Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/29c7a4b9-a3d8-30fd-95c4-91bed8d0771a.roa
File: 29c7a4b9-a3d8-30fd-95c4-91bed8d0771a.roa (raw, json)
Hash identifier: ne+obnitOW9Aj6sLkCknlk1ekuRaR2IQVHrKEUIwZxo=
Subject key identifier: 89:84:78:9E:6B:59:6E:71:05:E7:05:02:CE:AE:86:1B:C8:F0:35:31
Certificate issuer: /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial: 010D0C9F4328583FC07C881B7C085897B646D780
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/29c7a4b9-a3d8-30fd-95c4-91bed8d0771a.roa
Signing time: Thu 18 Aug 2022 19:03:08 +0000
ROA not before: Thu 18 Aug 2022 19:03:08 +0000
ROA not after: Sun 02 Feb 2025 05:00:00 +0000
asID: 16509
IP address blocks: 198.176.120.0/24 maxlen: 24
198.176.121.0/24 maxlen: 24
198.176.122.0/24 maxlen: 24
198.176.123.0/24 maxlen: 24
198.176.124.0/24 maxlen: 24
198.176.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Oct 2022 15:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c0:7c:88:1b:7c:08:58:97:b6:46:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Validity
Not Before: Aug 18 19:03:08 2022 GMT
Not After : Feb 2 05:00:00 2025 GMT
Subject: CN=2c1ce979-c66d-4e26-92cb-dd591b2b1108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:8a:37:8e:5b:3f:39:17:c1:1d:22:4c:79:
46:c7:0d:a8:93:3f:bd:77:fd:49:4b:f2:97:32:c7:
c9:29:bf:1f:c1:44:e1:62:e5:93:b3:3b:79:ec:86:
d5:e9:e1:c8:4d:74:d0:49:ea:a1:32:96:35:3c:6a:
e8:b7:cd:8a:b3:7f:84:3b:c3:69:04:3f:f9:d0:56:
e9:ec:31:b3:e9:35:22:16:81:4d:c2:67:cf:eb:72:
4e:f5:2c:4d:06:30:00:6c:b3:eb:e0:20:95:9a:42:
a3:4e:ae:df:17:6e:f3:b8:70:75:b3:d0:81:b7:93:
f8:96:40:0c:f5:b6:6d:3a:6a:2e:10:cc:35:a3:96:
f1:f8:7e:b6:50:f2:1b:29:06:d7:cd:19:10:f2:c3:
c5:b7:44:2b:83:8b:75:74:79:be:90:de:a6:f9:ba:
9d:2a:97:86:98:43:93:81:ee:79:43:79:50:2b:9f:
65:23:f6:6f:4e:0a:ff:1a:1e:23:bb:dc:dd:90:13:
8c:a0:2f:e2:0d:e8:5b:21:96:8c:15:d4:fc:b1:11:
87:09:b3:03:02:23:af:d3:a1:ec:7d:02:40:ca:4c:
55:eb:7b:1e:a2:51:63:d0:a6:99:a1:c5:03:78:4a:
41:73:fc:09:09:b7:72:71:db:c7:36:2d:70:81:bd:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:78:9E:6B:59:6E:71:05:E7:05:02:CE:AE:86:1B:C8:F0:35:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/29c7a4b9-a3d8-30fd-95c4-91bed8d0771a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
X509v3 Authority Key Identifier:
keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.120.0-198.176.125.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:00:dd:94:30:7b:78:30:e0:2a:3b:d3:37:9b:ff:ee:57:c2:
