Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28289cd8-826f-39e1-a315-4d34aeb02030.roa
File: 28289cd8-826f-39e1-a315-4d34aeb02030.roa (raw, json)
Hash identifier: N4v2eXO+bFJt114/ka4i1TYju3adobZSk8KekDorREg=
Subject key identifier: 2C:28:72:D6:27:44:8E:61:57:C6:13:8A:D8:5E:AE:53:36:1A:AD:22
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661615A14DB4FCA169DFCD40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28289cd8-826f-39e1-a315-4d34aeb02030.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 50.96.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:15:a1:4d:b4:fc:a1:69:df:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=2b4699c0-7339-4b57-bdf4-d40e710a6584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:31:c8:7c:bc:86:86:7c:ee:3d:5c:60:7b:
c3:06:b5:c4:bf:c4:be:6c:02:1d:87:99:3f:30:53:
f7:08:b7:7a:6e:80:db:a4:9a:ee:08:08:9c:f9:e1:
4b:70:b9:59:f0:21:78:89:6d:87:07:9d:ac:72:62:
11:77:39:4c:0d:dd:1d:b4:e5:07:da:b3:53:43:27:
76:32:18:d8:ab:e3:4e:c9:cd:73:43:dd:a9:59:1c:
69:c8:cd:68:41:0c:10:6b:77:a4:a1:33:3e:b1:5c:
cf:db:fe:46:9d:21:c0:be:e4:eb:2b:91:c3:5f:60:
0a:09:e6:4b:c4:1e:75:a1:9d:a3:2a:29:34:4e:56:
90:af:18:35:52:ac:d2:77:32:52:dd:c9:a8:e1:8d:
cd:f3:00:8a:1e:9e:60:f7:40:2e:47:34:8f:a6:d7:
8b:38:ce:6f:b3:fb:fe:de:b3:0e:6e:25:6a:a2:97:
d9:ee:a3:11:8f:16:fb:fc:8e:89:0a:46:e3:ca:83:
ee:8d:81:c1:74:4a:50:cc:cc:c8:43:f3:84:c8:e9:
73:2d:88:3d:11:bd:51:a2:de:31:86:d3:98:ed:88:
b1:21:2b:ad:58:96:6f:10:04:61:45:fe:da:f8:ae:
bf:8b:ad:17:04:dd:52:1d:51:21:0e:38:c5:ca:5a:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:28:72:D6:27:44:8E:61:57:C6:13:8A:D8:5E:AE:53:36:1A:AD:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28289cd8-826f-39e1-a315-4d34aeb02030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:fc:87:29:cf:22:69:6d:1d:63:5e:64:c9:d5:7d:3a:ec:d5:
f6:a5:6f:ca:9d:19:30:e5:58:8f:b5:96:60:e1:b2:db:f5:a0:
89:dc:8b:f1:95:b2:d2:f3:1a:fb:f0:56:c6:5e:e4:6a:06:19:
e1:17:ae:3d:02:e5:39:43:12:3a:9b:68:04:7a:ae:2b:f5:0d:
43:b7:46:80:71:2e:f4:70:42:99:66:a7:1f:5e:b2:b2:dd:c0:
b6:78:c9:05:f9:de:9a:1a:28:02:80:aa:8e:d2:d7:62:df:b1:
b6:dd:b8:81:fe:62:00:fc:16:fe:40:43:ed:c5:93:4f:45:40:
5e:fb:32:2e:a3:e5:c8:79:a3:86:ee:41:86:b4:64:fa:15:3d:
fb:90:cd:60:d2:51:18:d8:cd:23:4d:07:56:58:86:83:36:52:
9e:a7:72:38:98:99:34:ea:9d:22:51:90:65:6e:98:63:ee:9f:
69:60:33:0f:20:d1:60:7a:fa:c6:fd:ce:3b:40:45:25:f7:c3:
c0:a7:30:d0:0e:e7:0b:a7:b3:f2:c3:77:2f:58:b8:79:00:b1:
65:b1:b9:ec:90:bb:f5:5a:48:df:0d:a7:8a:63:b4:e0:2b:6d:
01:d5:43:a3:a8:85:78:9c:3c:62:3c:83:96:02:e2:2e:e1:58:
22:fa:16:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mFhWhTbT8oWnfzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmI0Njk5YzAtNzMzOS00YjU3LWJkZjQtZDQwZTcxMGE2NTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkcxyHy8hoZ87j1cYHvDBrXEv8S+bAIdh5k/
MFP3CLd6boDbpJruCAic+eFLcLlZ8CF4iW2HB52scmIRdzlMDd0dtOUH2rNTQyd2
MhjYq+NOyc1zQ92pWRxpyM1oQQwQa3ekoTM+sVzP2/5GnSHAvuTrK5HDX2AKCeZL
xB51oZ2jKik0TlaQrxg1UqzSdzJS3cmo4Y3N8wCKHp5g90AuRzSPpteLOM5vs/v+
3rMObiVqopfZ7qMRjxb7/I6JCkbjyoPujYHBdEpQzMzIQ/OEyOlzLYg9Eb1Rot4x
htOY7YixISutWJZvEARhRf7a+K6/i60XBN1SHVEhDjjFylp6twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwoctYnRI5hV8YTitherlM2Gq0iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjgyODljZDgtODI2Zi0z
OWUxLWEzMTUtNGQzNGFlYjAyMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACD8hynPImltHWNeZMnVfTrs1falb8qdGTDlWI+1lmDhstv1oInci/GV
stLzGvvwVsZe5GoGGeEXrj0C5TlDEjqbaAR6riv1DUO3RoBxLvRwQplmpx9esrLd
wLZ4yQX53poaKAKAqo7S12LfsbbduIH+YgD8Fv5AQ+3Fk09FQF77Mi6j5ch5o4bu
QYa0ZPoVPfuQzWDSURjYzSNNB1ZYhoM2Up6ncjiYmTTqnSJRkGVumGPun2lgMw8g
0WB6+sb9zjtARSX3w8CnMNAO5wuns/LDdy9YuHkAsWWxueyQu/VaSN8Np4pjtOAr
bQHVQ6OohXicPGI8g5YC4i7hWCL6Fp0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:09 2025 by rpki-client