Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/226919a2-120c-353a-b946-a67d3590beee.roa
File: 226919a2-120c-353a-b946-a67d3590beee.roa (raw, json)
Hash identifier: 7nNyejy6qjO3Mq0BHSIpfO8eSKLtN5P6Th5Ab0pdo+g=
Subject key identifier: C2:59:81:F3:E8:5C:EA:9E:25:7E:B4:9F:21:77:1D:58:A4:FF:FA:9A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB93A308B86404EE509F200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/226919a2-120c-353a-b946-a67d3590beee.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 40114
IP address blocks: 63.139.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 06:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b9:3a:30:8b:86:40:4e:e5:09:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=0390f8d0-b621-414a-a80d-e2272f927515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:c2:f0:a3:d8:79:52:64:5e:b0:6f:17:da:
ed:d4:ef:eb:d5:27:5a:18:96:26:27:3f:25:32:6f:
c2:8c:da:b2:09:0d:f1:66:fe:f9:b4:0e:d5:81:ab:
8b:d3:71:ea:93:68:92:4e:97:c3:c6:63:19:6f:18:
bc:18:1e:5d:d7:c8:2d:ee:6f:e5:09:b0:92:17:d4:
a1:f9:26:21:f2:a6:96:3c:cd:da:d1:36:62:49:5a:
12:9b:f0:dc:20:73:78:df:6a:16:b4:99:d1:4e:7c:
19:6e:45:22:99:ce:1d:08:31:da:ef:97:17:3b:fa:
6c:9a:b2:0d:df:e0:df:1a:51:48:f2:ea:e6:8d:96:
52:6d:65:04:59:d8:ee:f6:e6:13:02:91:d0:c7:d9:
41:eb:12:a1:24:f5:be:90:19:b8:9f:e1:2f:75:71:
2a:45:63:e2:01:80:26:56:06:f6:58:76:e6:87:55:
60:30:80:2e:09:c9:e6:0d:2f:b4:56:4d:d3:53:ac:
de:60:c6:06:29:86:05:e9:73:ca:ba:35:67:29:9a:
60:0b:1a:25:d6:59:db:25:d2:ed:98:32:7c:0c:4d:
c4:ae:5c:54:47:1f:96:6c:82:fd:ab:01:dc:32:1e:
9b:12:dc:f2:06:eb:37:00:06:16:b4:e3:9e:16:49:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:81:F3:E8:5C:EA:9E:25:7E:B4:9F:21:77:1D:58:A4:FF:FA:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/226919a2-120c-353a-b946-a67d3590beee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.139.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:0f:6c:3d:2a:73:0d:1b:88:aa:f4:ab:ad:76:d6:79:ac:fa:
b1:df:95:4a:e9:44:03:dc:d4:6c:d2:9f:d9:73:bc:8c:46:64:
15:9d:f9:a1:04:46:1b:1c:9b:7e:44:82:bf:b6:ca:8a:b1:c6:
db:d7:30:d5:9b:d4:dd:22:e7:72:f2:4e:3d:5c:d8:36:c0:a7:
d4:d5:ae:bc:7a:5e:d7:cd:35:30:48:06:ca:59:b5:cf:c2:bd:
8c:c7:96:d0:70:c1:5b:37:93:4f:05:ff:05:0d:db:a8:49:eb:
fd:ab:7b:01:e5:87:cf:f6:e4:79:0b:c9:d5:eb:51:1e:ae:8e:
16:52:76:ab:e9:d3:cf:01:63:75:61:45:0f:a2:de:56:0a:59:
a4:62:bf:9a:24:3d:e7:d5:b5:38:04:ba:c2:6a:93:be:68:8f:
3d:71:00:7b:68:7b:5d:38:85:50:a3:5d:d7:b5:be:2a:79:1f:
9e:4b:5b:d7:24:ae:7a:a7:ba:37:ce:fb:f1:30:11:c4:d6:b8:
db:45:54:97:d2:c3:eb:6d:22:f1:35:45:12:a1:aa:76:df:a6:
c5:72:dc:cb:97:96:3d:b2:16:ec:ad:db:5e:65:69:1a:fa:1b:
1e:09:dc:b0:a1:1a:2c:f3:3e:02:18:3e:70:2f:7b:9c:17:14:
6b:f2:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:56:04 2025 by rpki-client