Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8947a0d5-f7c0-37c4-a6d2-c5374317fabe.roa
File: 8947a0d5-f7c0-37c4-a6d2-c5374317fabe.roa (raw, json)
Hash identifier: 0UTWesbQ8YJyDpvYHz3xt1uTTbIoxjx7os2vsPe/T5s=
Subject key identifier: 69:00:26:2A:FA:AB:9F:E1:B7:81:67:6E:44:39:D1:74:77:60:C1:AC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583E0383FA27F90EF0AEFD419000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8947a0d5-f7c0-37c4-a6d2-c5374317fabe.roa
Signing time: Tue 24 May 2022 12:00:00 +0000
ROA not before: Tue 24 May 2022 12:00:00 +0000
ROA not after: Fri 23 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 70.104.128.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:03:83:fa:27:f9:0e:f0:ae:fd:41:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 24 12:00:00 2022 GMT
Not After : May 23 04:00:00 2025 GMT
Subject: CN=1a83a5bd-1bfb-430d-b5dd-78a2b5d3ec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:ad:0a:f6:22:e2:00:92:af:6e:8d:cd:51:
04:3f:13:d9:bb:89:37:29:71:47:9b:78:cd:5b:25:
bb:d7:d9:1b:96:e6:3d:8b:f9:9d:18:7f:e1:00:11:
91:99:bb:65:47:94:4a:6e:56:d5:ff:27:35:5b:ae:
bb:6b:42:4f:5a:11:f8:44:66:41:3e:ec:74:24:02:
9b:b0:46:f7:81:f1:84:d9:8a:76:d7:3c:d8:20:94:
eb:8b:9f:6f:f3:d7:29:84:73:d1:46:3b:fa:ca:56:
e8:22:a1:04:64:ad:23:8c:82:b9:de:ec:4e:e2:eb:
5d:22:b0:5d:31:51:35:27:c8:38:d6:97:fe:b6:e8:
40:d9:fb:8d:30:bd:41:2a:53:36:71:fd:bb:58:ba:
38:5a:a7:6f:87:a0:ef:39:d6:1d:36:31:81:52:74:
b2:dc:9d:1f:92:71:d9:7f:f8:c6:dc:c9:c6:c9:44:
d3:e6:9c:d9:51:38:62:ba:80:13:5d:44:6a:f1:05:
e9:29:e3:15:11:8b:43:cf:6c:29:24:2e:e2:99:36:
4f:b2:e9:00:46:42:e3:75:35:c3:6b:94:73:9b:66:
1b:a4:45:a1:ad:17:69:17:0a:4b:47:eb:fa:21:f7:
a9:31:f4:d4:45:ea:0e:c4:e4:31:b7:1e:4a:15:0d:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:00:26:2A:FA:AB:9F:E1:B7:81:67:6E:44:39:D1:74:77:60:C1:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8947a0d5-f7c0-37c4-a6d2-c5374317fabe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.104.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:19:86:32:f3:53:a1:5c:ab:a2:5e:2c:f2:88:f9:17:3a:f8:
9e:f6:d0:a4:88:3a:fa:4f:26:66:95:ab:ce:1f:16:ad:0e:47:
c1:37:e0:56:b2:bd:06:a6:e3:67:15:55:a5:c7:21:ba:9d:80:
00:4a:a4:84:42:be:00:05:63:ef:f5:b6:da:fb:2b:55:26:11:
1d:ff:3e:ad:58:8e:bc:ef:fe:33:cb:7a:f2:c2:c5:7f:c5:36:
11:a7:e4:25:1c:75:0c:fd:39:26:4a:da:77:c5:1b:ed:81:b0:
32:28:5e:ba:29:9a:1d:9a:43:51:e9:e6:90:e1:ca:32:24:2d:
88:70:af:de:ae:09:20:b8:62:e4:ea:22:e3:99:ff:78:45:08:
fd:10:5f:f3:45:d5:59:73:e1:89:bc:7e:a1:7f:15:45:75:b7:
56:bc:7d:eb:b1:d9:dc:8b:c1:ab:ea:e9:54:98:fd:49:31:6c:
84:ee:71:be:51:c2:ce:6b:19:20:30:e5:35:26:2c:1f:8d:af:
c3:c4:4e:ab:65:86:92:84:06:fc:b1:49:4d:5a:47:2a:d5:79:
7e:72:66:1d:41:56:08:92:83:36:5f:2a:53:9a:a9:50:90:67:
20:89:89:50:7b:a0:6f:1b:bf:14:53:49:15:c6:9e:1c:49:05:
8b:ee:39:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4Dg/on+Q7wrv1BkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDUyNDEyMDAwMFoXDTI1MDUyMzA0MDAwMFowLzEtMCsGA1UEAxMk
MWE4M2E1YmQtMWJmYi00MzBkLWI1ZGQtNzhhMmI1ZDNlYzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixCtCvYi4gCSr26NzVEEPxPZu4k3KXFHm3jN
WyW719kbluY9i/mdGH/hABGRmbtlR5RKblbV/yc1W667a0JPWhH4RGZBPux0JAKb
sEb3gfGE2Yp21zzYIJTri59v89cphHPRRjv6ylboIqEEZK0jjIK53uxO4utdIrBd
MVE1J8g41pf+tuhA2fuNML1BKlM2cf27WLo4Wqdvh6DvOdYdNjGBUnSy3J0fknHZ
f/jG3MnGyUTT5pzZUThiuoATXURq8QXpKeMVEYtDz2wpJC7imTZPsukARkLjdTXD
a5Rzm2YbpEWhrRdpFwpLR+v6IfepMfTUReoOxOQxtx5KFQ2BfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkAJir6q5/ht4FnbkQ50XR3YMGsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODk0N2EwZDUtZjdjMC0z
N2M0LWE2ZDItYzUzNzQzMTdmYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAZhjLzU6Fcq6JeLPKI+Rc6+J720KSIOvpPJmaVq84fFq0OR8E34Fay
vQam42cVVaXHIbqdgABKpIRCvgAFY+/1ttr7K1UmER3/Pq1Yjrzv/jPLevLCxX/F
NhGn5CUcdQz9OSZK2nfFG+2BsDIoXropmh2aQ1Hp5pDhyjIkLYhwr96uCSC4YuTq
IuOZ/3hFCP0QX/NF1Vlz4Ym8fqF/FUV1t1a8feux2dyLwavq6VSY/UkxbITucb5R
ws5rGSAw5TUmLB+Nr8PETqtlhpKEBvyxSU1aRyrVeX5yZh1BVgiSgzZfKlOaqVCQ
ZyCJiVB7oG8bvxRTSRXGnhxJBYvuObs=
-----END CERTIFICATE-----
Generated at Mon Nov 6 20:12:08 2023 by rpki-client on console-ams.rpki-client.org