Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/d3c5a84e-496b-33b5-b24f-88effa982aaf.roa
File: d3c5a84e-496b-33b5-b24f-88effa982aaf.roa (raw, json)
Hash identifier: gVmZ3ClV8+MTvRM5QAGLq5eOMzfl3Tbf5HFlc2iN6zE=
Subject key identifier: A4:05:67:0C:4A:47:88:0D:B5:AE:55:95:20:67:1F:0E:DA:25:3C:5A
Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial: 010D0C9F432858451A1592E7E3E5BA07DE65B2C0
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/d3c5a84e-496b-33b5-b24f-88effa982aaf.roa
Signing time: Tue 05 Mar 2024 02:00:26 +0000
ROA not before: Tue 05 Mar 2024 02:00:26 +0000
ROA not after: Mon 03 Jun 2024 01:00:26 +0000
asID: 918
IP address blocks: 64.112.124.0/24 maxlen: 24
206.168.212.0/22 maxlen: 22
2602:fbdf::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Apr 2024 20:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1a:15:92:e7:e3:e5:ba:07:de:65:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Validity
Not Before: Mar 5 02:00:26 2024 GMT
Not After : Jun 3 01:00:26 2024 GMT
Subject: CN=f2edd117-64d1-47dd-9f45-fd74edfa0974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:74:c0:e9:8f:1f:21:1b:a1:c3:ed:b7:f6:
85:78:a8:f0:25:50:d5:5b:34:02:60:8b:17:3b:f4:
c2:7f:12:f1:1e:07:21:e9:90:8d:a5:37:8f:24:7f:
dc:6f:b6:0f:b6:b0:0d:33:a6:ae:fd:26:b3:e3:42:
04:b1:d5:9a:b8:0b:e8:5d:e8:97:37:6a:1f:13:c1:
f1:10:17:86:e7:7b:4a:c9:62:16:a5:4f:08:90:92:
7a:ff:09:7d:1d:db:bd:13:38:0d:54:da:0d:19:aa:
d7:37:31:35:46:d8:4c:ab:8a:1b:e1:fc:2e:65:37:
a5:09:60:1c:45:50:65:7e:c1:fa:5d:bd:e6:76:fd:
f5:13:c8:db:d9:d2:f0:90:6c:c7:1c:0e:0f:fb:05:
3c:70:2c:6a:78:27:d8:51:ae:dd:a0:ad:ae:95:7a:
14:94:e5:18:6c:95:1d:c1:a3:36:ee:f3:6a:57:45:
4c:57:12:60:8b:85:dc:dc:0e:17:83:90:2a:6e:85:
de:3e:54:6b:16:fe:70:f7:c4:aa:13:67:c3:a8:b6:
39:20:36:c8:3b:73:3a:37:a9:5e:75:d6:26:85:d1:
55:3f:31:d8:b4:06:a2:89:d5:5c:7a:40:7c:af:f4:
14:c1:1d:ec:24:ca:55:6b:c0:51:8a:76:bb:7f:4e:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:05:67:0C:4A:47:88:0D:B5:AE:55:95:20:67:1F:0E:DA:25:3C:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/d3c5a84e-496b-33b5-b24f-88effa982aaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
X509v3 Authority Key Identifier:
keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.124.0/24
206.168.212.0/22
IPv6:
2602:fbdf::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:37:e6:b3:c6:f2:6d:44:a8:0a:44:ae:b0:b8:40:78:ed:6d:
5f:f1:7f:b6:33:96:2b:df:c5:8e:c3:9b:d7:73:1e:ca:b2:b4:
8e:01:70:64:52:78:10:72:eb:a0:da:cc:81:a7:3b:d5:8a:03:
f7:94:96:88:93:ea:ba:25:57:57:27:70:66:03:81:55:c4:1c:
cd:c2:03:dc:f3:f5:d0:84:7f:c3:f4:b4:25:79:d7:a8:8c:5c:
8f:af:36:b2:7a:7d:7a:b1:3d:9a:33:a6:aa:c9:4e:5b:36:2c:
c7:f1:c6:d0:25:b8:3c:25:09:3e:cc:2d:78:ff:a5:5a:0f:75:
8c:13:8b:81:ce:d4:f8:18:81:37:bd:8b:53:19:8a:7c:90:99:
57:fc:0d:d8:95:d0:bb:42:80:59:df:2c:6f:43:04:2e:8c:05:
26:40:83:8f:37:a0:a9:61:7c:d9:1f:24:74:03:ed:70:a8:4f:
9d:61:54:6a:86:31:47:31:2c:b8:b5:3a:fa:f6:9a:52:39:2b:
9f:73:69:7c:66:25:6b:15:d7:0e:24:86:36:30:21:f9:b4:fc:
b6:a5:3a:33:1d:b6:f0:00:ee:44:43:0f:d5:63:97:f6:1f:73:
76:6d:98:e7:be:b1:a0:7b:dc:8e:81:ad:6f:30:51:9e:01:07:
69:bb:bd:e2
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEUaFZLn4+W6B95lssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdhNjM0MWItNWE1ZS00YWMwLWE3NjAtNWE1NDE5MGFm
OTEzMB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk
ZjJlZGQxMTctNjRkMS00N2RkLTlmNDUtZmQ3NGVkZmEwOTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNV0wOmPHyEbocPtt/aFeKjwJVDVWzQCYIsX
O/TCfxLxHgch6ZCNpTePJH/cb7YPtrANM6au/Saz40IEsdWauAvoXeiXN2ofE8Hx
EBeG53tKyWIWpU8IkJJ6/wl9Hdu9EzgNVNoNGarXNzE1RthMq4ob4fwuZTelCWAc
RVBlfsH6Xb3mdv31E8jb2dLwkGzHHA4P+wU8cCxqeCfYUa7doK2ulXoUlOUYbJUd
waM27vNqV0VMVxJgi4Xc3A4Xg5AqboXePlRrFv5w98SqE2fDqLY5IDbIO3M6N6le
ddYmhdFVPzHYtAaiidVcekB8r/QUwR3sJMpVa8BRina7f06KVQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFKQFZwxKR4gNta5VlSBnHw7aJTxaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2
MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0MTkwYWY5MTMvZDNjNWE4NGUtNDk2Yi0z
M2I1LWIyNGYtODhlZmZhOTgyYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTdhNjM0MWItNWE1ZS00YWMwLWE3
NjAtNWE1NDE5MGFmOTEzL2U3YTYzNDFiLTVhNWUtNGFjMC1hNzYwLTVhNTQxOTBh
ZjkxMy5jcmwwHwYDVR0jBBgwFoAUMaKt48OVDcaXQR4vjLH8a7eDJcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0
MTkwYWY5MTMuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQHB8AwQC
zqjUMA8EAgACMAkDBwQmAvvfAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARTfms8bybUSoCkSusLhAeO1t
X/F/tjOWK9/FjsOb13MeyrK0jgFwZFJ4EHLroNrMgac71YoD95SWiJPquiVXVydw
ZgOBVcQczcID3PP10IR/w/S0JXnXqIxcj682snp9erE9mjOmqslOWzYsx/HG0CW4
PCUJPswteP+lWg91jBOLgc7U+BiBN72LUxmKfJCZV/wN2JXQu0KAWd8sb0MELowF
JkCDjzegqWF82R8kdAPtcKhPnWFUaoYxRzEsuLU6+vaaUjkrn3NpfGYlaxXXDiSG
NjAh+bT8tqU6Mx228ADuREMP1WOX9h9zdm2Y576xoHvcjoGtbzBRngEHabu94g==
-----END CERTIFICATE-----
Generated at Tue Apr 9 23:23:20 2024 by rpki-client on console-ams.rpki-client.org