77:fe:75:46:60:c6:87:97:ce:ac:5f:d3:03:4e:6e:c2:a9:69:
cc:2e:d2:6a:b0:9f:18:0d:bf:c2:93:f9:a9:28:fb:56:7b:61:
2d:09:2b:e6:fd:04:c8:ac:ee:40:2e:e2:c6:2d:20:d9:eb:e8:
8a:ba:0d:4c:d5:cd:0d:da:c0:e3:6e:6e:db:17:79:91:7c:4e:
63:32:f3:05:ae:38:61:c5:a1:73:18:74:87:f4:4a:1d:26:09:
b2:9a:e5:4d:dc:b4:d3:2c:f3:9b:ea:fa:bf:d9:4c:d5:bf:f2:
ec:18:6e:cf:56:a6:36:d1:33:2c:57:98:5d:97:83:ba:84:af:
39:ce:b9:5a:1b:d6:65:bb:6d:35:3d:22:cc:bc:65:f6:96:b3:
f7:8d:e2:cd:b8:d7:72:88:5b:76:08:a8:36:d7:d1:d2:18:fc:
00:7b:98:13:fd:7e:10:81:ab:03:e8:c6:95:b3:fb:a8:09:82:
7a:2c:c7:8d:70:70:5b:05:4a:db:02:de:54:7c:89:c6:4a:22:
56:31:df:90:4b:2c:10:ef:04:20:56:55:cb:20:88:4c:82:23:
16:7f:00:95:5b:8f:3e:00:36:9e:d1:be:22:cd:a7:f4:60:5c:
24:5b:66:7c
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWD/AfIgbfAhYl7ZG14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyMzkxNDktZmEwYi00MzI1LWI4ZGMtZmQwZTI1MDQ1
NGMyMB4XDTIyMDgxODE5MDMwOFoXDTI1MDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
MmMxY2U5NzktYzY2ZC00ZTI2LTkyY2ItZGQ1OTFiMmIxMTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVOKN45bPzkXwR0iTHlGxw2okz+9d/1JS/KX
MsfJKb8fwUThYuWTszt57IbV6eHITXTQSeqhMpY1PGrot82Ks3+EO8NpBD/50Fbp
7DGz6TUiFoFNwmfP63JO9SxNBjAAbLPr4CCVmkKjTq7fF27zuHB1s9CBt5P4lkAM
9bZtOmouEMw1o5bx+H62UPIbKQbXzRkQ8sPFt0Qrg4t1dHm+kN6m+bqdKpeGmEOT
ge55Q3lQK59lI/ZvTgr/Gh4ju9zdkBOMoC/iDehbIZaMFdT8sRGHCbMDAiOv06Hs
fQJAykxV63seolFj0KaZocUDeEpBc/wJCbdycdvHNi1wgb2KxQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFImEeJ5rWW5xBecFAs6uhhvI8DUxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNjIz
OTE0OS1mYTBiLTQzMjUtYjhkYy1mZDBlMjUwNDU0YzIvMjljN2E0YjktYTNkOC0z
MGZkLTk1YzQtOTFiZWQ4ZDA3NzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTYyMzkxNDktZmEwYi00MzI1LWI4
ZGMtZmQwZTI1MDQ1NGMyL2E2MjM5MTQ5LWZhMGItNDMyNS1iOGRjLWZkMGUyNTA0
NTRjMi5jcmwwHwYDVR0jBBgwFoAUXhqfqO2JLdZA54wAofK0/3LXMWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNjIzOTE0OS1mYTBiLTQzMjUtYjhkYy1mZDBl
MjUwNDU0YzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPGsHgD
BAHGsHwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAbADdlDB7eDDgKjvTN5v/7lfCd/51RmDGh5fOrF/TA05u
wqlpzC7SarCfGA2/wpP5qSj7VnthLQkr5v0EyKzuQC7ixi0g2evoiroNTNXNDdrA
425u2xd5kXxOYzLzBa44YcWhcxh0h/RKHSYJsprlTdy00yzzm+r6v9lM1b/y7Bhu
z1amNtEzLFeYXZeDuoSvOc65WhvWZbttNT0izLxl9paz943izbjXcohbdgioNtfR
0hj8AHuYE/1+EIGrA+jGlbP7qAmCeizHjXBwWwVK2wLeVHyJxkoiVjHfkEssEO8E
IFZVyyCITIIjFn8AlVuPPgA2ntG+Is2n9GBcJFtmfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org