Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4ccb9bbd-969e-3378-aca3-cf9801a94e1d.roa
File: 4ccb9bbd-969e-3378-aca3-cf9801a94e1d.roa (raw, json)
Hash identifier: y31n9t3uK2eTsxSOjyQsLiwbvUGg7s8JCBF8cIUmZNE=
Subject key identifier: 2A:4E:24:05:9A:4E:43:C5:36:9E:15:08:0E:D2:28:28:C5:E4:E5:A4
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F43285846662F26B498A30CF2386B0B80
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4ccb9bbd-969e-3378-aca3-cf9801a94e1d.roa
Signing time: Tue 02 Jul 2024 01:00:24 +0000
ROA not before: Tue 02 Jul 2024 01:00:24 +0000
ROA not after: Mon 30 Sep 2024 01:00:24 +0000
asID: 27471
IP address blocks: 199.19.254.0/24 maxlen: 24
199.19.255.0/24 maxlen: 24
199.116.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 12:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:66:2f:26:b4:98:a3:0c:f2:38:6b:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Jul 2 01:00:24 2024 GMT
Not After : Sep 30 01:00:24 2024 GMT
Subject: CN=97ed3ce7-98ed-4d5e-9228-193a37d76041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:b6:6e:cd:6e:ff:64:0d:31:ef:9b:49:90:
37:d4:c8:3a:8f:7a:99:48:85:2b:b8:cf:35:c0:e7:
11:1d:59:0b:7f:bc:cc:2e:30:a4:31:34:da:9b:73:
c8:8c:c2:c0:37:ad:06:80:fd:6c:14:8a:33:1a:be:
a2:f5:4e:e7:ae:88:e4:d5:0c:29:df:96:1a:29:c7:
f1:a0:7e:40:b7:06:3d:ad:54:4a:65:e4:35:40:bd:
32:87:be:ef:af:b2:09:66:ec:bd:da:be:87:03:2d:
12:70:f3:76:a0:f4:b6:1a:40:db:8b:fa:a5:38:15:
ca:72:71:4a:97:39:7c:b4:1c:c9:f9:b7:6a:3b:12:
1c:85:88:44:97:74:57:40:d3:c2:0c:ff:ce:16:f0:
bc:1a:43:0a:e7:4c:f3:e8:f9:c4:d9:f4:91:e4:9c:
84:06:36:9c:6f:65:00:1c:f7:1e:b7:02:ba:70:07:
3b:27:d9:61:bb:01:c6:0f:a1:41:07:94:26:c9:38:
34:c6:e5:ae:4d:ef:a1:9d:6b:92:e6:c6:02:be:3f:
a3:b8:1f:f3:e0:9f:37:23:e7:b2:1c:70:3a:b6:a6:
ac:7a:b9:34:d3:6a:fa:f0:3d:f5:1c:75:63:e0:84:
07:29:11:9f:ef:48:35:a5:05:2b:27:1e:a6:c0:8c:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:24:05:9A:4E:43:C5:36:9E:15:08:0E:D2:28:28:C5:E4:E5:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4ccb9bbd-969e-3378-aca3-cf9801a94e1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv4:
199.19.254.0/23
199.116.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:57:db:f9:c7:cd:67:21:cc:25:19:6a:9a:23:d5:cb:d9:10:
da:71:d8:66:50:6e:8c:da:d9:f9:29:36:b6:a0:02:85:18:d1:
7f:2b:b6:5c:36:58:27:ac:f8:26:a4:34:a8:2e:1b:ba:60:fa:
fd:43:c0:c9:d8:ec:62:97:b8:46:e2:f5:31:1e:03:81:f2:86:
c4:db:de:a2:23:a1:b0:81:4b:b2:e6:a8:06:13:64:c0:01:63:
a3:11:b8:b0:8f:ea:cb:34:8d:ae:d8:bc:43:c2:81:b2:29:8f:
fb:29:3a:47:44:a7:88:65:ee:3d:7d:32:88:bc:0d:95:58:5b:
e3:da:4a:c1:2e:f9:d9:e0:69:36:a9:bb:b5:61:3b:a9:df:73:
e3:7b:75:de:89:72:cd:a4:cc:2c:70:26:cc:1f:35:25:8c:d5:
96:53:51:35:fb:99:ee:1e:12:d3:42:8a:cb:bf:95:46:e7:96:
1c:17:5a:1b:6c:f2:3e:a7:d3:a1:77:1e:96:bb:01:4d:2b:93:
46:9e:27:e8:34:d3:09:dc:6f:01:d9:a1:5a:cd:de:68:d5:65:
d2:db:5b:b2:e2:2f:13:5b:d1:f4:54:4c:0b:9e:9d:55:4b:2d:
d5:71:d7:35:9a:74:93:2b:83:2a:75:6d:c4:7a:ce:30:04:c3:
a0:b8:4b:ce
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEZmLya0mKMM8jhrC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI0MDcwMjAxMDAyNFoXDTI0MDkzMDAxMDAyNFowLzEtMCsGA1UEAxMk
OTdlZDNjZTctOThlZC00ZDVlLTkyMjgtMTkzYTM3ZDc2MDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF22bs1u/2QNMe+bSZA31Mg6j3qZSIUruM81
wOcRHVkLf7zMLjCkMTTam3PIjMLAN60GgP1sFIozGr6i9U7nrojk1Qwp35YaKcfx
oH5AtwY9rVRKZeQ1QL0yh77vr7IJZuy92r6HAy0ScPN2oPS2GkDbi/qlOBXKcnFK
lzl8tBzJ+bdqOxIchYhEl3RXQNPCDP/OFvC8GkMK50zz6PnE2fSR5JyEBjacb2UA
HPcetwK6cAc7J9lhuwHGD6FBB5QmyTg0xuWuTe+hnWuS5sYCvj+juB/z4J83I+ey
HHA6tqaserk002r68D31HHVj4IQHKRGf70g1pQUrJx6mwIxwAwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCpOJAWaTkPFNp4VCA7SKCjF5OWkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNGNjYjliYmQtOTY5ZS0z
Mzc4LWFjYTMtY2Y5ODAxYTk0ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxxP+AwQA
x3SsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHZX2/nHzWchzCUZapoj1cvZENpx2GZQboza2fkpNragAoUY
0X8rtlw2WCes+CakNKguG7pg+v1DwMnY7GKXuEbi9TEeA4HyhsTb3qIjobCBS7Lm
qAYTZMABY6MRuLCP6ss0ja7YvEPCgbIpj/spOkdEp4hl7j19Moi8DZVYW+PaSsEu
+dngaTapu7VhO6nfc+N7dd6Jcs2kzCxwJswfNSWM1ZZTUTX7me4eEtNCisu/lUbn
lhwXWhts8j6n06F3Hpa7AU0rk0aeJ+g00wncbwHZoVrN3mjVZdLbW7LiLxNb0fRU
TAuenVVLLdVx1zWadJMrgyp1bcR6zjAEw6C4S84=
-----END CERTIFICATE-----
Generated at Mon Jul 29 14:18:38 2024 by rpki-client on console-ams.rpki-client.org