Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3874f8a9-3091-3f3b-97af-be288ba11283.roa
File: 3874f8a9-3091-3f3b-97af-be288ba11283.roa (raw, json)
Hash identifier: XA/hy3zMEC3VldHb9EZMWy+YToeU3QqqMpaIP9eX7q8=
Subject key identifier: 02:CE:A1:79:4B:84:68:63:2C:07:92:48:A4:15:26:A3:67:F0:2F:E3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6616DB92BA1A8B0CE3729BA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3874f8a9-3091-3f3b-97af-be288ba11283.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 67.140.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:db:92:ba:1a:8b:0c:e3:72:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=1316f336-8813-4e56-bd22-f231ce04e49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:04:52:e2:1c:77:eb:ee:9c:9d:7f:45:c0:
7d:aa:13:90:4b:19:b3:32:00:18:ae:2d:0b:11:6b:
7e:3b:7a:85:82:f3:04:48:43:75:5c:03:95:cd:68:
2b:59:2b:4b:64:81:5f:23:e6:d9:54:30:f0:21:1f:
c4:9e:b2:ab:d8:ea:3d:a0:e1:fe:10:ce:b4:cb:67:
80:72:0e:64:61:b7:97:fb:ff:10:18:0b:5d:75:19:
16:6d:5b:89:19:20:2d:56:77:e4:fe:51:2b:73:13:
8d:96:e1:c1:b1:f8:f7:71:24:85:2a:a8:74:c8:78:
cd:b0:e9:4b:2b:f6:99:88:03:9c:9c:0f:4f:1e:61:
a6:40:8a:9a:e9:da:25:a6:b0:53:be:7d:1b:d9:f1:
d3:ba:c0:dc:6e:13:74:f7:0b:ad:ba:ca:fe:ad:ca:
14:a3:f0:9d:cb:f1:f2:16:92:8c:b4:7c:cf:98:06:
6c:be:15:e5:b0:a0:9d:48:95:3d:dd:7b:e2:af:7e:
e4:34:2a:b8:07:97:7e:62:54:05:ce:ce:45:3f:5f:
28:7e:09:9e:86:06:65:c2:71:ae:2a:08:ae:51:04:
86:c5:78:fb:2a:be:65:d6:3d:56:7c:db:b4:c1:dc:
ed:c8:de:00:0e:40:87:eb:4a:9b:36:16:b8:f1:b4:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:A1:79:4B:84:68:63:2C:07:92:48:A4:15:26:A3:67:F0:2F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3874f8a9-3091-3f3b-97af-be288ba11283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:f3:1c:af:e1:ff:93:8b:03:1c:18:b8:93:a9:50:80:af:82:
8c:f3:83:00:05:f2:e9:cc:44:27:24:97:23:04:d1:40:08:0d:
0a:d5:82:64:43:f8:6e:41:39:40:d3:e3:c8:94:48:14:1c:84:
45:f8:bf:ad:c7:cb:08:db:d9:a1:93:00:50:50:b5:3b:aa:94:
98:76:59:40:d2:56:c9:d5:16:bf:5c:5d:bd:b3:de:4c:99:4a:
62:52:ed:99:1e:75:16:6e:4d:88:8e:e9:2e:e7:52:82:31:7f:
2a:91:f1:d0:ac:32:28:1b:24:ce:c3:58:dd:e3:91:25:f7:96:
58:7a:03:c7:b0:3d:c1:fe:4b:59:9f:f0:10:f6:6a:58:4f:c2:
cf:6e:31:9c:69:f5:0d:a3:4e:48:dd:a9:08:73:ee:54:f3:26:
03:1c:07:ea:9e:04:ec:e8:28:1c:0f:41:dd:f0:98:3c:21:27:
25:29:99:39:2a:09:06:68:e5:ad:f4:23:bc:97:19:66:57:29:
a2:dd:02:57:8e:0b:05:2d:c0:88:7e:7c:18:1f:ce:d7:d6:fc:
8d:b3:1f:da:a1:53:7d:48:b7:ba:06:a2:1c:b7:aa:04:a7:8b:
82:29:60:69:cc:de:bd:ad:bb:8e:b8:d3:40:51:be:60:73:51:
96:e7:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:29 2025 by rpki-client