Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0fa9f80d-6ec2-32d6-a458-8500b65b14d5.roa
File: 0fa9f80d-6ec2-32d6-a458-8500b65b14d5.roa (raw, json)
Hash identifier: Qq0uFwRx5fM9Oq8OOeP1wqgfIy7CbKupoq+DZfn/wV0=
Subject key identifier: B5:65:55:D8:D6:5F:CA:E9:5C:2E:88:F2:27:F9:F2:01:3C:4E:30:05
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FC5C36D00A38AD14C9E02B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0fa9f80d-6ec2-32d6-a458-8500b65b14d5.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 66.32.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:c5:c3:6d:00:a3:8a:d1:4c:9e:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=beb29c19-b7cb-4cb1-8674-b99138b80cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:3b:5e:c2:bf:56:60:0c:4d:2a:66:2c:7b:
d8:cd:5e:24:24:35:59:6b:0d:58:e8:32:57:e0:da:
42:3c:17:b8:e4:71:b4:4b:f4:c5:d2:81:af:45:9f:
00:9b:ad:04:0f:03:76:16:a7:cc:47:fe:eb:33:6d:
78:29:82:76:35:88:90:6e:96:5a:44:0c:e4:52:74:
ea:5c:22:46:76:3c:05:4e:02:ff:fb:2f:64:f4:5c:
f4:e9:30:17:51:55:75:a0:bb:01:38:a4:28:cc:b2:
65:c9:da:3c:ab:76:d7:60:f9:f3:97:61:c8:2c:6a:
14:4e:95:65:8a:04:bf:06:ce:67:3e:ce:5c:0b:f3:
4c:9c:f1:2c:13:33:b6:ec:cf:85:1f:e6:a9:2f:ab:
25:7e:27:76:15:aa:a2:1d:83:a8:49:93:10:ce:0f:
88:5f:ba:77:16:73:94:3a:b9:6a:18:01:33:49:e8:
81:80:2c:58:ea:5a:50:5a:31:be:7c:11:48:0a:25:
e1:2a:59:12:c3:33:58:92:e3:4e:9d:bc:8b:94:8c:
69:53:77:45:34:9f:f9:36:0f:df:30:21:c6:f9:35:
b4:c1:9e:c5:7a:e8:e9:62:93:2b:74:22:a7:4d:46:
d6:cc:cc:8d:ad:ff:7f:ad:43:14:c8:85:06:50:2f:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:55:D8:D6:5F:CA:E9:5C:2E:88:F2:27:F9:F2:01:3C:4E:30:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0fa9f80d-6ec2-32d6-a458-8500b65b14d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.32.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:a8:02:d9:54:63:15:5e:0d:7c:85:60:43:b5:a2:9e:28:0c:
e5:64:49:0e:a9:86:0c:4c:42:d1:75:d1:04:b5:c9:9e:03:ae:
2e:76:f1:ea:ab:ab:b8:7e:f4:49:1b:a9:0d:30:e3:0a:cf:72:
74:0f:63:1f:14:94:c1:8e:46:45:e3:2d:bc:e0:11:42:92:7a:
bd:0d:8a:e1:f8:af:cf:7f:86:39:e7:6c:2e:8e:4f:d2:6a:7f:
df:91:4c:25:ca:04:80:48:52:51:4d:0a:b5:e7:82:07:22:d9:
ae:a9:c1:75:6b:a3:68:d2:6a:22:2c:3f:8f:71:38:89:3b:79:
21:ab:de:b5:de:b5:c5:a4:0e:4b:86:03:f7:5f:a6:ec:d9:4c:
f4:0d:e3:86:d1:94:a7:6a:02:90:b0:73:01:05:aa:97:8d:b5:
f7:43:88:35:c1:8f:c6:98:88:54:30:54:24:1c:0a:11:a0:42:
d4:09:29:5e:79:7e:ff:1f:72:12:76:0c:2f:5a:fd:7d:54:dd:
84:e1:ee:ff:32:d5:e3:96:b6:a2:c8:e5:83:e9:b0:2c:a6:74:
38:ec:4f:4d:ac:15:d4:3b:60:c7:65:3d:df:db:32:13:cc:96:
15:c9:8d:80:96:92:b2:1c:a6:25:c9:96:b7:f1:ac:d3:82:47:
6d:ce:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:45 2025 by rpki-client