Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/33a7bcf0-48e0-3705-a5d6-9a632e769363.roa
File: 33a7bcf0-48e0-3705-a5d6-9a632e769363.roa (raw, json)
Hash identifier: UKD+YKquiiNmy139bMVEBdKFoBFiTUmEoXwSKj59Rdc=
Subject key identifier: 88:51:9B:23:2A:BE:DF:3B:C7:A8:42:B6:39:40:D5:06:A3:EC:87:EF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848037AE1C9FF9CE9322F1FD7C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/33a7bcf0-48e0-3705-a5d6-9a632e769363.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 7029
IP address blocks: 72.172.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 22 Jan 2025 18:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:e1:c9:ff:9c:e9:32:2f:1f:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a3c3bd64-bdf4-423d-b34e-83a53ad82c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6a:11:f0:ed:c7:fe:08:b9:19:85:b2:d1:a6:
97:21:f1:44:14:c5:5b:f7:6e:a0:33:53:17:66:85:
53:ef:7d:25:a6:33:63:1e:c3:40:76:d5:54:8f:78:
e6:b3:65:4c:dc:e1:9f:33:18:8d:a8:e8:02:25:41:
d4:e2:0c:76:0d:a0:54:99:f8:e8:31:c5:73:42:7c:
32:2b:a8:01:e3:20:ad:2a:97:b6:12:8a:60:b0:a0:
fe:00:ae:94:99:48:57:f8:cb:ea:ae:86:3c:37:6a:
29:25:ce:bc:fe:1c:6a:82:84:3f:ca:50:e7:a4:48:
d7:b9:64:4a:65:3d:41:f8:b6:34:03:71:07:75:49:
f4:e1:d2:dc:4b:bd:d1:92:17:a1:b8:64:42:c0:a0:
3d:fb:06:ea:0e:67:70:3e:2e:69:a5:8c:74:98:e7:
82:62:15:80:d8:ca:a9:c8:02:04:7b:ab:0a:87:dd:
f1:63:7e:f3:d2:8f:82:4b:d4:59:5f:c7:37:7c:85:
12:2c:99:02:64:80:1b:eb:d7:54:60:eb:38:70:d1:
67:97:f0:0e:9b:88:28:db:65:93:97:64:16:d9:cb:
68:51:a4:46:48:fa:f9:d8:62:7d:f6:11:bf:76:73:
53:9f:6c:0f:a5:84:11:d9:75:32:c6:7a:0d:ff:64:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:9B:23:2A:BE:DF:3B:C7:A8:42:B6:39:40:D5:06:A3:EC:87:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/33a7bcf0-48e0-3705-a5d6-9a632e769363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d7:0b:af:74:bc:f4:db:70:b0:17:11:f8:e2:b6:1e:14:1d:
1f:de:17:95:5a:3c:71:da:4d:a8:c3:1d:ba:4c:ac:da:6a:1d:
7e:c5:36:02:b6:89:fe:23:f3:9a:09:04:97:e7:cb:5b:74:db:
56:32:cc:ad:50:67:6b:40:9f:a2:a2:fd:ed:80:ab:1b:22:fe:
8e:38:65:6a:9c:cf:ce:10:53:8b:ca:ee:28:a3:c1:28:7f:6a:
98:8e:db:12:4a:f3:df:64:6e:d0:75:a5:21:2b:84:51:8a:7b:
2a:02:2a:84:7b:5f:56:57:c5:cb:89:68:dd:9a:75:19:0f:1f:
05:67:d7:a0:ee:b0:b4:47:1e:33:ae:1e:28:34:95:f5:cb:c7:
40:8c:89:d6:20:39:c4:ed:6e:ef:6a:30:0f:ed:bd:a5:9d:82:
26:62:c4:ea:7e:84:f9:4b:e5:db:db:dd:67:fb:a1:2e:10:66:
41:e9:00:db:03:c7:88:65:2e:91:bb:8d:53:20:c5:57:dd:fa:
59:ee:e2:ac:72:6a:da:7b:9f:d8:be:c1:62:2e:e8:69:fc:e7:
27:11:a4:aa:64:09:9a:c9:f6:1e:72:9a:8a:d2:09:1d:5c:49:
c1:fe:b1:dc:f2:9d:d7:bc:06:72:a5:17:6e:ca:d8:26:d4:66:
c3:08:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:45 2025 by rpki-client