Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/141e6e87-d86b-3990-9855-516b49eaab8d.roa
File: 141e6e87-d86b-3990-9855-516b49eaab8d.roa (raw, json)
Hash identifier: OjH74tVmCt6bApUE4stTB0H9XfzPK8MZwOIlOp1ZAs0=
Subject key identifier: A3:77:2A:1F:AB:BC:B8:4F:81:F2:35:47:79:B7:2F:94:BE:FE:BE:29
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A126FCE2E13501E75E47360
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/141e6e87-d86b-3990-9855-516b49eaab8d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:6f:ce:2e:13:50:1e:75:e4:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=45b47960-fded-49d6-b890-9ec1d312fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:e5:2b:5c:8e:62:15:7c:b2:41:cb:f3:05:
9b:a4:ab:03:58:0a:ad:83:30:9a:1c:69:b5:9e:09:
21:78:46:bc:37:18:0e:a1:d7:d2:78:b6:ff:ad:15:
6d:bc:72:08:f6:73:93:37:f5:95:32:d7:0e:4c:ac:
38:ac:07:3e:74:99:e3:fb:2c:4a:2f:e5:ab:0f:ad:
b1:35:90:9b:b6:2f:ac:5f:bb:40:85:a2:31:c0:23:
6e:81:d0:bf:66:31:6c:89:e0:ed:43:9b:41:b3:a7:
75:ae:d4:01:48:b5:d7:ef:b9:ba:09:11:ce:0f:da:
a2:d3:72:ef:f5:83:0a:6a:f6:6b:f5:a3:de:95:cc:
74:ac:57:0e:99:72:ef:24:9c:9a:df:bc:e4:69:88:
56:e1:0e:7a:bc:94:62:d5:3a:3e:5f:ec:ac:cd:fd:
2c:c0:41:3f:cd:66:ad:ff:8a:a8:e9:0e:d6:11:3a:
8f:84:bb:52:3d:03:cc:a8:b7:54:81:9d:17:59:30:
c7:d1:b9:b0:0c:75:51:ef:d2:d7:87:6d:4c:b3:6d:
12:1b:18:50:b2:98:72:65:69:78:62:c2:e2:ec:18:
0b:ac:66:db:78:cb:a9:5f:b8:6d:77:9f:84:60:99:
3e:cf:d0:d9:09:3e:6d:93:72:bd:52:f6:e0:15:34:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:77:2A:1F:AB:BC:B8:4F:81:F2:35:47:79:B7:2F:94:BE:FE:BE:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/141e6e87-d86b-3990-9855-516b49eaab8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:0c:0f:51:a5:e2:f7:6a:ba:c9:4b:02:57:0e:00:c4:20:6a:
62:c1:97:d5:a8:65:f8:5e:b3:a1:4b:e3:10:eb:25:36:c2:3e:
ae:9c:4c:e2:05:1e:f2:4d:12:e2:e3:d1:e6:7f:7f:18:d8:ab:
ee:9a:02:90:f1:fb:5d:ac:24:d9:06:11:a5:5c:1f:c3:6e:d0:
ff:eb:bb:d3:8d:6c:1d:a7:77:dc:fb:04:69:5e:b8:32:91:3e:
ec:22:83:01:cd:ef:f4:e5:ae:72:5b:bb:cc:f6:e1:45:51:ee:
aa:90:f6:eb:dc:70:df:e5:91:2f:17:c1:2c:9d:fb:d6:53:02:
08:79:61:20:0d:71:5f:f7:aa:a7:3a:66:7a:b0:78:82:ba:b3:
8f:13:44:71:f4:90:6a:6c:e0:4c:5e:8c:aa:bb:ad:92:ea:31:
9e:62:26:03:98:e2:3f:d6:3a:7f:9d:0c:74:ef:87:83:36:49:
2d:79:3e:ba:05:2c:ad:09:21:96:c3:12:d8:fd:27:53:ef:9c:
5c:89:d1:5f:a5:ee:7b:69:f2:5a:74:01:c6:4a:f0:d8:6b:81:
71:1a:0e:a8:60:a8:fc:b0:55:ce:de:07:09:23:03:b2:d0:2b:
41:90:97:c8:45:36:ab:89:a1:a9:d6:34:7b:21:37:5e:9e:ba:
8a:67:13:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEm/OLhNQHnXkc2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDViNDc5NjAtZmRlZC00OWQ2LWI4OTAtOWVjMWQzMTJmYjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkzlK1yOYhV8skHL8wWbpKsDWAqtgzCaHGm1
ngkheEa8NxgOodfSeLb/rRVtvHII9nOTN/WVMtcOTKw4rAc+dJnj+yxKL+WrD62x
NZCbti+sX7tAhaIxwCNugdC/ZjFsieDtQ5tBs6d1rtQBSLXX77m6CRHOD9qi03Lv
9YMKavZr9aPelcx0rFcOmXLvJJya37zkaYhW4Q56vJRi1To+X+yszf0swEE/zWat
/4qo6Q7WETqPhLtSPQPMqLdUgZ0XWTDH0bmwDHVR79LXh21Ms20SGxhQsphyZWl4
YsLi7BgLrGbbeMupX7htd5+EYJk+z9DZCT5tk3K9UvbgFTS2KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKN3Kh+rvLhPgfI1R3m3L5S+/r4pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTQxZTZlODctZDg2Yi0z
OTkwLTk4NTUtNTE2YjQ5ZWFhYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkMD1Gl4vdquslLAlcOAMQgamLBl9WoZfhes6FL4xDrJTbCPq6cTOIF
HvJNEuLj0eZ/fxjYq+6aApDx+12sJNkGEaVcH8Nu0P/ru9ONbB2nd9z7BGleuDKR
PuwigwHN7/TlrnJbu8z24UVR7qqQ9uvccN/lkS8XwSyd+9ZTAgh5YSANcV/3qqc6
ZnqweIK6s48TRHH0kGps4ExejKq7rZLqMZ5iJgOY4j/WOn+dDHTvh4M2SS15ProF
LK0JIZbDEtj9J1PvnFyJ0V+l7ntp8lp0AcZK8NhrgXEaDqhgqPywVc7eBwkjA7LQ
K0GQl8hFNquJoanWNHshN16euopnE7w=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org