Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df72b1a-76b8-3d81-b474-491f80817ba7.roa
File: 1df72b1a-76b8-3d81-b474-491f80817ba7.roa (raw, json)
Hash identifier: p2ZEU7Pl0OOQ1Fjrz6LCMnBMAIwOVPxgHgUAOW6nbCk=
Subject key identifier: 29:A0:E9:A1:A1:10:46:C7:AA:F3:43:8B:EA:38:71:0C:49:BA:63:E2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6618991AA47606D636F3BCC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df72b1a-76b8-3d81-b474-491f80817ba7.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.30.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:99:1a:a4:76:06:d6:36:f3:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=f35d4d57-b4f5-4a92-ab9c-c4f2b9d4508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:bd:8b:ef:46:de:3f:67:d9:d5:1d:c6:f6:
f0:8e:13:42:13:9b:48:65:51:9a:a4:b7:aa:d3:0c:
7f:e6:42:9f:4c:10:88:5e:bb:df:d7:20:02:96:1a:
98:b5:a7:17:61:f3:ac:f0:d0:81:0a:75:74:cd:77:
a4:22:79:1a:75:50:1b:1a:af:81:5e:d1:15:41:73:
71:32:25:44:db:1b:7b:56:d6:38:55:d4:16:6b:7b:
4c:f3:52:64:68:e5:0c:9c:fd:e0:a9:6d:c4:e8:07:
00:f7:f8:7a:14:0e:8f:81:f2:e7:91:68:58:46:39:
ec:00:dc:af:0a:9a:0a:fb:46:c8:48:77:e7:b0:65:
da:89:0e:b8:54:c2:06:aa:0c:e1:92:57:72:99:eb:
dd:59:48:45:b5:80:77:42:bf:12:45:ec:25:73:75:
c5:af:1a:2f:92:8b:de:51:44:42:20:d5:04:05:47:
34:89:b3:00:7f:7b:72:48:ef:52:0a:ad:a5:d6:c8:
6a:6f:25:ab:2b:74:1d:cb:5a:00:38:0c:5e:36:eb:
fe:87:fb:ea:40:8e:96:26:bc:5f:24:31:95:4f:fb:
ed:6c:a4:ab:68:61:9a:35:68:e2:f8:b1:4a:80:2c:
54:c6:9b:1f:81:d9:b1:44:c9:16:2e:fe:48:d5:b8:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:E9:A1:A1:10:46:C7:AA:F3:43:8B:EA:38:71:0C:49:BA:63:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df72b1a-76b8-3d81-b474-491f80817ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:1a:ad:cd:e9:26:f5:d4:b7:0a:b2:5f:d2:c3:52:41:e8:46:
e6:7d:72:4f:5e:f7:32:b8:94:b9:54:e4:3e:ab:fd:8d:8f:22:
a4:0e:15:16:2a:1d:e2:42:d8:74:4b:7c:13:10:25:4e:23:7c:
fc:d4:04:fa:c6:98:f9:6b:b5:1c:55:a0:e2:ce:f3:68:e9:ad:
32:02:f6:c7:4b:98:e6:b8:46:b3:87:f9:68:c8:9a:47:50:5c:
eb:cc:ef:ce:31:4d:01:9b:56:b2:8f:a5:9a:16:45:88:75:db:
3d:d2:3a:12:8a:b9:be:a4:58:7c:94:c0:02:d2:b7:92:e4:ac:
20:58:4c:fc:26:9e:b6:87:a5:04:ae:5c:d0:8c:aa:19:a1:6a:
34:9d:35:e7:5b:1c:b0:10:59:53:dc:70:2b:01:64:39:b1:ec:
76:f4:0b:08:22:41:c6:ed:c5:27:e9:fc:da:4d:2e:bd:13:88:
e6:57:db:b2:10:da:66:0a:e4:e7:a0:23:53:83:b7:1d:65:9b:
78:87:43:05:4b:ac:48:8f:60:2d:f6:74:3d:66:19:42:3c:5a:
89:9a:8f:7c:90:6e:cf:fc:9a:3d:83:2a:4d:a6:ea:11:28:56:
b5:1b:2e:6e:59:6e:66:2a:d3:0b:09:b0:78:60:47:d7:dc:ee:
c7:09:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:37 2025 by rpki-client