Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a8ad066-1cef-35ad-9111-b24b3083f439.roa
File: 5a8ad066-1cef-35ad-9111-b24b3083f439.roa (raw, json)
Hash identifier: jhWzaexq6JYsr9YJhanz2qSqxEza9KmhVuqsrhvyWJ8=
Subject key identifier: 80:7F:DB:DA:71:A2:6A:CB:5B:56:81:5D:D3:76:B3:8B:12:42:CD:A5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6617347119370CE4978E81C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a8ad066-1cef-35ad-9111-b24b3083f439.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 69.40.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:17:34:71:19:37:0c:e4:97:8e:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=f3ddc852-db4e-4a2c-9b35-ba229b970680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:18:43:20:9f:c8:9a:f4:ea:67:0e:9d:66:
f3:d8:f1:f7:51:af:48:e2:f5:9c:50:1a:0e:51:3e:
f6:6c:fe:a7:4e:56:61:cf:19:d3:63:ef:33:4c:8e:
7e:46:d5:19:d2:40:b1:dc:8a:b2:80:8d:e2:b1:60:
a0:99:99:1c:6c:81:28:28:d2:b5:7a:5b:f9:f4:ea:
be:f5:34:85:26:ef:83:cb:77:fe:af:bd:19:15:4a:
69:94:c2:80:25:b9:2d:0c:47:09:3e:09:b1:ab:bf:
e6:55:03:f8:59:86:75:64:6b:5e:f0:4a:fd:e5:b4:
03:76:ff:ad:69:d0:f6:62:e7:9e:b2:12:6b:5b:0b:
e7:d9:da:9c:2a:92:51:db:db:38:f2:6f:7e:51:fc:
be:f6:90:0a:8d:df:5b:19:ad:41:d8:6c:ca:0d:ff:
bd:b8:bf:c6:5c:2b:63:5b:85:3a:6c:84:d7:43:13:
70:1e:46:a5:3f:8f:9c:b3:36:dd:c1:0f:7d:20:e3:
c8:09:c6:e3:dd:94:45:11:82:fc:ca:96:1a:3e:c0:
7a:1f:a1:da:da:e7:05:87:69:5a:1e:e7:f6:a7:fd:
5e:bc:ef:81:c5:b4:59:6a:4a:6b:69:9f:06:6d:64:
8e:be:58:4c:b5:e0:ce:27:a6:4e:0d:b4:f0:92:23:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:DB:DA:71:A2:6A:CB:5B:56:81:5D:D3:76:B3:8B:12:42:CD:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a8ad066-1cef-35ad-9111-b24b3083f439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.40.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:5a:44:53:18:55:3b:01:a6:48:a7:f1:d5:03:0f:a8:f9:b9:
33:e2:73:3a:1b:7f:a1:b1:bc:d1:fc:8e:cb:19:25:9e:c1:db:
ac:fb:0a:a2:2e:83:e3:46:9f:45:9d:2f:33:b9:79:5f:8b:f8:
99:6f:5a:5e:bd:84:ed:73:d2:e0:cd:35:fd:2f:dd:04:4e:c7:
02:84:70:2e:e0:8c:e3:d1:73:5b:62:1d:c9:57:e1:c9:69:30:
b8:74:aa:fa:ff:2a:a1:ed:60:d5:76:65:fb:5d:de:db:4a:22:
6c:fb:d0:da:20:98:12:84:a4:ef:e4:a9:5e:39:0f:d2:42:fe:
d2:51:2a:6c:1d:83:dc:13:5f:19:4d:17:0d:0f:15:4b:35:f8:
8a:01:52:60:dc:14:d9:95:cc:07:b6:d3:65:96:92:0e:ed:ba:
d5:2c:14:cd:b7:03:d0:b1:10:d5:0e:8b:5c:16:b2:40:a9:b2:
44:99:96:68:6d:54:1a:e5:14:a9:e4:4b:36:02:1f:5d:f6:0c:
15:5f:4e:2f:46:a4:29:58:70:ea:20:03:43:ce:34:54:1d:2d:
8f:25:59:e5:65:c6:c8:f3:fe:e2:a4:f2:bb:14:47:98:cf:d6:
df:d6:17:e4:6d:e7:2d:a7:43:67:55:05:33:53:a4:26:e8:30:
a1:c6:2d:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mFzRxGTcM5JeOgcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjNkZGM4NTItZGI0ZS00YTJjLTliMzUtYmEyMjliOTcwNjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5MYQyCfyJr06mcOnWbz2PH3Ua9I4vWcUBoO
UT72bP6nTlZhzxnTY+8zTI5+RtUZ0kCx3IqygI3isWCgmZkcbIEoKNK1elv59Oq+
9TSFJu+Dy3f+r70ZFUpplMKAJbktDEcJPgmxq7/mVQP4WYZ1ZGte8Er95bQDdv+t
adD2YueeshJrWwvn2dqcKpJR29s48m9+Ufy+9pAKjd9bGa1B2GzKDf+9uL/GXCtj
W4U6bITXQxNwHkalP4+cszbdwQ99IOPICcbj3ZRFEYL8ypYaPsB6H6Ha2ucFh2la
Huf2p/1evO+BxbRZakpraZ8GbWSOvlhMteDOJ6ZODbTwkiPMwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIB/29pxomrLW1aBXdN2s4sSQs2lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWE4YWQwNjYtMWNlZi0z
NWFkLTkxMTEtYjI0YjMwODNmNDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRShYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJaRFMYVTsBpkin8dUDD6j5uTPiczobf6GxvNH8jssZJZ7B26z7CqIu
g+NGn0WdLzO5eV+L+JlvWl69hO1z0uDNNf0v3QROxwKEcC7gjOPRc1tiHclX4clp
MLh0qvr/KqHtYNV2Zftd3ttKImz70NogmBKEpO/kqV45D9JC/tJRKmwdg9wTXxlN
Fw0PFUs1+IoBUmDcFNmVzAe202WWkg7tutUsFM23A9CxENUOi1wWskCpskSZlmht
VBrlFKnkSzYCH132DBVfTi9GpClYcOogA0PONFQdLY8lWeVlxsjz/uKk8rsUR5jP
1t/WF+Rt5y2nQ2dVBTNTpCboMKHGLf0=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:00 2024 by rpki-client on console-fra.rpki-client.org