Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d07ab20-de87-3197-82d0-491becb77aeb.roa
File: 0d07ab20-de87-3197-82d0-491becb77aeb.roa (raw, json)
Hash identifier: 6/IhkFsQPmrlIig3jPjg/E9b0uzrnOlEEm0ubhTIKhQ=
Subject key identifier: 7A:5F:9C:B1:F4:4B:E5:7F:9C:99:BF:46:21:78:90:6B:B7:63:3C:25
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EECB46345A2535C8C35FE4
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d07ab20-de87-3197-82d0-491becb77aeb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 208.68.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:cb:46:34:5a:25:35:c8:c3:5f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cb5eda60-37f4-491c-9761-1cd1d0d95067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:be:71:97:c0:26:21:9b:99:c2:98:e9:9b:
3d:76:65:4c:49:b1:eb:a2:b9:98:4f:f9:03:39:1c:
3f:5f:38:e3:cd:ce:82:d6:14:0c:4b:cf:5b:81:51:
78:8b:fd:00:8a:36:d8:da:c1:fa:c7:42:86:d9:a5:
f7:bd:fe:7c:c8:9b:ff:6f:63:57:d7:e7:e1:2a:e9:
25:50:ba:e8:37:77:00:64:cb:42:0e:f2:82:d2:2f:
d5:a5:0c:04:b4:ac:f9:01:9e:b9:fa:db:47:c5:bf:
40:e3:46:5a:ca:75:7b:6d:03:e1:0d:c5:53:cc:f5:
a2:01:73:42:f9:2d:79:41:6d:a4:fe:cd:a6:60:4b:
ad:3e:2f:60:29:34:f7:42:59:8f:7b:85:f2:82:44:
33:9a:74:0c:d8:7e:c4:77:8d:d4:c6:26:27:c0:d6:
c7:ce:de:6c:ae:48:a7:51:7f:37:d6:bd:6e:f2:53:
fc:9c:7b:f1:9f:c9:29:55:e7:62:7a:3b:12:fe:68:
2a:a0:7c:88:14:d1:2d:c9:c1:68:48:f6:a9:ea:e5:
cb:db:17:e4:11:d2:b8:89:d1:8d:0c:57:f3:8c:69:
da:c8:0f:47:7f:5c:42:c9:17:eb:6d:25:35:6a:75:
37:45:f3:05:fd:fc:84:c6:8f:5d:13:1a:72:c2:00:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5F:9C:B1:F4:4B:E5:7F:9C:99:BF:46:21:78:90:6B:B7:63:3C:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d07ab20-de87-3197-82d0-491becb77aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:c2:9b:55:58:e7:84:d8:8b:b7:c5:c1:6c:f4:12:85:84:26:
06:f0:e3:a3:fa:a0:95:5e:7e:f8:6e:1e:71:04:65:21:dd:15:
15:b9:c7:ac:76:f4:e9:f9:0d:11:bc:9b:d2:74:66:f9:6c:26:
f8:8c:4f:aa:44:7b:8f:54:6b:89:98:a9:8f:46:95:9a:ee:f8:
e9:bd:01:c5:92:bf:bc:4c:1d:de:8a:99:d5:c6:48:ee:a0:d3:
8e:51:af:c8:a6:ee:63:eb:03:9b:cd:8c:91:6a:fc:80:4e:c3:
5f:ed:4e:68:6a:3c:82:67:be:54:d6:a4:6b:de:c9:fe:e8:8b:
da:ca:42:61:b1:a9:d0:ec:99:d5:96:ea:9f:90:e8:0b:8a:50:
22:34:9f:a2:f4:66:63:43:3c:5c:a8:09:3c:50:34:10:a6:82:
f9:71:55:81:d2:e5:1a:63:8c:d7:0b:d6:19:01:e4:7c:a8:bc:
47:e7:36:de:cc:ed:c8:bf:0b:f7:5c:94:b0:cd:17:f2:c8:52:
35:c7:a9:eb:7e:63:a7:e2:f0:bf:a7:c8:ff:c6:40:9a:02:67:
36:1d:8a:bc:fa:a6:7a:90:b1:51:16:73:7d:d1:5b:fd:69:dd:
a7:0a:b5:e7:0e:19:63:47:58:db:f5:46:77:ce:dc:0e:d5:3e:
a2:d9:ec:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7stGNFolNcjDX+QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2I1ZWRhNjAtMzdmNC00OTFjLTk3NjEtMWNkMWQwZDk1MDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvS+cZfAJiGbmcKY6Zs9dmVMSbHrormYT/kD
ORw/Xzjjzc6C1hQMS89bgVF4i/0AijbY2sH6x0KG2aX3vf58yJv/b2NX1+fhKukl
ULroN3cAZMtCDvKC0i/VpQwEtKz5AZ65+ttHxb9A40ZaynV7bQPhDcVTzPWiAXNC
+S15QW2k/s2mYEutPi9gKTT3QlmPe4XygkQzmnQM2H7Ed43UxiYnwNbHzt5srkin
UX831r1u8lP8nHvxn8kpVediejsS/mgqoHyIFNEtycFoSPap6uXL2xfkEdK4idGN
DFfzjGnayA9Hf1xCyRfrbSU1anU3RfMF/fyExo9dExpywgAS5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpfnLH0S+V/nJm/RiF4kGu3YzwlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGQwN2FiMjAtZGU4Ny0z
MTk3LTgyZDAtNDkxYmVjYjc3YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzCm1VY54TYi7fFwWz0EoWEJgbw46P6oJVefvhuHnEEZSHdFRW5x6x2
9On5DRG8m9J0ZvlsJviMT6pEe49Ua4mYqY9GlZru+Om9AcWSv7xMHd6KmdXGSO6g
045Rr8im7mPrA5vNjJFq/IBOw1/tTmhqPIJnvlTWpGveyf7oi9rKQmGxqdDsmdWW
6p+Q6AuKUCI0n6L0ZmNDPFyoCTxQNBCmgvlxVYHS5RpjjNcL1hkB5HyovEfnNt7M
7ci/C/dclLDNF/LIUjXHqet+Y6fi8L+nyP/GQJoCZzYdirz6pnqQsVEWc33RW/1p
3acKtecOGWNHWNv1RnfO3A7VPqLZ7Pc=
-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:13 2024 by rpki-client on console-ams.rpki-client.org