Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/028504ba-e954-3c55-aff1-377061aa8454.roa
File: 028504ba-e954-3c55-aff1-377061aa8454.roa (raw, json)
Hash identifier: OJON+HAgzaj4aHbO1rPR8h0ZUPC4hh+ubLCOtwJwYd8=
Subject key identifier: A9:FB:0C:46:BA:50:CB:BD:5B:B3:F9:11:27:B7:17:F9:A3:42:9E:9D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661EC65C238D5FB2316DA140
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/028504ba-e954-3c55-aff1-377061aa8454.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 139.55.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1e:c6:5c:23:8d:5f:b2:31:6d:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=c948612b-40e8-4e1a-b035-7a599dea3b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:5d:52:de:9a:52:cd:28:96:50:37:a2:8b:
60:b2:e8:d5:bb:df:e6:1e:68:c1:a8:78:c9:f6:0a:
9c:df:e2:50:3c:4f:b6:8b:05:39:8a:a6:58:47:13:
9d:64:f2:12:45:a1:ea:eb:9e:af:a3:4c:0b:ae:93:
61:19:78:da:39:4b:6c:5c:84:49:10:5b:46:f8:e1:
14:31:1b:ef:f8:b5:57:85:6b:c3:67:aa:ca:73:1e:
c1:98:9a:23:6c:31:ef:00:1a:2b:20:68:3f:63:31:
c2:97:27:96:e8:7c:9d:2b:29:e7:f4:a8:e6:3e:ae:
d5:29:61:f6:9a:4d:4d:05:ff:66:48:ab:ce:d5:99:
e7:be:fb:bd:26:8b:b9:20:24:25:97:a4:f1:bf:d4:
0f:ce:93:b2:ac:4f:6b:8e:c4:14:0e:00:de:70:ea:
42:88:3a:e1:e5:1d:b5:91:2d:c2:72:18:64:a3:45:
0c:6a:b0:ca:18:e8:25:c7:00:1e:3b:0e:a5:13:a4:
83:89:31:3f:d6:a1:28:47:44:3b:07:56:55:b8:2b:
02:95:81:92:98:cb:6d:09:fe:4e:2a:8c:74:db:d1:
60:8a:70:f6:7e:5c:30:25:78:95:63:d6:b4:f5:44:
c1:ce:15:03:1e:d5:47:ca:93:c2:bf:a7:b7:0c:4d:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FB:0C:46:BA:50:CB:BD:5B:B3:F9:11:27:B7:17:F9:A3:42:9E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/028504ba-e954-3c55-aff1-377061aa8454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
139.55.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:d9:82:21:ec:55:f5:2f:bb:09:d0:a3:be:ea:b2:e4:60:32:
85:46:a7:92:a2:80:a6:74:fc:48:d8:a6:79:a6:a6:45:b3:56:
35:75:56:c1:b9:2b:68:62:7a:5b:ba:fc:87:c3:cb:ae:0c:92:
22:15:79:62:79:e9:65:86:4b:af:f9:83:69:3d:16:a9:91:f0:
38:37:8f:87:c9:7e:1d:0f:6f:9a:d9:81:62:8a:c7:11:57:43:
6d:de:a3:35:f2:02:4e:f6:f2:98:dc:44:2c:b9:0e:5b:3d:1d:
a4:e2:e9:77:3c:da:52:2e:40:3d:53:e5:b1:18:2a:bd:f9:bb:
7c:2f:8f:69:5e:ec:58:24:2d:de:66:0f:b4:6d:e7:e1:d3:bf:
0d:80:2d:82:27:cc:c7:1d:88:7d:7e:b9:d8:70:58:8c:13:78:
19:cb:6f:3e:8d:2f:49:c8:d5:33:96:56:58:3b:fa:cd:24:71:
4a:8e:f8:01:40:0b:31:15:33:ff:f2:f7:be:ef:19:13:95:da:
b6:53:31:ed:46:da:35:0c:29:3c:bd:de:03:42:75:cc:89:fd:
3c:0b:03:41:fc:ca:cc:70:8f:4d:79:dd:29:54:f3:0e:27:a0:
28:08:5e:ba:a1:87:f1:09:f4:7b:51:56:be:ae:60:7e:e7:d8:
01:2f:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:52 2025 by rpki-client