Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3521e95d-5722-3e53-9a11-f159d7f67612.roa
File: 3521e95d-5722-3e53-9a11-f159d7f67612.roa (raw, json)
Hash identifier: bM7sclpairHAIIRVHsRoDqfie5YVYVfKhDfBUb6lK5E=
Subject key identifier: 38:FF:BA:9E:6C:37:E6:3B:0E:A3:9C:29:43:BE:65:47:02:C1:AA:89
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FC2A02AE26509910015A590
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3521e95d-5722-3e53-9a11-f159d7f67612.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 27338
IP address blocks: 66.0.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 06:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:c2:a0:2a:e2:65:09:91:00:15:a5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=83996ebf-e723-4d99-8ab3-60fd05c25fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:47:a1:f6:b9:6c:a9:e7:91:de:86:ec:af:
8f:a3:ed:ca:d6:7d:af:5d:97:0f:3f:6b:34:1b:56:
08:94:37:46:e6:8b:af:04:15:e7:1b:3b:cc:9d:11:
8d:9b:0c:44:05:66:c9:b1:25:94:87:ea:2a:22:b5:
4d:50:b7:ad:d0:e3:65:09:11:83:07:7d:6b:7b:bf:
fe:13:fa:87:c0:9d:ae:be:c2:70:7d:84:f2:f1:1e:
36:5e:ba:bd:b3:5c:fb:a2:d7:67:fa:21:eb:7d:ba:
71:9a:f0:9e:de:04:45:06:85:86:1c:22:b8:13:da:
1c:72:14:fc:50:35:59:ef:a0:ea:ba:ac:22:49:65:
10:cd:66:bc:66:fa:4f:c1:d0:7b:61:6d:4f:14:15:
ed:8c:0f:37:3c:42:98:87:85:87:ad:ca:ad:f3:f5:
01:67:60:a7:cb:a8:8d:69:84:34:02:23:7b:45:7b:
d0:60:a5:e1:9f:72:bd:32:47:1a:ef:e8:ce:d2:32:
4e:ab:d0:ad:f9:fd:8b:8a:09:42:da:9c:30:92:c9:
50:cd:74:f3:e7:e8:bd:72:92:4c:45:5d:3e:2a:a8:
00:7c:19:2a:e6:c2:aa:49:eb:ab:ea:cb:b1:dd:93:
e0:fa:89:7f:de:6b:c8:3f:67:44:a8:3d:eb:ff:44:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:BA:9E:6C:37:E6:3B:0E:A3:9C:29:43:BE:65:47:02:C1:AA:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3521e95d-5722-3e53-9a11-f159d7f67612.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.0.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:28:17:1f:79:55:74:50:b7:07:bf:dc:0b:2e:54:21:66:6c:
0f:16:d0:8f:a6:f4:f2:9d:4a:33:d4:b6:27:ac:c4:64:86:03:
23:43:84:f0:3c:7e:3d:ec:44:9d:ac:f2:a7:3e:b2:80:f2:43:
51:26:df:8a:73:9a:7c:dc:89:e9:61:cf:41:3c:9b:00:e9:70:
16:56:34:ae:eb:60:e1:67:83:75:45:70:6d:5e:0d:72:e4:97:
29:d0:9f:e4:30:e9:69:3c:4b:02:58:e1:d7:e1:92:2b:54:1b:
93:9d:8a:64:82:00:62:ca:1d:e5:99:5f:5c:2b:27:d7:8a:32:
86:5e:03:1d:8c:24:4b:4b:00:27:f2:c6:7e:e9:c8:36:71:05:
6f:65:27:4e:89:e6:d5:5b:46:0d:8d:83:dc:ce:13:30:29:f4:
09:1c:0e:f4:29:8e:ae:bf:59:78:2f:3b:31:08:9a:61:6b:94:
29:a2:99:81:c7:6e:0d:5f:32:29:8c:35:61:d9:82:b4:a8:6e:
b0:f2:01:36:9c:49:fa:15:51:39:fd:72:97:2f:c7:e4:02:43:
bc:99:ab:d5:5e:6a:24:a2:eb:ca:e8:97:ef:47:5c:24:08:5d:
f4:65:de:a5:34:c9:af:5b:9e:81:1a:3d:76:37:b5:6a:7f:68:
fe:27:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:45 2025 by rpki-client