Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47d1723c-e638-3d8a-b9ec-aec7bb964728.roa
File: 47d1723c-e638-3d8a-b9ec-aec7bb964728.roa (raw, json)
Hash identifier: 13w5DWDd1lGqQD6XFje4eu5+wkAeWSPRxdV5uhqM8f4=
Subject key identifier: 2E:6E:F2:A6:07:B1:C4:43:A6:40:AE:D9:81:8A:3C:B6:27:FA:E6:1B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661846535DC81EC391AA42C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47d1723c-e638-3d8a-b9ec-aec7bb964728.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.29.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:46:53:5d:c8:1e:c3:91:aa:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=95f4c81b-d196-444d-afb5-d2d27da5d9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8f:ff:78:ed:1b:96:80:26:88:ef:63:97:e5:
ca:4c:87:2f:0f:95:6c:de:e5:cf:dd:c2:18:d0:34:
99:61:8f:13:8c:78:1f:cd:90:b4:d8:c2:52:b8:1f:
43:e8:22:05:e1:dc:01:6c:ce:a4:66:e9:50:4a:8c:
65:0c:26:81:56:fd:e8:66:fc:6b:27:50:19:13:13:
4f:c1:4b:62:84:8a:54:f2:84:1b:fe:e6:a6:8e:74:
bd:e7:36:1c:92:3f:96:ac:43:01:f5:80:f8:ad:bb:
6b:0f:e7:1f:86:0a:b1:76:57:de:99:f5:52:4c:3b:
a9:ef:d7:5d:eb:7f:8b:43:28:39:d3:d9:f4:f5:4f:
56:fd:5a:8a:a8:84:d7:28:72:8b:3a:33:35:6b:93:
50:ec:f7:0e:73:a8:20:3f:e8:ad:1a:c6:f6:05:96:
a5:76:fa:87:f4:27:7e:1a:ad:03:77:b5:35:85:8a:
24:40:d8:9e:15:ca:76:92:c0:2f:69:6d:3e:d9:cc:
94:6d:88:e3:68:90:5d:db:f1:f4:cd:9b:40:2c:80:
21:e1:c7:fd:71:ce:1c:e7:8e:ad:d4:ef:60:47:ad:
3b:87:45:21:7f:1b:95:03:b6:69:35:c0:78:63:15:
ff:e9:de:c6:a4:96:91:48:13:3a:fe:2a:60:cc:84:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:F2:A6:07:B1:C4:43:A6:40:AE:D9:81:8A:3C:B6:27:FA:E6:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47d1723c-e638-3d8a-b9ec-aec7bb964728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:bf:80:f1:21:cb:cb:e7:5f:eb:44:44:60:29:3b:b9:da:8d:
c1:cf:cd:da:90:ea:51:0f:e0:b6:18:10:c1:ee:91:2d:d6:ad:
7d:c8:d0:3b:95:aa:60:91:65:38:a5:f7:cb:b2:50:21:c5:49:
62:67:78:9b:3a:21:71:8c:ee:ff:68:db:d4:7a:87:d9:79:9a:
bd:25:72:db:be:49:35:86:e4:c0:8b:0a:02:40:53:ba:a4:13:
b4:d1:79:71:19:21:d0:09:2d:22:ce:a9:e2:d3:39:8d:ab:ab:
3b:c6:b7:2b:59:43:83:c3:d8:f0:a1:b0:d3:f5:40:57:22:e0:
22:45:91:bc:58:cc:fb:e2:d8:d6:dd:72:9b:d8:0a:ce:9a:f7:
ca:38:a9:1d:25:4f:0f:a4:77:b1:27:ac:2e:3f:4f:7d:ee:02:
73:09:48:8f:a8:3b:2b:b9:71:bd:7c:0f:19:ca:56:65:6f:55:
fa:09:8f:36:f5:6e:ad:d5:55:70:e1:a6:c5:65:9e:27:df:8b:
b6:c3:35:80:64:6f:34:c1:6b:b8:9f:c1:81:41:5b:bc:54:fd:
36:2b:2e:d4:b2:95:d4:28:f5:f1:a5:a5:37:db:50:52:66:fb:
dd:27:81:3a:c1:3f:28:45:ae:6f:fd:e0:34:e5:65:9b:95:c1:
bf:a7:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:08 2025 by rpki-client