Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3e9e5fa-632c-3fe9-917e-4a4fc13408b8.roa
File: b3e9e5fa-632c-3fe9-917e-4a4fc13408b8.roa (raw, json)
Hash identifier: KR5fFGeJqKX1uT9AcQhFlWZ1t6ig0a9MLpHII41JnD8=
Subject key identifier: 55:4E:75:14:01:E3:E1:51:AA:3B:F3:2C:2E:96:7B:C7:D4:15:A9:D5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661DF815889632F373041060
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3e9e5fa-632c-3fe9-917e-4a4fc13408b8.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.21.136.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:f8:15:88:96:32:f3:73:04:10:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=bcf6909a-846b-41ba-a319-0bb5a03216d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:2a:74:e7:cd:0d:b1:27:39:d8:1a:f8:b5:
bf:70:b6:15:75:0e:25:42:76:8d:01:33:7a:09:4c:
f2:2f:78:3d:d5:bf:ce:df:84:3a:9c:7d:45:9b:e7:
9e:e2:6b:0c:74:4b:f0:68:7a:f7:cb:c2:db:32:22:
8e:ff:4a:f1:29:64:35:d8:ed:75:2a:b5:d7:cb:76:
b3:ca:c0:30:2f:f9:67:45:f5:d5:30:d3:d3:ca:40:
f4:06:3d:23:05:1b:21:42:eb:55:c8:7f:9e:46:11:
21:be:86:bb:07:4a:b1:74:ea:19:1f:05:3d:16:4b:
62:c6:1a:0e:4e:10:ad:fd:b7:02:27:1b:ba:ef:a1:
01:6a:e0:c3:98:72:5d:e0:66:b7:fb:76:6a:1b:99:
ad:80:06:2d:4a:5e:a9:fc:b4:33:89:52:2d:50:62:
90:68:32:e7:dc:d7:d8:93:c4:26:a8:6e:7d:1d:12:
d5:dd:ac:a7:b8:32:20:9f:e8:0a:fa:80:4b:5e:89:
08:88:76:fb:8a:83:07:6a:c6:3e:f6:0b:f7:5f:6d:
43:f6:40:73:38:b4:9c:a3:00:90:54:10:cb:b7:4f:
59:52:0d:08:5e:e4:55:da:45:d3:ac:6e:27:c7:7c:
50:73:b4:51:27:a5:f7:3a:8a:88:7f:ca:f6:b3:52:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:75:14:01:E3:E1:51:AA:3B:F3:2C:2E:96:7B:C7:D4:15:A9:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3e9e5fa-632c-3fe9-917e-4a4fc13408b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:40:a3:02:46:64:7a:0f:7a:9d:ea:49:ed:bd:8a:8e:75:c3:
ea:6f:b3:43:25:e7:1e:92:1b:e9:b3:87:3b:a8:0c:60:20:93:
86:00:5f:fa:0e:02:a1:4c:cb:f2:26:44:ef:80:cf:f5:5f:8b:
78:ed:21:6f:1d:5e:b1:35:c5:e8:20:4a:33:13:5d:3f:2d:31:
6b:73:6b:22:1e:35:d0:d3:0a:41:26:4e:0f:3f:be:98:97:dc:
a6:67:6f:7f:99:a8:cf:b8:c6:56:1f:03:98:f1:fc:f3:0c:2d:
5c:e7:72:b6:7d:8d:b8:1c:19:11:cf:ba:a1:9b:3d:c7:f9:55:
f6:5e:30:02:ba:21:e8:78:30:19:a4:05:af:5a:3a:33:c8:d1:
58:4f:82:f4:8a:9f:53:53:85:c4:c0:c0:5f:a3:b3:af:89:b0:
74:c8:02:ce:b2:ea:28:d8:fc:19:e3:9d:a4:17:6d:58:58:cd:
43:de:94:8e:a3:e5:b9:7c:d9:49:23:4e:97:72:c3:ad:0c:fa:
87:a6:ae:39:fc:7f:bf:9e:fa:c0:be:6e:e3:e4:55:d1:3b:2b:
eb:12:fe:df:f5:ac:f4:66:42:4e:ee:47:6a:2a:da:cc:e1:c7:
72:6c:8b:03:a5:a8:e4:c1:ff:45:51:f6:ab:ec:a8:7c:9a:9c:
b3:7c:f8:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHfgViJYy83MEEGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmNmNjkwOWEtODQ2Yi00MWJhLWEzMTktMGJiNWEwMzIxNmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDsqdOfNDbEnOdga+LW/cLYVdQ4lQnaNATN6
CUzyL3g91b/O34Q6nH1Fm+ee4msMdEvwaHr3y8LbMiKO/0rxKWQ12O11KrXXy3az
ysAwL/lnRfXVMNPTykD0Bj0jBRshQutVyH+eRhEhvoa7B0qxdOoZHwU9FktixhoO
ThCt/bcCJxu676EBauDDmHJd4Ga3+3ZqG5mtgAYtSl6p/LQziVItUGKQaDLn3NfY
k8QmqG59HRLV3aynuDIgn+gK+oBLXokIiHb7ioMHasY+9gv3X21D9kBzOLScowCQ
VBDLt09ZUg0IXuRV2kXTrG4nx3xQc7RRJ6X3OoqIf8r2s1ILmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFVOdRQB4+FRqjvzLC6We8fUFanVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjNlOWU1ZmEtNjMyYy0z
ZmU5LTkxN2UtNGE0ZmMxMzQwOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhAowJGZHoPep3qSe29io51w+pvs0Ml5x6SG+mzhzuoDGAgk4YAX/oO
AqFMy/ImRO+Az/Vfi3jtIW8dXrE1xeggSjMTXT8tMWtzayIeNdDTCkEmTg8/vpiX
3KZnb3+ZqM+4xlYfA5jx/PMMLVzncrZ9jbgcGRHPuqGbPcf5VfZeMAK6Ieh4MBmk
Ba9aOjPI0VhPgvSKn1NThcTAwF+js6+JsHTIAs6y6ijY/BnjnaQXbVhYzUPelI6j
5bl82UkjTpdyw60M+oemrjn8f7+e+sC+buPkVdE7K+sS/t/1rPRmQk7uR2oq2szh
x3JsiwOlqOTB/0VR9qvsqHyanLN8+BQ=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:09 2024 by rpki-client on console-fra.rpki-client.org