:a1:d7:24:ad:
08:80:46:b3:c5:a2:54:d0:ce:47:48:aa:f7:f8:b6:a8:46:28:
5c:0c:ff:84:12:34:1a:9d:27:9b:45:a2:54:e4:6f:8e:95:c6:
d6:cd:9d:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEHT3d8v0Bcf2Gtr7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDUwODEyMDAwMFoXDTI1MDgxMDA0MDAwMFowLzEtMCsGA1UEAxMk
OGM5ODAyN2MtZjFhOC00MmRiLTk4MWMtNGFjMmFlYWRlMzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPOV3dPBFOry/rgivGsb5m+TGXovYDalkeUm
+Bt52VaTDnoAVyxYkecB1gsAHlRY23qZlqErDKpFCNWqb8yjK86CwgYE3gyS+q4W
iZJSqBsGBVQnZibWFpEs8ti2pMJ0IjrUj+GH9f3dApDPFogfMlEFbrIawHJCHy7Q
Iw0oflGDUPrZsscwrtdVHhXgkNqW9JCYHzyoyMFRrJKEFMEU5eC3DPRD9PTK/zrD
LrCH2OGLB1TGa2//weyvZkZLReaVzvBq8Rf8nCyRYdBCe8LHDylggqQwoNZ4jpnI
CMJ08U1wg3Xv2Kiydu7AxW8pT+NX9TC36xXQku1GzYcymzPA9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDqpXouNgO9N8BpnXNtl24nh8QQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGE3YjE1YTAtYjJlNS0z
NjBmLWE1M2EtNDY1YTcyYTM2NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAARsWum97PUCRivPAkFs8sDSC6tdGjtziN0r4fQjJFwta19x4jjC
KkiyKX+gtYT87BpVJ68TIddmAbeOy1fJHxN02jW3uwApgpiqJYgP2rAb9h6A1yXJ
vpyYs8/Fap0dX0oW6ky7Aez2wa1+iomlDVav03vvn/nparhFa8et8C2iLbZXAqIo
SEdJp40M25PLPP5nESbQmBDpqVVoACqbBei6/Hi5mThmTybZzYfQ9jR60l1M3uPF
Fhc1dJoNZYIRpSWZEPd2iVWaLnhVduE1ryjcCizZodckrQiARrPFolTQzkdIqvf4
tqhGKFwM/4QSNBqdJ5tFolTkb46VxtbNnUk=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:36 2024 by rpki-client on console-ams.rpki-client.org