Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b2603f2-6272-399c-920c-9a000e7246d8.roa
File: 4b2603f2-6272-399c-920c-9a000e7246d8.roa (raw, json)
Hash identifier: Xss84nyi+pAspgIxuenZx9rHtcWPIovhPmBivvHhKEs=
Subject key identifier: 73:81:C0:4D:81:38:C4:44:ED:E3:46:17:75:07:89:14:63:DB:66:22
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F87E42A18D076D7F6D4E20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b2603f2-6272-399c-920c-9a000e7246d8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:7e:42:a1:8d:07:6d:7f:6d:4e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=99732fac-cfa9-4ee8-88bd-c3dbc6ffe0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:ab:48:19:fc:92:ec:c3:37:ea:bd:1d:9d:
a7:38:61:26:74:aa:d7:cc:48:5e:ba:f9:c3:ff:38:
1c:7f:97:fe:53:d3:43:79:78:33:39:5f:ba:d2:8c:
f3:3f:ef:57:f1:d6:ab:48:a5:63:a6:e3:b8:75:9a:
b7:5a:74:86:a4:38:66:27:48:c1:20:d4:8f:9e:e6:
26:99:9e:59:6c:3f:46:89:23:48:9e:40:90:5c:65:
80:eb:3f:95:6d:41:b0:81:a0:05:04:ad:34:76:a3:
c2:9e:a2:36:18:39:2b:b7:82:2c:80:59:5d:ec:ee:
90:16:38:31:89:9f:c2:7d:14:f3:c3:00:dd:c1:4e:
f4:5a:3c:c7:cb:79:9c:71:eb:81:c9:7d:6f:be:63:
e2:70:fb:6a:77:26:1f:1b:2e:de:80:b8:74:d2:94:
10:e0:d9:75:ad:f0:33:48:a5:2a:f7:a5:3c:06:d5:
79:33:f1:49:73:fa:0e:c2:85:d0:7f:3a:2e:19:36:
03:df:64:b9:ce:9a:39:53:71:d6:43:90:a3:e8:be:
e8:d2:a6:b6:48:dd:96:f0:2a:44:6b:de:be:1f:f1:
1e:52:5c:bf:21:5c:f8:92:84:e8:20:8a:0f:32:5b:
82:fa:be:bb:3e:c1:3c:d9:1a:11:5a:e6:ec:bf:f3:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:81:C0:4D:81:38:C4:44:ED:E3:46:17:75:07:89:14:63:DB:66:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b2603f2-6272-399c-920c-9a000e7246d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:5b:ea:d4:77:59:ae:2d:04:08:fe:e4:e6:cf:69:3d:97:2b:
ab:60:96:33:0d:f0:80:4c:fe:7f:50:84:57:91:76:b7:c1:5b:
53:49:71:a8:01:13:8b:b1:7d:f5:fc:33:01:e7:09:67:a5:d5:
a9:11:01:d5:4d:98:30:15:bc:2c:57:f5:05:23:0a:ab:2c:01:
d0:f0:ff:84:ee:fa:94:27:3f:ee:9a:38:99:a7:bc:87:62:fa:
2f:50:25:b9:73:f8:7a:fc:a1:d3:5c:fb:2a:97:a1:ce:e4:ea:
9d:d1:84:d6:5e:5b:d2:5a:b4:f9:bf:b4:86:ab:23:8b:49:f5:
d3:62:93:b1:a9:6e:a7:08:c0:ff:87:9e:c7:99:fb:cc:2d:8e:
7e:8d:51:de:fc:b0:74:97:e3:da:7f:9c:2e:ef:ff:37:48:fe:
33:84:55:9b:b7:46:a4:c7:b7:5e:d0:4f:06:39:ab:f2:90:a9:
7f:c6:a5:10:e4:60:78:f9:38:d8:47:fd:e3:29:84:df:a4:28:
42:06:cd:58:92:ed:bb:72:83:ef:2c:59:2b:a4:16:af:8b:aa:
5d:23:d4:6f:1f:e8:3e:46:81:b8:50:be:e1:2f:fb:e3:c2:be:
71:8b:49:18:45:12:4c:f5:1d:d2:aa:64:b2:62:50:3b:7e:ee:
7e:f0:be:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ+H5CoY0HbX9tTiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTk3MzJmYWMtY2ZhOS00ZWU4LTg4YmQtYzNkYmM2ZmZlMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG+rSBn8kuzDN+q9HZ2nOGEmdKrXzEheuvnD
/zgcf5f+U9NDeXgzOV+60ozzP+9X8darSKVjpuO4dZq3WnSGpDhmJ0jBINSPnuYm
mZ5ZbD9GiSNInkCQXGWA6z+VbUGwgaAFBK00dqPCnqI2GDkrt4IsgFld7O6QFjgx
iZ/CfRTzwwDdwU70WjzHy3mcceuByX1vvmPicPtqdyYfGy7egLh00pQQ4Nl1rfAz
SKUq96U8BtV5M/FJc/oOwoXQfzouGTYD32S5zpo5U3HWQ5Cj6L7o0qa2SN2W8CpE
a96+H/EeUly/IVz4koToIIoPMluC+r67PsE82RoRWubsv/M5TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOBwE2BOMRE7eNGF3UHiRRj22YiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGIyNjAzZjItNjI3Mi0z
OTljLTkyMGMtOWEwMDBlNzI0NmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFb6tR3Wa4tBAj+5ObPaT2XK6tgljMN8IBM/n9QhFeRdrfBW1NJcagB
E4uxffX8MwHnCWel1akRAdVNmDAVvCxX9QUjCqssAdDw/4Tu+pQnP+6aOJmnvIdi
+i9QJblz+Hr8odNc+yqXoc7k6p3RhNZeW9JatPm/tIarI4tJ9dNik7GpbqcIwP+H
nseZ+8wtjn6NUd78sHSX49p/nC7v/zdI/jOEVZu3RqTHt17QTwY5q/KQqX/GpRDk
YHj5ONhH/eMphN+kKEIGzViS7btyg+8sWSukFq+Lql0j1G8f6D5GgbhQvuEv++PC
vnGLSRhFEkz1HdKqZLJiUDt+7n7wvoY=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:45 2024 by rpki-client on console-fra.rpki-client.org