Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26c5d398-5163-376f-9c24-8780b079c6f7.roa
File: 26c5d398-5163-376f-9c24-8780b079c6f7.roa (raw, json)
Hash identifier: 0/ZQXN6h+nl1GcZhXk2XW6rYdiOYzmwaI49S4fgH0l8=
Subject key identifier: 74:D5:C4:35:66:A7:67:D4:25:5C:61:3B:C3:F4:08:D6:03:C9:60:33
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6616A1E2D234BC7007298880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26c5d398-5163-376f-9c24-8780b079c6f7.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 64.178.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:a1:e2:d2:34:bc:70:07:29:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=889937e4-caf7-4114-8831-7354a43e4add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:06:fc:6e:fe:88:4c:37:2c:86:32:c0:45:
3f:a0:2f:a3:c0:07:68:c6:21:93:05:49:4c:c7:8a:
f5:65:90:3b:d9:ed:75:97:40:95:e6:f8:67:6c:08:
a1:04:de:6a:b4:05:40:95:92:c4:c5:f3:67:64:3d:
45:cf:f1:a1:17:d7:7c:26:80:ee:0f:87:fb:9b:95:
9a:b0:8b:41:d6:fe:1d:60:7b:41:e7:1f:f2:d5:dc:
bf:3b:e7:85:1c:8f:6a:de:ad:f6:1e:c9:13:6e:df:
63:d6:e8:46:65:db:50:3c:1d:89:14:59:69:b7:09:
c8:a5:34:83:cc:84:40:ce:57:fc:40:1d:00:91:58:
11:00:33:35:b6:6e:e2:a0:d9:66:28:af:c9:85:cc:
d8:df:54:df:38:75:b6:56:69:62:5d:47:0d:cd:d9:
1e:5a:ff:bf:fb:aa:be:3d:cc:5d:a7:81:93:71:e1:
6d:05:24:a2:c2:03:34:12:51:e9:4d:af:65:96:67:
57:d3:27:07:8a:af:08:af:86:06:c9:0c:ee:dd:97:
f0:48:c3:45:30:dc:86:fc:2d:73:a7:dc:c6:1d:4b:
52:cd:2c:06:47:72:92:f7:05:8c:cb:e7:60:50:b4:
ee:da:15:bc:e5:ee:1e:b0:5f:19:dd:c9:fc:3b:30:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D5:C4:35:66:A7:67:D4:25:5C:61:3B:C3:F4:08:D6:03:C9:60:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26c5d398-5163-376f-9c24-8780b079c6f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.178.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a5:78:31:24:16:0a:5e:f9:cc:6f:0d:9b:56:ba:e2:a3:c9:
e2:7d:7e:77:77:32:7b:a6:80:d7:72:e8:60:43:6b:58:24:a1:
91:3b:47:be:e9:72:a9:44:b1:a6:c4:a8:0a:df:f5:29:f1:d3:
4f:bb:fe:d7:7e:e3:59:6d:6c:5b:ee:68:c4:72:8e:1f:48:a6:
e9:96:3c:28:53:7d:23:cf:16:a7:cd:f2:f6:0b:76:79:7a:df:
48:21:ef:a9:f6:ef:80:0f:da:49:a6:04:89:e4:aa:ad:e3:5b:
4a:28:46:0e:33:31:0b:83:db:a4:7b:2d:05:5c:a8:2f:1f:24:
ef:fc:68:8b:2b:0e:1a:87:d6:b2:d8:b7:08:43:91:f7:33:89:
14:ec:6f:2f:2b:64:95:e2:75:b9:1f:6b:d1:63:6b:a5:d3:98:
30:b2:d2:88:6f:77:87:c6:cb:67:6b:33:36:e6:68:c3:be:b2:
2d:9f:a1:12:41:94:79:19:76:35:e9:29:b0:5f:fc:14:93:da:
fb:ad:1c:f8:29:21:ff:1c:ea:aa:7d:b8:40:70:6b:a8:73:f8:
da:b2:4e:5a:e8:c6:1e:c8:d3:88:76:d0:21:62:be:02:2b:cb:
f1:f2:45:ef:10:c0:c1:cb:c0:47:9d:8a:ae:4f:c7:21:8f:75:
05:5e:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:01 2025 by rpki-client