Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a2eb23-8084-3bb3-b3b4-950f38c1b672.roa
File: 48a2eb23-8084-3bb3-b3b4-950f38c1b672.roa (raw, json)
Hash identifier: xP8Szlq4h617u/E+ARy+cmfCGWi0VksH3nWASDS04fk=
Subject key identifier: BF:92:CC:59:02:3A:D8:DC:FF:3B:45:E3:B2:41:E5:81:39:CF:04:C7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661DEB5E3F81351AB4123C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a2eb23-8084-3bb3-b3b4-950f38c1b672.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.21.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:eb:5e:3f:81:35:1a:b4:12:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=b705c56a-0886-4a51-8e78-6fd3639a58b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:aa:02:47:87:36:9a:b1:63:31:d1:f7:39:87:
48:8f:0a:a1:7a:15:01:e8:0a:75:b5:89:32:7e:86:
93:47:2b:e8:f7:81:43:a4:c7:01:25:74:53:73:13:
99:1b:4d:27:b7:22:aa:db:b5:44:57:6f:c8:45:fb:
69:a0:a5:20:d7:89:9a:34:9c:2b:5a:9c:31:e1:46:
d4:08:70:ab:85:41:6c:fd:46:2f:c0:67:9b:0c:93:
e3:e7:ec:a9:3a:54:58:5d:a4:8c:19:49:9f:9e:15:
ea:da:9b:b1:7d:45:67:53:af:10:36:61:3c:6b:d3:
53:48:6f:f1:04:b0:de:5c:92:c4:0e:93:f0:a4:af:
62:f0:da:d0:0b:f2:7f:3a:f8:f2:fe:ea:7b:6c:9a:
03:b9:e1:42:5e:97:4a:1d:f7:e9:2a:e8:fb:b1:40:
2e:7c:a8:52:0b:a7:d5:af:32:9d:58:06:a0:e6:d5:
aa:9d:ef:30:00:cc:77:23:2e:32:06:24:b8:77:24:
1c:cf:38:63:a3:55:c2:ad:d0:54:c5:5d:fe:e9:7a:
cd:8a:2b:9b:1f:91:2c:81:01:d8:a6:9a:87:8e:3f:
1f:aa:60:13:2f:5a:e5:15:43:1a:fa:cc:fa:5d:83:
e0:80:39:bc:32:c4:fd:30:fe:9c:3e:6e:c5:a6:b7:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:CC:59:02:3A:D8:DC:FF:3B:45:E3:B2:41:E5:81:39:CF:04:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a2eb23-8084-3bb3-b3b4-950f38c1b672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:d5:09:da:64:fd:2b:d7:76:5a:15:7d:ef:a6:07:9e:4c:eb:
dc:6c:aa:73:31:0c:fd:3d:a7:ee:5c:52:59:15:37:1a:11:2f:
69:fa:43:eb:86:23:72:de:08:70:26:22:fd:0a:d0:c2:2f:78:
cf:e9:2f:da:bf:89:d4:2e:75:a3:b9:66:58:2b:bd:f4:97:8f:
7c:95:ee:8d:2d:0f:f9:92:36:06:7a:ee:10:c3:7f:be:e1:0e:
5f:08:6d:9f:f7:10:38:d6:9e:5e:67:9b:c5:40:33:fd:f6:de:
08:9e:3b:54:6d:8a:71:02:23:0b:bf:06:b4:3f:54:f9:93:e1:
5a:11:2e:1c:6f:a0:bf:69:65:f3:62:c2:0e:70:b0:71:75:5f:
70:9d:1b:c1:c7:68:ae:1c:07:3e:1f:08:87:c7:bd:fb:31:ed:
86:e9:d8:84:8e:64:06:67:6f:77:1f:24:ed:57:b2:8d:41:96:
ab:85:c3:78:3d:7e:7e:7f:d3:ab:24:7d:ea:44:8d:cf:fc:0f:
e9:bb:7d:ee:42:f9:f3:22:2f:53:a4:2a:2a:22:37:ad:b0:4c:
28:5e:d4:77:f3:a9:97:7c:5c:0d:3a:1b:a4:f4:2c:f5:81:40:
2e:e4:72:18:89:2a:7a:70:ee:e4:47:32:84:cc:2e:52:dc:9d:
f4:83:81:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHeteP4E1GrQSPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YjcwNWM1NmEtMDg4Ni00YTUxLThlNzgtNmZkMzYzOWE1OGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqoCR4c2mrFjMdH3OYdIjwqhehUB6Ap1tYky
foaTRyvo94FDpMcBJXRTcxOZG00ntyKq27VEV2/IRftpoKUg14maNJwrWpwx4UbU
CHCrhUFs/UYvwGebDJPj5+ypOlRYXaSMGUmfnhXq2puxfUVnU68QNmE8a9NTSG/x
BLDeXJLEDpPwpK9i8NrQC/J/Ovjy/up7bJoDueFCXpdKHffpKuj7sUAufKhSC6fV
rzKdWAag5tWqne8wAMx3Iy4yBiS4dyQczzhjo1XCrdBUxV3+6XrNiiubH5EsgQHY
ppqHjj8fqmATL1rlFUMa+sz6XYPggDm8MsT9MP6cPm7FprdlqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+SzFkCOtjc/ztF47JB5YE5zwTHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDhhMmViMjMtODA4NC0z
YmIzLWIzYjQtOTUwZjM4YzFiNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPVCdpk/SvXdloVfe+mB55M69xsqnMxDP09p+5cUlkVNxoRL2n6Q+uG
I3LeCHAmIv0K0MIveM/pL9q/idQudaO5ZlgrvfSXj3yV7o0tD/mSNgZ67hDDf77h
Dl8IbZ/3EDjWnl5nm8VAM/323gieO1RtinECIwu/BrQ/VPmT4VoRLhxvoL9pZfNi
wg5wsHF1X3CdG8HHaK4cBz4fCIfHvfsx7Ybp2ISOZAZnb3cfJO1Xso1BlquFw3g9
fn5/06skfepEjc/8D+m7fe5C+fMiL1OkKioiN62wTChe1HfzqZd8XA06G6T0LPWB
QC7kchiJKnpw7uRHMoTMLlLcnfSDgZw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:20 2025 by rpki-client