Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d45c922-c885-3a72-b807-da3c0a5b0bc9.roa
File: 4d45c922-c885-3a72-b807-da3c0a5b0bc9.roa (raw, json)
Hash identifier: jKy2EieomSgpaxqxY8XIhrhH8dPUC4aEF7wgycdNdWM=
Subject key identifier: 4D:23:7C:17:A8:C5:BB:8C:FF:D5:B7:9A:2D:DD:09:55:1E:98:8E:BC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661E90B236DEBE6E45BE55F0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d45c922-c885-3a72-b807-da3c0a5b0bc9.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 139.55.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1e:90:b2:36:de:be:6e:45:be:55:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=b2b4ff19-82eb-400c-9765-ed353d8a95f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:f0:03:84:b9:d4:18:d0:9b:51:66:80:76:
1d:1e:46:2e:45:d7:90:78:27:bf:3f:61:ab:6d:54:
cd:93:7f:5d:21:04:c5:8e:4c:11:d5:80:49:72:7b:
02:cc:0b:0f:78:2f:f6:c4:b5:a5:8a:21:08:2f:17:
f4:50:a2:67:42:91:2d:09:16:dc:bc:8c:04:27:b6:
61:57:a1:97:02:f9:d4:0f:52:b4:d8:1d:b5:73:b6:
8b:ca:ae:fe:da:6c:1f:38:b3:1c:4b:cb:4a:65:4f:
33:ad:0e:ed:35:bb:24:7f:c4:23:01:b3:94:70:81:
e5:97:f4:ad:80:1a:9c:ca:45:21:55:91:94:d4:16:
22:aa:c5:0a:ec:a8:be:0c:fa:1f:28:75:ea:34:9f:
e2:a0:6d:1a:0b:5f:67:68:0e:65:cd:11:52:3a:b0:
9a:28:db:f3:a8:74:2c:7e:85:9d:0c:98:33:a2:59:
24:6e:38:c2:66:e7:02:24:e7:8f:d0:c2:0f:7a:19:
8a:d3:55:b5:ef:70:ea:f6:83:39:2f:b1:b3:4c:89:
fd:1e:08:1b:60:c9:5f:1c:12:05:a2:05:b4:b1:30:
b5:02:20:e0:55:57:d5:91:7b:fe:f2:bc:16:c4:49:
51:be:66:8a:a4:f1:d3:c6:29:78:29:0d:c0:31:fa:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:7C:17:A8:C5:BB:8C:FF:D5:B7:9A:2D:DD:09:55:1E:98:8E:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d45c922-c885-3a72-b807-da3c0a5b0bc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
139.55.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d5:a5:21:f0:41:8c:17:35:14:38:75:8c:be:6f:6f:cd:1d:
ff:b0:2e:54:91:96:63:18:dc:08:9c:99:49:95:3e:cd:13:3d:
f0:cb:df:84:90:a0:fc:1e:30:f3:53:68:dc:53:2e:e7:43:b2:
4d:00:6d:f7:c9:c3:6f:e8:ad:76:47:cc:2a:d0:f0:ed:c3:d9:
2f:e1:ea:0e:78:4e:b1:a0:8f:69:f8:d3:17:68:e3:d9:93:16:
52:c8:e7:0c:12:97:0e:00:79:e1:8c:79:3e:25:aa:d0:b8:90:
6d:4d:35:ab:a8:71:3b:99:88:e2:e2:47:64:90:05:3d:b5:c4:
a0:f5:78:b8:87:e7:1c:7c:7f:2d:84:f3:c6:cd:63:99:04:75:
81:0b:6f:ea:02:3c:53:60:00:41:8e:2e:f1:92:08:11:de:bc:
57:2b:ba:c7:c5:ae:bb:45:f6:ea:cd:18:42:02:d8:d5:31:29:
be:95:db:03:74:36:33:3f:6e:07:10:0d:d6:80:9e:67:54:97:
2d:da:87:3c:78:6d:28:73:78:db:fc:c5:49:d2:bc:1c:45:9e:
b7:c5:bb:50:b1:43:06:f8:4a:ab:4c:8a:6d:75:11:16:59:a8:
a6:5d:bd:e6:0e:b9:06:a3:83:a6:fe:95:7e:f7:0d:e0:d6:d2:
8c:c1:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:25 2025 by rpki-client