Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b64b687-b62c-3c3d-903d-7c980a357496.roa
File: 3b64b687-b62c-3c3d-903d-7c980a357496.roa (raw, json)
Hash identifier: hlz6SS2a74MiEFe7YaZ9+Civg0zK+IazfdKXJf6ezlw=
Subject key identifier: D3:6B:E1:1B:A7:88:44:A9:39:1B:87:E0:D0:0B:1C:8C:46:32:72:B7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21122ED40D9545191E3D480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b64b687-b62c-3c3d-903d-7c980a357496.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 173.188.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 24 Mar 2025 14:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:22:ed:40:d9:54:51:91:e3:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=82f269f2-7609-4729-ae51-6a115611934b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:df:a6:7d:57:69:a3:58:0a:f2:60:30:94:
c0:de:5c:39:5b:15:77:de:6a:c6:73:d9:5e:d8:f1:
a9:01:a5:23:f0:19:53:f1:f8:e4:5a:5a:40:19:a4:
be:c5:84:2d:16:4c:75:4d:cc:e6:7e:0b:b4:2c:82:
1f:ef:ff:11:83:b1:15:cd:f8:b5:49:92:1b:55:cf:
7e:e0:1f:8d:9b:2c:c7:85:25:75:39:63:d7:f4:b2:
f0:cf:65:c4:b2:77:f2:26:d9:41:ee:9b:63:5b:e7:
f7:de:70:8b:65:30:08:60:4c:0c:54:80:2e:9e:b0:
d7:ff:fe:ff:45:a3:3d:d8:11:3c:ca:87:2c:ef:f9:
e1:60:0c:ac:6e:19:a2:f9:ce:82:47:34:fe:c6:e2:
9f:44:ec:57:3f:2a:31:e4:83:15:94:75:ed:80:25:
cc:e5:5f:07:7e:70:5b:7d:66:0f:73:ac:09:28:91:
41:a6:82:fc:cd:bc:c0:fe:21:94:46:cc:b5:c4:5c:
f3:67:e3:fc:e0:dc:8a:34:27:6b:62:58:78:c2:73:
02:39:25:6f:8e:11:f7:a1:f5:58:f8:5f:b0:cd:84:
69:0d:b4:86:cd:8b:88:60:b3:27:cb:c1:2a:6c:06:
d6:91:a9:ed:2f:62:2c:78:8a:3f:79:0b:c9:aa:18:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:E1:1B:A7:88:44:A9:39:1B:87:E0:D0:0B:1C:8C:46:32:72:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b64b687-b62c-3c3d-903d-7c980a357496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:00:c6:71:53:6c:4c:d7:ac:2a:11:c5:2e:74:4e:50:6a:6b:
5d:53:2b:39:6e:bd:fa:d6:65:10:8b:08:8f:a4:c6:2d:07:11:
f7:a4:d0:2a:dc:3b:cf:8c:e6:a5:c6:f5:bc:b2:a0:82:1c:e3:
d7:1e:0f:ce:51:ba:06:3d:0a:92:74:e3:bb:21:c3:18:bb:79:
5a:e3:d3:c7:4c:8f:92:8d:be:e8:bf:af:d1:35:92:ab:21:16:
15:fd:02:34:07:b0:b3:01:64:ae:4a:e9:36:c9:f9:dc:3f:d4:
a8:74:a1:af:f7:c3:2b:31:c6:e5:a0:57:2f:d4:2f:66:01:16:
a7:50:ea:8a:1f:a2:fa:ca:f0:8b:b6:5b:30:28:b0:2c:60:e8:
d1:86:db:48:81:55:a4:de:91:37:c6:4d:14:13:36:82:8f:77:
70:79:a2:16:61:30:90:db:e9:eb:67:d9:2b:87:c8:6a:71:be:
d1:92:dc:c6:8f:dd:f1:22:b1:e5:72:d2:56:41:2c:d8:fa:b0:
f6:2f:ff:bd:33:9a:03:50:27:49:e1:55:49:02:db:a6:89:d2:
29:a2:84:f9:7d:fc:55:63:b8:a9:50:69:e8:01:f1:23:64:ce:
cd:ed:70:fc:79:11:ba:d6:9b:28:4c:d2:ea:ae:05:65:a1:0f:
be:a7:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:06:34 2025 by rpki-client