Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4591ec6-7db3-3916-ad86-080296cffb40.roa
File: c4591ec6-7db3-3916-ad86-080296cffb40.roa (raw, json)
Hash identifier: VVQ565gDBsTbED9yzqVZ7vfM5XM1EpUJiltQ0rAQq2U=
Subject key identifier: D1:D7:48:9E:40:62:D0:6B:72:34:B8:85:39:5D:E8:61:03:96:B5:8C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661DA520C2B84745FFACCB00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4591ec6-7db3-3916-ad86-080296cffb40.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.19.144.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:a5:20:c2:b8:47:45:ff:ac:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=2061168e-ca08-4698-8651-3acc0569fea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:d4:01:89:55:27:1d:ab:8f:83:5a:ab:b1:
0e:54:a6:f9:70:46:4c:a1:e5:1a:28:31:31:d4:16:
98:61:5a:4d:cf:b4:e7:fa:dc:d5:ad:09:b9:1f:7e:
82:fa:e9:65:b2:ff:a4:a0:f8:fe:20:79:51:66:60:
80:c8:28:4d:d8:7a:06:e2:37:e6:4d:71:6d:99:31:
d8:e9:81:ed:22:d6:5f:c2:a8:02:ed:1d:03:e7:43:
8b:44:2e:7e:c7:13:30:c2:38:25:e1:8c:7c:35:59:
6a:c5:ec:96:b9:24:c5:6b:84:8d:db:ad:14:2a:9d:
2b:5b:f6:4e:2d:5a:17:d1:44:4d:e1:5e:eb:80:33:
4e:02:2f:d3:43:b8:10:0c:b5:39:a5:5f:6e:00:3f:
75:6c:ad:ca:7a:40:67:aa:7c:bd:08:a8:28:34:77:
9b:ed:45:57:c5:34:3f:7a:b2:2e:15:ff:9e:80:70:
f2:9a:9f:42:7f:da:86:63:77:b6:6d:b3:c8:f2:94:
4c:a7:69:5f:02:8c:45:f2:b7:61:5d:96:ad:06:93:
01:15:98:d4:ea:19:f6:ed:ca:49:67:ad:e9:99:c8:
08:9c:2c:cf:26:60:e9:05:3b:ea:6f:1f:4e:1a:e2:
2f:db:fd:88:92:05:7a:0b:fe:b7:81:46:94:8d:4a:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D7:48:9E:40:62:D0:6B:72:34:B8:85:39:5D:E8:61:03:96:B5:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4591ec6-7db3-3916-ad86-080296cffb40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:30:6a:c0:a5:bc:1e:65:ec:b3:84:7d:71:7b:40:6f:a2:91:
eb:66:c8:82:29:db:d9:c5:bc:59:9b:76:75:20:e4:4a:76:9b:
82:a5:4d:ae:d8:73:d8:74:e1:4c:e6:03:c9:23:29:c2:48:0c:
de:f3:c1:d5:db:39:4c:11:43:59:bf:e4:89:5f:8d:f3:98:30:
b6:b4:43:af:4b:35:44:94:b1:ea:9a:37:02:74:a7:8b:a0:b2:
80:e2:d9:91:af:6e:0e:cc:c5:12:fd:26:a1:e5:6c:c0:9d:6d:
d0:ac:4f:88:05:41:08:cf:77:e6:4d:9c:0b:e6:68:e4:af:fc:
91:8a:b1:9b:1d:0b:63:bb:c7:5f:9d:88:a2:11:86:38:06:d7:
52:da:ea:4c:be:a8:45:76:ad:f7:7e:53:2e:c8:f9:d3:7f:d2:
7f:bf:bf:05:4e:f1:11:6b:3c:a6:94:95:c4:e0:14:1c:18:52:
43:0d:71:45:e0:7b:6c:b1:bd:df:3c:c8:df:65:e9:34:db:07:
7d:99:88:a3:47:19:76:ee:4a:0e:22:3b:00:93:be:a9:6b:07:
b6:ad:c4:8d:17:b9:48:01:da:a7:0c:4d:22:f5:a0:d9:3a:6b:
a1:82:92:62:0b:04:2d:7e:ae:aa:59:fc:f4:75:f0:c6:72:26:
c0:a0:be:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHaUgwrhHRf+sywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjA2MTE2OGUtY2EwOC00Njk4LTg2NTEtM2FjYzA1NjlmZWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfzUAYlVJx2rj4Naq7EOVKb5cEZMoeUaKDEx
1BaYYVpNz7Tn+tzVrQm5H36C+ullsv+koPj+IHlRZmCAyChN2HoG4jfmTXFtmTHY
6YHtItZfwqgC7R0D50OLRC5+xxMwwjgl4Yx8NVlqxeyWuSTFa4SN260UKp0rW/ZO
LVoX0URN4V7rgDNOAi/TQ7gQDLU5pV9uAD91bK3KekBnqny9CKgoNHeb7UVXxTQ/
erIuFf+egHDymp9Cf9qGY3e2bbPI8pRMp2lfAoxF8rdhXZatBpMBFZjU6hn27cpJ
Z63pmcgInCzPJmDpBTvqbx9OGuIv2/2IkgV6C/63gUaUjUorrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHXSJ5AYtBrcjS4hTld6GEDlrWMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQ1OTFlYzYtN2RiMy0z
OTE2LWFkODYtMDgwMjk2Y2ZmYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkwasClvB5l7LOEfXF7QG+iketmyIIp29nFvFmbdnUg5Ep2m4KlTa7Y
c9h04UzmA8kjKcJIDN7zwdXbOUwRQ1m/5IlfjfOYMLa0Q69LNUSUseqaNwJ0p4ug
soDi2ZGvbg7MxRL9JqHlbMCdbdCsT4gFQQjPd+ZNnAvmaOSv/JGKsZsdC2O7x1+d
iKIRhjgG11La6ky+qEV2rfd+Uy7I+dN/0n+/vwVO8RFrPKaUlcTgFBwYUkMNcUXg
e2yxvd88yN9l6TTbB32ZiKNHGXbuSg4iOwCTvqlrB7atxI0XuUgB2qcMTSL1oNk6
a6GCkmILBC1+rqpZ/PR18MZyJsCgvgs=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:32 2024 by rpki-client on console-ams.rpki-client.org