Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa
File: 13f8b48d-987f-3c57-85f8-3033b23c241a.roa (raw, json)
Hash identifier: KwWcA/jqHOqB8hLclTonkMtqVwlVi4JrSkwStIefuwA=
Subject key identifier: 46:F2:7F:51:DE:23:62:DA:9B:F3:7D:C2:33:16:9F:B2:66:0C:BC:6A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D211208564F801CF998DDFA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.16.128.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 20 Feb 2025 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:20:85:64:f8:01:cf:99:8d:df:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=42f80f97-ea7c-4020-8194-a8b2468f2bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:3d:51:ab:38:2a:1a:f1:80:76:b9:91:f1:
48:c1:b5:94:6a:e2:cc:45:52:8d:4c:b8:54:fd:09:
8d:5e:61:59:1c:db:b7:16:0c:a9:a8:26:51:32:a1:
af:89:0a:f6:54:67:2e:00:9c:7e:e7:e7:ea:b1:3e:
b9:3e:35:bb:cf:ec:86:0b:dd:5f:9c:96:48:d9:9a:
57:58:ce:9d:18:f0:ef:50:58:f2:15:6e:6f:05:df:
8a:93:f9:4f:43:75:dc:0a:91:01:b8:10:b9:93:9c:
08:c0:69:4e:12:06:02:a8:22:53:c7:fa:62:65:b1:
51:b3:f8:a4:a0:68:40:0b:15:a2:47:fe:cd:aa:d7:
0d:fe:50:94:2f:b8:0f:a3:27:dd:92:1f:80:5d:69:
04:3f:97:d3:b5:0b:02:71:66:b2:ac:31:93:8f:78:
8a:8b:6e:5d:63:77:9d:a2:4a:83:85:98:f4:52:53:
77:b3:10:82:fd:ee:e9:16:41:3d:f7:0d:ba:40:cd:
ce:da:bd:c0:12:1a:5d:81:9d:41:4b:d0:a8:e8:72:
3f:0e:a7:93:ad:d5:f4:2f:c3:b2:cb:53:a8:e9:d6:
6c:90:69:70:6b:db:18:11:9f:3f:0c:df:22:6a:45:
8a:75:e9:e6:66:3a:14:64:38:ce:30:36:a7:65:a1:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F2:7F:51:DE:23:62:DA:9B:F3:7D:C2:33:16:9F:B2:66:0C:BC:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.16.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:60:56:1e:35:89:c7:ca:38:b0:f2:24:67:fc:97:09:cd:e3:
71:39:c2:7d:e1:d4:d2:4f:2a:cc:87:e6:35:11:dd:08:3b:68:
d1:ae:cf:6e:1e:d2:ee:e1:a4:35:09:c6:48:df:5d:1d:12:93:
a5:03:12:33:70:1b:dc:4f:2b:21:d1:05:82:31:a5:e9:20:c4:
1b:16:55:03:ac:e9:7b:d5:e3:ec:8f:81:fe:ef:a3:51:39:a6:
53:13:4b:39:ed:19:e3:5e:b5:ae:af:ce:8f:71:32:5f:1f:c8:
0c:3c:46:31:45:f4:97:bf:c0:a2:a9:67:bd:26:89:1a:e8:5c:
ae:db:4b:8a:ea:a1:83:5e:33:c3:d5:b5:1d:22:14:12:05:3a:
fd:2a:c4:ae:c6:32:e4:03:37:b9:d8:ca:ce:78:01:ad:17:7f:
c1:c8:a3:8e:8f:80:a2:1c:a5:43:cd:78:38:c8:62:7f:46:b7:
37:f4:fc:c9:9f:50:ae:61:0b:9b:5a:fd:91:ad:45:7d:dd:c1:
c5:d8:17:ea:e6:29:31:5c:ef:25:1c:3f:6a:c9:b5:63:60:3a:
ad:fd:90:73:a4:a9:23:36:a6:21:26:15:be:13:6c:69:b7:ba:
2e:c0:35:9c:90:88:ec:a3:f8:11:5d:61:94:0d:e3:e6:5f:4f:
a0:85:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:12 2025 by rpki-client