Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a08932c-48ba-300c-87ea-900c9c80cc76.roa
File: 3a08932c-48ba-300c-87ea-900c9c80cc76.roa (raw, json)
Hash identifier: 8bmMRu2tEpSQul/Y9HQA3HnKhMBBjGTBaZb+T/esKUA=
Subject key identifier: 7F:35:18:E6:50:7B:B7:0C:42:54:07:CC:5D:BB:C3:17:D7:9D:A8:DC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112761CF2EE462DDE23200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a08932c-48ba-300c-87ea-900c9c80cc76.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 209.102.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 19 Feb 2025 16:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:27:61:cf:2e:e4:62:dd:e2:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=53df0440-2cfd-44dc-b2c3-06eb2e9475a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:bd:a4:97:04:d3:82:73:d0:5c:15:f6:48:
05:d8:7f:2d:4b:32:20:88:53:03:0a:9f:25:a9:29:
9d:eb:2b:ce:8b:8e:63:da:b7:8e:ed:7a:65:9d:5c:
5c:b0:82:36:31:d8:34:dd:6c:32:38:b3:3e:54:c8:
c8:a8:7c:fc:97:7b:a4:ce:cd:7d:da:08:3f:35:ad:
17:b5:2d:38:e5:86:8d:5c:23:0a:bd:ab:22:6f:23:
26:7a:5c:f0:cf:b8:0f:60:ae:69:22:27:3d:44:eb:
db:da:95:9c:c6:45:65:bc:9a:c3:56:06:6c:af:88:
19:32:aa:90:39:18:07:6e:62:61:37:13:20:25:d3:
e7:39:6d:44:70:ed:ea:04:6a:dc:28:f7:f7:58:45:
39:92:3c:a3:59:21:72:97:6f:21:70:68:86:e4:07:
d9:0f:c1:89:72:4f:eb:7a:d0:8e:21:54:f9:fd:c2:
ed:2a:d3:df:72:38:7d:19:ed:2b:0c:0c:45:c4:e1:
1a:7c:15:cc:b0:b8:93:5d:42:e9:3b:43:25:ad:e7:
f7:97:5c:d8:ed:63:af:08:28:bd:36:fa:2b:d3:b9:
28:e8:b6:4c:aa:1f:51:1a:9b:6e:20:c8:67:a4:fe:
cf:09:c4:ab:59:8c:8f:d0:46:6f:74:9c:17:5d:ce:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:35:18:E6:50:7B:B7:0C:42:54:07:CC:5D:BB:C3:17:D7:9D:A8:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a08932c-48ba-300c-87ea-900c9c80cc76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.102.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ea:bf:47:e2:44:71:3d:89:7e:98:4c:ad:4f:ea:a2:ba:b0:
56:cd:94:3e:0d:10:31:be:db:4d:32:9d:f7:8d:80:75:1f:45:
dd:7b:30:59:84:e1:f3:96:ab:9a:ed:19:9b:f5:bb:df:e6:60:
4e:cb:de:01:a7:d6:46:63:ed:a7:29:d0:e6:65:d4:26:4a:dc:
c3:64:d1:79:b0:b0:78:50:2f:9e:0c:d4:19:e4:36:59:b5:ab:
ee:81:b1:19:c6:f4:82:49:ad:c2:3d:2e:72:bd:46:23:02:35:
66:be:c5:e2:3d:fd:bd:1d:95:f3:f4:23:26:9b:24:29:26:c5:
30:89:5f:d7:34:49:60:b3:76:c3:ff:db:ed:b0:ff:8d:3d:c7:
74:d6:4b:f2:8e:c1:f0:a1:1e:83:67:1f:7e:6b:96:cc:80:0c:
03:65:5f:89:c8:95:9e:38:87:42:04:33:a0:aa:e1:e3:44:f0:
1f:e8:50:a6:be:b9:c9:e9:6e:c4:14:7f:40:41:f3:3e:b2:87:
ba:5f:51:af:4c:3b:31:f3:0f:f7:7f:db:cf:2e:79:87:ca:52:
09:45:2b:63:8c:19:6a:6d:0f:d3:54:eb:39:73:c7:a9:84:d0:
81:c8:08:3e:ee:43:a4:46:ad:0f:60:dd:57:3b:43:1d:ff:7d:
24:d7:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:54:43 2025 by rpki-client