Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/592360d0-82fa-3d63-8947-501f519dec6e.roa
File: 592360d0-82fa-3d63-8947-501f519dec6e.roa (raw, json)
Hash identifier: Rl2nGU1nd3f5MNSoGYshAvRd8CpxLkh21c1B8HEVtfw=
Subject key identifier: F2:9D:A3:06:4B:39:02:21:32:3B:DE:44:E0:1C:C5:1C:38:CB:F8:FF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DDC4DCA044211EA9B08D87480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/592360d0-82fa-3d63-8947-501f519dec6e.roa
Signing time: Tue 10 May 2022 12:00:00 +0000
ROA not before: Tue 10 May 2022 12:00:00 +0000
ROA not after: Fri 09 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 70.21.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:dc:4d:ca:04:42:11:ea:9b:08:d8:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 10 12:00:00 2022 GMT
Not After : May 9 04:00:00 2025 GMT
Subject: CN=565e2671-aa84-49e4-966c-32d7c14a5180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bf:14:b3:f5:f1:d8:c5:f2:c5:f2:20:70:83:
b4:d9:7d:4d:da:96:9e:94:2b:73:18:20:2d:3f:49:
6f:f8:f9:d7:df:8d:2d:49:b6:8d:0e:43:4a:d1:7f:
dc:9a:9d:36:0a:9b:ba:3f:af:08:0a:f3:12:9b:20:
4f:72:a1:df:29:86:61:9f:aa:04:53:cb:09:2f:29:
38:a7:88:a5:df:db:5f:eb:ac:84:f3:df:9b:ae:c0:
ee:1e:23:2b:3c:45:c5:dd:86:37:8a:42:c7:e0:6e:
e2:31:39:82:90:ee:d6:00:d7:08:a1:01:f0:30:64:
90:ec:4f:a3:25:77:2a:56:d1:43:71:22:6e:1c:cf:
2e:e9:c0:8b:13:7b:1e:7f:6d:a5:79:2f:83:43:e1:
33:89:18:dc:be:0d:5e:2b:94:5c:db:cc:95:16:98:
31:54:5e:40:ba:91:3e:44:64:ad:c4:81:3a:8d:9e:
04:00:e9:ca:d3:87:73:5f:3d:30:78:8d:70:c2:cc:
b8:22:1a:60:6d:31:d2:7e:51:78:bd:a6:e0:76:6a:
56:ec:20:d8:fc:b0:63:b2:fd:85:0c:6c:e1:7c:13:
6f:cb:0b:1e:ac:b8:eb:87:f1:dd:28:c8:b6:06:c5:
3c:2f:6e:34:d1:db:e6:80:b2:1f:7a:af:94:9d:a2:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9D:A3:06:4B:39:02:21:32:3B:DE:44:E0:1C:C5:1C:38:CB:F8:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/592360d0-82fa-3d63-8947-501f519dec6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.21.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:61:ed:4e:e7:9e:6e:11:8c:aa:6b:c7:2b:4f:ed:70:7b:f2:
10:27:72:78:b3:58:10:92:9f:11:b5:a2:4d:80:de:c0:b4:25:
cf:aa:e2:b7:fa:75:b7:d8:31:5c:0a:fd:34:20:6a:29:44:0e:
18:a2:75:42:e3:7b:92:74:bc:8e:c6:43:24:0d:0c:95:40:91:
92:9e:3a:c5:ca:58:c5:fb:31:66:fb:e6:58:93:73:e8:e4:62:
8e:ac:a8:0a:23:0a:9d:73:40:be:9b:91:93:2a:f7:1f:32:79:
fb:5e:c7:d4:d2:34:ea:f7:1f:eb:83:a4:e6:ed:3f:f6:90:ac:
5d:32:55:f6:b3:db:32:5a:38:c2:22:4d:de:4e:8f:9b:42:aa:
0f:dd:77:b4:8d:fb:9e:18:cc:11:58:9b:54:61:7d:8e:9c:98:
80:ca:4a:2c:ba:5a:d3:15:0b:90:f2:00:88:09:a2:27:49:9e:
a8:69:3c:aa:92:42:5c:38:e5:e0:c0:4a:8e:9a:a4:63:37:11:
cf:3c:13:9d:f0:e1:26:39:38:77:30:43:9d:be:f7:51:cf:79:
71:9a:4d:ac:29:13:24:63:ab:2d:3c:46:cb:dc:cc:e9:cb:c9:
d5:cc:ae:25:ff:1c:6c:f1:03:82:6d:f6:68:10:25:3c:70:66:
81:97:0c:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3cTcoEQhHqmwjYdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDUxMDEyMDAwMFoXDTI1MDUwOTA0MDAwMFowLzEtMCsGA1UEAxMk
NTY1ZTI2NzEtYWE4NC00OWU0LTk2NmMtMzJkN2MxNGE1MTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb8Us/Xx2MXyxfIgcIO02X1N2paelCtzGCAt
P0lv+PnX340tSbaNDkNK0X/cmp02Cpu6P68ICvMSmyBPcqHfKYZhn6oEU8sJLyk4
p4il39tf66yE89+brsDuHiMrPEXF3YY3ikLH4G7iMTmCkO7WANcIoQHwMGSQ7E+j
JXcqVtFDcSJuHM8u6cCLE3sef22leS+DQ+EziRjcvg1eK5Rc28yVFpgxVF5AupE+
RGStxIE6jZ4EAOnK04dzXz0weI1wwsy4IhpgbTHSflF4vabgdmpW7CDY/LBjsv2F
DGzhfBNvywserLjrh/HdKMi2BsU8L2400dvmgLIfeq+UnaLttQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKdowZLOQIhMjveROAcxRw4y/j/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTkyMzYwZDAtODJmYS0z
ZDYzLTg5NDctNTAxZjUxOWRlYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExh7U7nnm4RjKprxytP7XB78hAncnizWBCSnxG1ok2A3sC0Jc+q4rf6
dbfYMVwK/TQgailEDhiidULje5J0vI7GQyQNDJVAkZKeOsXKWMX7MWb75liTc+jk
Yo6sqAojCp1zQL6bkZMq9x8yeftex9TSNOr3H+uDpObtP/aQrF0yVfaz2zJaOMIi
Td5Oj5tCqg/dd7SN+54YzBFYm1RhfY6cmIDKSiy6WtMVC5DyAIgJoidJnqhpPKqS
Qlw45eDASo6apGM3Ec88E53w4SY5OHcwQ52+91HPeXGaTawpEyRjqy08RsvczOnL
ydXMriX/HGzxA4Jt9mgQJTxwZoGXDPQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:32 2024 by rpki-client on console-ams.rpki-client.org