Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/886e35e8-12a6-3fbc-a7db-3546b79f5b3d.roa
File: 886e35e8-12a6-3fbc-a7db-3546b79f5b3d.roa (raw, json)
Hash identifier: Cy38PZmwZEVl5ZvrCUjUfNv11DCx+eIzOC3da7U9L8w=
Subject key identifier: C0:9A:20:C1:47:0F:EA:2A:F9:F7:E3:E9:97:02:E1:3C:69:97:9B:5D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DDC4F0853C99236F2F5CEC780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/886e35e8-12a6-3fbc-a7db-3546b79f5b3d.roa
Signing time: Tue 10 May 2022 12:00:00 +0000
ROA not before: Tue 10 May 2022 12:00:00 +0000
ROA not after: Fri 09 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 71.161.240.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:dc:4f:08:53:c9:92:36:f2:f5:ce:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 10 12:00:00 2022 GMT
Not After : May 9 04:00:00 2025 GMT
Subject: CN=79bdc79b-97f9-4bb3-ac64-8ea61f866b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:0d:d3:ea:6b:ad:79:ff:d1:ba:04:bf:14:
8b:ba:ce:1f:b1:e7:f7:7e:51:5b:59:cf:c5:bd:87:
6d:1b:c9:d5:f3:e2:52:73:c2:ee:07:7e:4f:3c:4c:
ad:21:4a:40:4d:e1:e3:4e:d8:72:a0:40:f1:e8:2a:
a3:e3:3b:68:42:61:f1:1a:12:58:a2:56:d4:65:42:
4f:38:13:6a:43:6e:c3:9f:12:ae:24:e3:c1:74:74:
b4:1d:cc:33:dd:26:b3:23:a2:67:c4:cf:c0:01:f5:
84:a0:9f:5b:52:79:09:70:14:14:76:bf:f6:d7:63:
17:72:1d:e9:64:d6:2f:66:56:37:59:8a:a8:7d:c1:
f7:58:57:08:a8:32:21:22:83:a3:96:1f:48:5c:28:
a1:a4:10:64:cf:67:5b:37:68:9f:da:50:4c:e7:7e:
98:3d:35:49:00:9f:8d:64:ee:78:13:02:69:da:18:
23:f9:db:7e:21:cb:aa:e4:c6:9a:cf:41:9d:91:cb:
f0:98:13:77:af:2f:89:ed:fe:92:ee:b0:9f:ae:d8:
8f:ad:1c:c1:fd:a6:45:de:c0:2d:49:2e:28:4e:42:
0f:f3:67:a0:b6:84:a2:3b:1a:4c:ee:55:08:f1:0d:
f3:9d:dd:8d:d6:cb:ec:8c:29:17:e5:98:e9:0c:a9:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9A:20:C1:47:0F:EA:2A:F9:F7:E3:E9:97:02:E1:3C:69:97:9B:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/886e35e8-12a6-3fbc-a7db-3546b79f5b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.161.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:5f:12:28:c5:d8:d1:ba:48:d5:2c:4a:f9:50:d9:f6:55:19:
88:ca:54:96:4f:ed:a9:4c:f5:27:1a:f1:44:32:6d:c0:bd:33:
eb:47:c3:c8:16:da:51:c8:66:7e:6c:7c:0b:d2:fb:30:45:28:
41:a4:17:18:10:f1:28:42:df:8e:fd:d1:af:ba:ae:e3:7a:7c:
e1:99:d0:d6:c2:53:58:9f:35:e8:ab:1b:61:83:ba:e4:86:e7:
10:96:79:ea:4e:c9:a7:7b:27:b2:9e:d4:b9:af:18:a4:c9:74:
72:50:5a:84:83:91:c4:51:71:4f:82:f3:67:18:e7:f9:20:2b:
d0:c6:99:f1:46:b4:d9:f5:c7:65:51:a5:c1:93:a8:4b:16:9b:
be:f3:36:79:b5:85:4b:51:08:6b:21:a6:f5:86:7b:37:37:08:
19:c4:9d:14:37:35:f8:ca:59:23:a3:54:6d:83:e0:87:9c:4a:
1a:11:2f:2d:03:ef:b3:db:c3:c2:a0:4c:95:4e:9a:77:3f:c4:
c9:62:04:55:40:2b:1b:a9:13:67:39:05:cf:33:ee:1a:47:f2:
be:44:e2:b6:49:5e:bf:f4:45:c7:08:4e:ec:23:bb:02:fb:aa:
63:7f:90:0b:31:86:24:a7:ec:fd:2c:73:d7:85:5d:09:5f:d9:
3c:f5:54:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3cTwhTyZI28vXOx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDUxMDEyMDAwMFoXDTI1MDUwOTA0MDAwMFowLzEtMCsGA1UEAxMk
NzliZGM3OWItOTdmOS00YmIzLWFjNjQtOGVhNjFmODY2YjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjwN0+prrXn/0boEvxSLus4fsef3flFbWc/F
vYdtG8nV8+JSc8LuB35PPEytIUpATeHjTthyoEDx6Cqj4ztoQmHxGhJYolbUZUJP
OBNqQ27DnxKuJOPBdHS0Hcwz3SazI6JnxM/AAfWEoJ9bUnkJcBQUdr/212MXch3p
ZNYvZlY3WYqofcH3WFcIqDIhIoOjlh9IXCihpBBkz2dbN2if2lBM536YPTVJAJ+N
ZO54EwJp2hgj+dt+Icuq5Maaz0GdkcvwmBN3ry+J7f6S7rCfrtiPrRzB/aZF3sAt
SS4oTkIP82egtoSiOxpM7lUI8Q3znd2N1svsjCkX5ZjpDKk3YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCaIMFHD+oq+ffj6ZcC4Txpl5tdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg2ZTM1ZTgtMTJhNi0z
ZmJjLWE3ZGItMzU0NmI3OWY1YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER6HwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFfEijF2NG6SNUsSvlQ2fZVGYjKVJZP7alM9Sca8UQybcC9M+tHw8gW
2lHIZn5sfAvS+zBFKEGkFxgQ8ShC34790a+6ruN6fOGZ0NbCU1ifNeirG2GDuuSG
5xCWeepOyad7J7Ke1LmvGKTJdHJQWoSDkcRRcU+C82cY5/kgK9DGmfFGtNn1x2VR
pcGTqEsWm77zNnm1hUtRCGshpvWGezc3CBnEnRQ3NfjKWSOjVG2D4IecShoRLy0D
77Pbw8KgTJVOmnc/xMliBFVAKxupE2c5Bc8z7hpH8r5E4rZJXr/0RccITuwjuwL7
qmN/kAsxhiSn7P0sc9eFXQlf2Tz1VEI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:43 2024 by rpki-client on console-fra.rpki-client.org