Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ff9d7a6-96f5-3504-b50c-5c89a447ea9e.roa
File: 2ff9d7a6-96f5-3504-b50c-5c89a447ea9e.roa (raw, json)
Hash identifier: FDmCiuM2eA6youfnxbrXu/qGRRNOX9wRAQfGRh3bbsI=
Subject key identifier: 0A:48:2B:EB:EA:BB:9E:D7:A5:AC:8E:E3:97:86:17:6E:29:9B:14:7B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210EEC542388693ACCC79B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ff9d7a6-96f5-3504-b50c-5c89a447ea9e.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.28.194.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 19 Feb 2025 15:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:ee:c5:42:38:86:93:ac:cc:79:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=4a64f8f1-a117-4b9a-a253-96bc888b639b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:80:9c:08:73:61:80:d6:9d:f3:72:a4:be:
4c:10:fe:37:a2:c5:73:99:65:7a:35:19:21:29:75:
6b:db:03:3a:95:88:74:53:32:db:26:1f:4d:69:96:
28:b5:44:06:5f:ca:64:3d:2a:40:07:c7:d2:e3:0a:
c1:41:5d:e1:85:d8:ed:ab:66:00:c0:82:3b:6b:bd:
ba:71:f1:00:15:91:15:94:1e:ea:f0:f4:6b:19:f1:
5f:f4:ac:3c:e1:05:fc:bb:75:24:66:5c:51:8e:27:
3a:33:ce:2a:38:bb:73:07:dc:96:fc:05:b9:b9:7d:
5f:55:59:e8:de:0d:8a:35:d0:72:88:7d:83:eb:62:
57:0a:14:25:5b:3e:1e:f7:a5:18:31:3d:d1:d9:b4:
f1:11:cf:12:fc:e4:72:48:cc:69:89:c7:d5:77:0f:
4f:d5:2a:7f:d1:69:bb:f7:92:e9:dc:4a:6c:7a:69:
db:bf:3d:b2:eb:2d:b2:51:00:9b:ec:6f:a2:df:e0:
1b:b2:63:68:95:2a:d2:49:e8:b1:0d:84:db:e3:3d:
a6:44:da:a4:5d:2b:3f:f6:09:47:e3:ba:fb:71:6f:
d7:fd:f1:ad:2b:b1:06:5c:79:91:36:3a:37:66:84:
79:e1:e0:e8:b5:b8:9a:28:48:e0:fe:b5:f6:9f:2d:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:48:2B:EB:EA:BB:9E:D7:A5:AC:8E:E3:97:86:17:6E:29:9B:14:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ff9d7a6-96f5-3504-b50c-5c89a447ea9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:67:b5:52:74:14:67:70:97:84:0c:41:2c:00:14:80:8a:50:
57:9a:89:0a:e5:d5:99:0d:8c:dd:5b:34:64:6b:6b:a6:df:80:
83:66:51:7a:b6:7c:59:7a:41:ed:dd:d5:9e:80:65:ce:14:77:
2a:56:4c:bf:7b:87:0b:74:56:5a:b0:c1:e2:92:cb:e5:5e:92:
95:79:e5:74:e3:85:d0:f9:d5:75:17:7e:64:97:7a:0d:ef:cc:
70:a4:29:bd:30:9c:d8:9a:da:57:10:26:f8:7d:02:ab:3e:51:
d5:32:38:2a:8a:21:7c:fa:32:25:22:09:8a:0f:d9:11:43:60:
fa:ee:1a:63:6f:ff:48:e7:9c:a5:c0:63:c0:1d:73:76:0d:02:
86:5d:69:fc:32:63:07:cd:d0:b6:80:74:4e:99:d9:ab:74:54:
22:90:73:1a:b0:ae:18:cb:0f:45:fb:ea:96:ef:1a:7f:30:f3:
fd:94:ba:56:85:bf:7c:92:0c:71:56:a4:82:d8:f1:b1:48:dc:
01:95:07:ab:cf:e5:0b:6b:ee:71:f4:16:78:0d:16:b2:d5:43:
6e:08:41:7a:56:32:6c:1b:fd:a5:66:d7:76:d4:8c:3a:06:0a:
47:47:2f:e0:a6:1b:60:5f:b9:0b:3a:e9:f1:b7:7e:a3:1b:db:
33:df:67:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:41 2025 by rpki-client