Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29c09c67-4547-3556-9393-772b5fed798f.roa
File: 29c09c67-4547-3556-9393-772b5fed798f.roa (raw, json)
Hash identifier: IHVqYr+tGvZ3582D7KGlSLUZqCr/nkIkpUdL9XkXfGE=
Subject key identifier: 70:F6:ED:1E:02:E2:72:E1:03:6A:F5:C8:47:E6:D1:5A:85:4F:66:CB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB440FE33295C25026B493580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29c09c67-4547-3556-9393-772b5fed798f.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.102.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:40:fe:33:29:5c:25:02:6b:49:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=600eaf86-d918-48a8-a29b-7c8c864511e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:f4:8b:f9:f9:cd:2f:ca:d0:fa:b5:a9:16:
16:b7:b5:f4:6c:f1:d5:d1:4e:04:77:5d:52:16:26:
a0:7c:f9:fd:b0:f8:34:b2:3d:10:ff:67:7f:03:19:
bc:9c:c2:e7:49:45:12:7d:cd:3b:86:b0:a4:1f:48:
ba:6e:ff:79:a6:1f:17:be:4e:f0:95:4a:14:1c:31:
a9:44:05:5f:48:2d:55:62:0d:9b:93:47:25:a9:ce:
66:66:cf:49:7c:d6:2b:0f:c2:d8:a7:30:25:fc:da:
0c:c5:7e:1d:b3:74:7b:40:ac:f9:45:0d:b0:de:8b:
12:ed:5f:b3:6d:09:a8:ee:71:f6:22:46:b0:fd:1b:
b6:f7:70:e0:5d:74:86:7f:b3:e1:02:9f:07:51:b9:
6d:d7:2f:3c:b9:92:72:6d:93:fb:c9:98:34:f8:db:
4d:dd:ef:66:17:a1:8c:26:f3:94:e0:43:2f:1a:b5:
50:43:d9:41:cf:b2:d0:47:ab:c5:be:aa:55:7e:62:
d8:84:92:ee:e6:52:42:cc:ea:87:f1:ab:37:8b:20:
75:42:5d:35:b8:ee:2a:dd:73:84:9f:91:7a:59:44:
22:a5:e2:c5:d1:bf:31:f6:eb:6c:77:c4:33:2a:66:
28:e6:2a:51:6a:9e:cf:af:16:98:3a:15:a3:61:95:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:ED:1E:02:E2:72:E1:03:6A:F5:C8:47:E6:D1:5A:85:4F:66:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29c09c67-4547-3556-9393-772b5fed798f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.102.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:ee:76:71:32:77:8b:35:dd:df:26:c3:d1:f5:b2:ea:15:09:
16:63:c5:1d:77:25:bb:40:f2:89:f9:1d:81:b5:68:12:3f:5e:
bd:52:a9:41:6c:53:21:aa:90:ad:81:fa:e2:61:f9:24:2c:5f:
6a:8a:c6:4e:77:4f:4f:57:40:a7:42:2f:a4:cc:56:44:d9:ab:
3f:75:f9:98:b1:23:db:94:39:91:9f:47:f1:9a:70:ca:6b:5e:
be:44:eb:d6:fd:7f:47:11:de:55:99:44:df:44:4b:ae:07:91:
ed:93:b5:5c:60:7b:70:b4:28:e2:94:37:c7:07:eb:37:b2:9f:
d5:bb:7a:65:0d:da:04:e5:15:7e:6b:c9:df:af:ae:35:65:79:
57:2c:c8:ba:19:6a:ef:1d:6e:6e:8b:1e:27:46:63:8d:d9:c4:
a8:4a:8b:cb:dd:c7:88:b8:e5:5f:db:17:ae:fc:83:94:a9:1d:
2f:12:56:89:36:47:6d:1c:41:68:c1:2d:a0:aa:0d:4f:e6:d0:
e1:8d:0f:4d:f1:99:09:2a:50:c9:15:f9:6f:14:53:52:53:23:
50:85:c7:a6:fe:bf:53:ff:ea:d3:16:d7:50:8f:6c:be:b7:fb:
29:dd:70:56:37:68:63:96:b2:0c:f9:ac:fd:1a:63:66:4e:a0:
c2:3d:0b:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD20QP4zKVwlAmtJNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDQyNTEyMDAwMFoXDTI4MDQxODA0MDAwMFowLzEtMCsGA1UEAxMk
NjAwZWFmODYtZDkxOC00OGE4LWEyOWItN2M4Yzg2NDUxMWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiej0i/n5zS/K0Pq1qRYWt7X0bPHV0U4Ed11S
FiagfPn9sPg0sj0Q/2d/Axm8nMLnSUUSfc07hrCkH0i6bv95ph8Xvk7wlUoUHDGp
RAVfSC1VYg2bk0clqc5mZs9JfNYrD8LYpzAl/NoMxX4ds3R7QKz5RQ2w3osS7V+z
bQmo7nH2Ikaw/Ru293DgXXSGf7PhAp8HUblt1y88uZJybZP7yZg0+NtN3e9mF6GM
JvOU4EMvGrVQQ9lBz7LQR6vFvqpVfmLYhJLu5lJCzOqH8as3iyB1Ql01uO4q3XOE
n5F6WUQipeLF0b8x9utsd8QzKmYo5ipRap7PrxaYOhWjYZVyAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHD27R4C4nLhA2r1yEfm0VqFT2bLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjljMDljNjctNDU0Ny0z
NTU2LTkzOTMtNzcyYjVmZWQ3OThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDudnEyd4s13d8mw9H1suoVCRZjxR13JbtA8on5HYG1aBI/Xr1SqUFs
UyGqkK2B+uJh+SQsX2qKxk53T09XQKdCL6TMVkTZqz91+ZixI9uUOZGfR/GacMpr
Xr5E69b9f0cR3lWZRN9ES64Hke2TtVxge3C0KOKUN8cH6zeyn9W7emUN2gTlFX5r
yd+vrjVleVcsyLoZau8dbm6LHidGY43ZxKhKi8vdx4i45V/bF678g5SpHS8SVok2
R20cQWjBLaCqDU/m0OGND03xmQkqUMkV+W8UU1JTI1CFx6b+v1P/6tMW11CPbL63
+yndcFY3aGOWsgz5rP0aY2ZOoMI9C/0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:02 2025 by rpki-client