Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/429bc9d0-7643-369b-a058-7148b02e1df3.roa
File: 429bc9d0-7643-369b-a058-7148b02e1df3.roa (raw, json)
Hash identifier: VyDOqMx7ka0hWiJUg8Wqbu2ZeMGJbdSriCqS6CkErWI=
Subject key identifier: 43:70:5D:D5:73:1E:1E:93:6F:1D:AA:48:5F:38:5F:D8:28:1B:72:76
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661DB90B3223656A431CB2C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/429bc9d0-7643-369b-a058-7148b02e1df3.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.20.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:b9:0b:32:23:65:6a:43:1c:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=d5721ea3-91e5-44d1-b132-a9d285e89233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:5f:ee:80:bf:39:2b:59:b9:b0:d1:dd:5a:
fe:e7:65:27:34:53:35:a4:a5:7c:ae:d3:05:b1:03:
3c:cb:0a:f8:40:24:a2:11:f9:d7:e8:f2:60:eb:5a:
23:6f:d2:10:4b:b8:60:3b:22:71:bb:14:ea:03:45:
93:e6:6a:1e:ba:fb:b1:8b:c5:c5:9d:00:21:47:6b:
b1:4c:37:d3:da:b8:dc:75:76:d3:53:41:61:9d:41:
d4:ce:8f:52:a6:cf:99:be:3d:03:d7:99:18:33:7e:
ab:46:4c:fa:61:5b:28:a3:28:4f:65:ca:96:15:08:
c4:38:f6:92:81:a3:5d:8f:4f:f9:ad:0e:0e:ef:56:
ca:97:d1:be:d4:86:8f:f0:81:d1:12:2a:06:eb:20:
32:c9:af:d2:cb:c6:6e:0a:25:bc:5f:df:ff:e1:89:
cb:21:7c:ec:45:61:d3:67:4d:e2:84:77:28:bb:b2:
4e:bf:db:bf:a5:30:65:07:91:24:1f:51:5c:33:54:
43:f2:bd:66:31:0c:d0:2e:49:53:c3:d3:a0:8e:9c:
1e:94:d5:52:fe:37:4c:f5:3e:48:84:62:13:0f:3c:
01:be:83:63:98:ec:c6:26:35:7e:a3:5a:6c:a8:49:
ee:a3:12:f9:de:a0:d0:0d:0a:4d:a1:4d:85:80:c0:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:5D:D5:73:1E:1E:93:6F:1D:AA:48:5F:38:5F:D8:28:1B:72:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/429bc9d0-7643-369b-a058-7148b02e1df3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:97:9f:21:6e:28:5c:e5:95:d3:5b:df:21:de:d2:0f:ed:a3:
d9:b1:c8:64:58:bc:b8:8a:f4:06:4d:70:b7:ad:3e:e6:70:c7:
ae:ae:32:a7:ba:61:93:da:0e:08:af:d2:4d:a8:fb:0e:27:28:
d5:d1:69:e9:de:8b:02:0f:40:a7:98:1a:01:5c:f1:37:4b:b5:
0f:ed:36:53:37:56:a7:bc:0d:d3:9a:8e:e8:ee:aa:70:d5:9f:
4a:cd:63:e2:37:35:40:ce:ca:9f:e1:bf:50:3e:51:df:b3:73:
93:54:3e:4a:7c:ba:9b:00:ab:eb:67:12:1d:07:5e:88:6e:5d:
87:d8:b2:a5:1c:d2:86:17:b9:d0:c4:38:64:21:db:65:ad:37:
dc:e8:cd:ec:fa:66:c6:c2:8f:e2:96:f0:f0:0a:d9:96:72:aa:
46:5e:c6:b1:d5:6d:d5:2a:60:9c:5f:c3:f8:04:9e:67:18:6f:
99:49:18:46:14:16:cb:bf:c7:de:fb:44:40:0b:a0:27:c0:a7:
09:bd:5a:51:ad:e0:4d:8b:51:cc:94:0c:b6:13:e4:13:82:83:
1a:3f:20:0e:b7:e0:4e:14:f1:96:2a:c5:82:85:23:1c:d2:8a:
da:a7:e5:85:8e:dc:ad:d5:0c:98:af:fb:6e:db:84:8e:c0:94:
68:39:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:41 2025 by rpki-client