Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2836cad-335b-381f-ae0a-1baa75ac72c1.roa
File: b2836cad-335b-381f-ae0a-1baa75ac72c1.roa (raw, json)
Hash identifier: HAaY6vifSE6WUHoad6lZcDnSh5Q8PNmo2XJ40S/dYQc=
Subject key identifier: 5D:34:AB:C0:7A:CA:26:FE:E0:72:F8:99:B8:30:35:2D:4A:40:E6:9E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583F07190B4983CD613D8C7FE6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2836cad-335b-381f-ae0a-1baa75ac72c1.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Sun 24 Aug 2025 04:00:00 +0000
asID: 701
IP address blocks: 209.118.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Nov 2023 18:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:07:19:0b:49:83:cd:61:3d:8c:7f:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Aug 24 04:00:00 2025 GMT
Subject: CN=f4312e5c-753a-4230-930d-50c6e02ea39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:62:ef:b3:66:43:be:1d:b5:c3:87:f5:f2:
f2:ba:9f:ed:f1:f4:ca:55:90:25:d4:e3:55:6b:97:
c0:de:9f:46:81:5a:79:bf:72:9a:85:30:eb:ce:80:
a2:06:9c:2f:29:1c:76:02:3a:c2:b9:4b:5e:74:05:
ec:53:23:04:5e:91:ab:d8:01:89:7c:0f:49:df:b5:
2e:f2:93:f8:ab:ca:e6:d7:c6:6f:67:d5:3c:04:20:
e3:0c:18:d7:c7:ea:c3:c7:3c:b5:3e:cd:8b:de:e4:
b2:5f:4b:71:7d:df:03:64:60:a5:7a:a4:a2:6e:ca:
9a:ae:bd:7d:a3:ab:0d:fa:81:7b:0c:92:9f:28:80:
f8:45:36:7f:ca:98:32:e3:d1:cb:7d:3b:a2:7b:6f:
89:f2:1a:a9:27:43:51:b1:cf:d6:a1:c9:dd:71:f0:
5a:b7:18:d1:bc:c3:02:96:30:21:bb:fb:80:37:0d:
35:69:db:66:30:b2:2d:69:f7:70:b2:bf:86:5e:e8:
0d:18:dd:18:0d:63:4e:7f:89:87:bb:ed:b9:8a:06:
7b:9c:66:60:a2:c5:7c:cc:96:cc:81:a1:ab:88:5d:
ff:cc:9c:25:35:5a:62:15:ee:d8:c4:f6:9e:53:cb:
ce:d4:8c:97:27:d1:43:47:da:6a:66:d7:49:7e:18:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:34:AB:C0:7A:CA:26:FE:E0:72:F8:99:B8:30:35:2D:4A:40:E6:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2836cad-335b-381f-ae0a-1baa75ac72c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.118.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:81:01:71:77:ee:5d:ed:ec:f5:fd:2f:8b:6d:1a:d2:f5:84:
66:0c:15:a2:e1:72:fe:6f:63:61:20:85:5f:ac:71:18:4e:92:
bd:8f:26:77:5c:09:29:ea:4b:ed:be:ff:fa:98:bb:93:12:8e:
21:b1:c9:27:4b:09:0f:0f:7e:61:9c:7e:11:e0:d1:90:26:53:
e8:78:d3:96:0e:6d:d4:06:b7:0d:a9:c2:c4:fe:24:40:78:34:
24:1e:37:aa:36:8d:26:59:2d:9e:c5:d3:22:83:4b:da:0b:0e:
34:ee:2b:d8:3c:e4:67:72:2a:21:4c:ab:87:83:53:47:38:20:
9b:d8:b4:e2:b0:93:b9:c7:0f:b1:b1:bb:d5:25:29:ab:7c:17:
0e:67:89:67:c1:c5:d5:0e:fa:41:2d:5c:02:6f:9d:e9:d9:50:
46:2f:84:0a:24:60:96:e7:53:31:b4:88:3d:31:ea:a0:b9:cc:
fc:21:36:86:e9:34:74:0b:e1:99:c2:bf:b3:76:e7:90:02:bf:
e3:b0:a7:07:3a:76:cd:36:b6:3d:8c:39:1f:6b:65:89:9d:5b:
7a:a4:6f:49:0c:62:1d:dc:8b:71:26:ec:20:5e:1e:66:66:22:
6b:e0:6e:dd:04:80:91:10:84:62:75:3c:ee:2b:d3:76:f5:ad:
8e:a8:b2:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8HGQtJg81hPYx/5sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIyMDgyNTEyMDAwMFoXDTI1MDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjQzMTJlNWMtNzUzYS00MjMwLTkzMGQtNTBjNmUwMmVhMzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZZi77NmQ74dtcOH9fLyup/t8fTKVZAl1ONV
a5fA3p9GgVp5v3KahTDrzoCiBpwvKRx2AjrCuUtedAXsUyMEXpGr2AGJfA9J37Uu
8pP4q8rm18ZvZ9U8BCDjDBjXx+rDxzy1Ps2L3uSyX0txfd8DZGCleqSibsqarr19
o6sN+oF7DJKfKID4RTZ/ypgy49HLfTuie2+J8hqpJ0NRsc/WocndcfBatxjRvMMC
ljAhu/uANw01adtmMLItafdwsr+GXugNGN0YDWNOf4mHu+25igZ7nGZgosV8zJbM
gaGriF3/zJwlNVpiFe7YxPaeU8vO1IyXJ9FDR9pqZtdJfhiWOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF00q8B6yib+4HL4mbgwNS1KQOaeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjI4MzZjYWQtMzM1Yi0z
ODFmLWFlMGEtMWJhYTc1YWM3MmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XYOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeBAXF37l3t7PX9L4ttGtL1hGYMFaLhcv5vY2EghV+scRhOkr2PJndc
CSnqS+2+//qYu5MSjiGxySdLCQ8PfmGcfhHg0ZAmU+h405YObdQGtw2pwsT+JEB4
NCQeN6o2jSZZLZ7F0yKDS9oLDjTuK9g85GdyKiFMq4eDU0c4IJvYtOKwk7nHD7Gx
u9UlKat8Fw5niWfBxdUO+kEtXAJvnenZUEYvhAokYJbnUzG0iD0x6qC5zPwhNobp
NHQL4ZnCv7N255ACv+Owpwc6ds02tj2MOR9rZYmdW3qkb0kMYh3ci3Em7CBeHmZm
Imvgbt0EgJEQhGJ1PO4r03b1rY6osn0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:36 2024 by rpki-client on console-ams.rpki-client.org