Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bc65ce6-e835-3ef5-83f2-d21428c52255.roa
File: 3bc65ce6-e835-3ef5-83f2-d21428c52255.roa (raw, json)
Hash identifier: KaXZxxwaxJitcOEAbxT+7Mk7dttOORjFCrtClSXW7Jc=
Subject key identifier: 43:74:9E:82:53:FA:F2:2D:A2:3B:33:C2:D7:28:D0:45:B4:0A:9C:86
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858407F63E5B19DA03B415E9C3240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bc65ce6-e835-3ef5-83f2-d21428c52255.roa
Signing time: Fri 06 Jan 2023 12:00:00 +0000
ROA not before: Fri 06 Jan 2023 12:00:00 +0000
ROA not after: Thu 10 Apr 2025 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7f:63:e5:b1:9d:a0:3b:41:5e:9c:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 6 12:00:00 2023 GMT
Not After : Apr 10 04:00:00 2025 GMT
Subject: CN=9dae895e-ca05-4338-b303-82ed82188c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:de:23:a5:f2:f7:b0:5c:5c:b7:d0:51:73:
28:47:55:ea:cf:a7:15:c5:fa:3e:99:1f:d7:24:3c:
aa:4a:ff:3d:bc:68:57:c6:80:3c:95:03:0d:df:dc:
80:91:1d:a7:bc:df:26:57:44:d0:a4:23:c5:33:6c:
1e:dd:b1:62:79:62:75:e3:4c:9e:85:44:7f:53:e7:
4b:71:6d:29:f4:ce:05:ae:ec:a3:43:76:d4:cc:4a:
98:34:bf:40:01:ea:74:75:19:13:d3:1c:19:45:2b:
ae:8a:fe:08:46:07:4b:aa:8d:ec:53:17:d4:76:6d:
95:42:99:01:bd:e5:12:2a:cf:17:ce:a9:81:00:f4:
98:38:8b:8d:13:54:95:c2:cd:63:67:14:85:7d:0f:
ef:1f:c4:9f:08:d8:e2:b1:e8:54:51:3d:86:69:fe:
f0:ae:97:f7:5f:f9:52:18:65:5a:73:81:7d:bf:ee:
db:d0:cb:42:59:b2:2e:9e:93:5c:e7:2f:06:57:3d:
b5:37:20:4d:4a:96:d4:30:e9:2a:7e:64:44:1f:24:
a8:f5:cf:ce:0d:f6:cd:50:65:53:ed:56:1a:f3:9e:
a3:1b:b1:06:48:24:26:1c:c1:04:b1:cb:24:63:29:
1c:f8:d3:12:a9:cf:73:75:9d:5f:39:ff:4d:5c:12:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:74:9E:82:53:FA:F2:2D:A2:3B:33:C2:D7:28:D0:45:B4:0A:9C:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bc65ce6-e835-3ef5-83f2-d21428c52255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:e8:96:d1:87:06:20:12:1a:ec:b6:83:60:ed:58:6c:81:ed:
46:e5:ba:99:df:20:9f:73:d9:6a:63:ce:69:77:11:e2:f0:45:
e1:2c:ac:da:78:69:0d:7e:43:8d:e5:0f:f3:5f:33:cd:f6:41:
3d:3a:00:83:3b:40:a5:f9:0d:d0:d6:91:24:ef:f0:2b:0a:86:
c2:32:83:42:7a:20:92:33:c7:5f:de:ec:f6:84:74:77:03:e5:
de:3c:4e:5b:f4:d7:89:c7:89:00:81:a0:f8:5f:6d:25:0b:c4:
3a:99:33:a9:09:a1:9f:a0:eb:61:80:71:cb:89:76:74:d6:f5:
c4:69:40:31:e7:83:be:d5:78:b0:a8:f8:bd:6e:29:c4:10:ee:
45:96:c4:03:23:3d:08:fc:34:10:81:65:2a:e2:67:21:34:cd:
80:d3:cf:b8:cd:ef:56:47:06:37:f4:e6:a4:97:5e:5f:39:e6:
84:b2:b2:75:62:be:fb:51:ec:f4:3f:86:be:da:df:14:cb:06:
8e:50:4d:33:e5:f6:a8:12:49:31:49:25:b5:fd:bf:cb:7d:ad:
8f:8e:fd:9b:0c:23:db:8a:25:05:e4:eb:a5:0d:90:73:22:ed:
62:af:73:cd:fa:c7:b3:89:72:cf:df:6f:4f:b3:9f:8e:27:a7:
4a:7d:31:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEB/Y+WxnaA7QV6cMkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDEwNjEyMDAwMFoXDTI1MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
OWRhZTg5NWUtY2EwNS00MzM4LWIzMDMtODJlZDgyMTg4YzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5TeI6Xy97BcXLfQUXMoR1Xqz6cVxfo+mR/X
JDyqSv89vGhXxoA8lQMN39yAkR2nvN8mV0TQpCPFM2we3bFieWJ140yehUR/U+dL
cW0p9M4FruyjQ3bUzEqYNL9AAep0dRkT0xwZRSuuiv4IRgdLqo3sUxfUdm2VQpkB
veUSKs8XzqmBAPSYOIuNE1SVws1jZxSFfQ/vH8SfCNjisehUUT2Gaf7wrpf3X/lS
GGVac4F9v+7b0MtCWbIunpNc5y8GVz21NyBNSpbUMOkqfmREHySo9c/ODfbNUGVT
7VYa856jG7EGSCQmHMEEscskYykc+NMSqc9zdZ1fOf9NXBJRuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEN0noJT+vItojszwtco0EW0CpyGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2JjNjVjZTYtZTgzNS0z
ZWY1LTgzZjItZDIxNDI4YzUyMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvoltGHBiASGuy2g2DtWGyB7UblupnfIJ9z2Wpjzml3EeLwReEsrNp4
aQ1+Q43lD/NfM832QT06AIM7QKX5DdDWkSTv8CsKhsIyg0J6IJIzx1/e7PaEdHcD
5d48Tlv014nHiQCBoPhfbSULxDqZM6kJoZ+g62GAccuJdnTW9cRpQDHng77VeLCo
+L1uKcQQ7kWWxAMjPQj8NBCBZSriZyE0zYDTz7jN71ZHBjf05qSXXl855oSysnVi
vvtR7PQ/hr7a3xTLBo5QTTPl9qgSSTFJJbX9v8t9rY+O/ZsMI9uKJQXk66UNkHMi
7WKvc836x7OJcs/fb0+zn44np0p9Mbo=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org