Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5020a82c-aba9-3e21-a00b-7f8256766beb.roa
File: 5020a82c-aba9-3e21-a00b-7f8256766beb.roa (raw, json)
Hash identifier: SFJBCEKQTjcqaBIfg1/cA65/qqyMkIfe0F1YYUBnOeU=
Subject key identifier: D1:03:E5:52:2E:77:2B:6A:4D:5F:F4:26:1D:35:0D:AC:CA:13:6E:18
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA149BBA5202411EB71C438E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5020a82c-aba9-3e21-a00b-7f8256766beb.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:3800::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:49:bb:a5:20:24:11:eb:71:c4:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=8745d9da-626b-4a44-844d-a556ceb0245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:9c:d4:5f:48:bc:66:3e:8d:e6:08:65:19:
07:d2:9d:3d:37:b7:13:b3:f3:05:48:b8:9e:00:4a:
7d:01:50:25:b4:e2:0e:1a:c3:02:53:8b:b8:c7:48:
f3:8b:a0:ab:ba:dd:76:0d:aa:5a:90:cd:7d:0d:68:
46:57:6f:4b:33:64:2d:bc:cc:a2:50:9d:21:7b:89:
3a:04:e1:58:9e:31:cd:67:34:5e:aa:37:ba:b0:e3:
40:ba:51:a1:da:db:8e:a3:32:d8:20:77:e6:8f:7e:
ad:ae:a2:4f:ec:c4:2d:08:fd:be:fd:86:eb:e2:f1:
cd:a4:bc:00:86:4f:ec:c9:2b:64:41:7d:3e:56:f2:
ae:e6:85:60:20:2e:a8:da:3a:24:28:51:c6:90:69:
34:84:0b:8d:5e:a6:4b:4e:d0:1a:0d:6e:70:fc:ec:
a3:cd:66:2e:b7:3f:8e:a1:2c:4b:d1:c9:0a:2b:ad:
52:60:33:0d:ef:84:2f:dc:09:8a:82:a3:cb:b2:12:
f5:61:77:ac:43:a2:93:72:48:c4:0e:2d:88:57:a5:
51:a0:b2:96:19:61:5d:2e:63:14:09:d3:ee:16:1a:
39:d5:7e:9f:9b:9e:45:13:f6:27:eb:c4:0d:49:ad:
42:59:41:e8:8e:02:32:f7:3d:f7:2b:98:f4:f4:a9:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:E5:52:2E:77:2B:6A:4D:5F:F4:26:1D:35:0D:AC:CA:13:6E:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5020a82c-aba9-3e21-a00b-7f8256766beb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:3800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ca:57:b7:2a:6e:f5:e9:ce:d1:14:2f:26:a2:c9:47:ba:cd:
78:b4:4e:20:22:74:19:24:75:c4:ac:d2:0c:f5:8d:90:1a:6e:
e5:1d:8d:1c:e0:18:5d:8d:43:d1:bd:c5:58:55:b6:3c:3b:5d:
88:b1:a3:82:27:c4:55:9d:f9:0b:99:13:17:61:94:1b:6a:10:
45:f6:68:fe:1c:3b:cc:26:10:53:d2:9a:10:36:4a:d6:45:05:
04:be:2b:e3:17:f5:7d:e4:26:18:62:75:a5:1b:6a:66:d3:46:
1c:61:3a:e8:0e:84:f0:3d:87:20:4a:73:16:82:34:57:c9:8a:
6b:45:d1:eb:d3:dc:0d:6c:e5:6b:e3:50:51:75:f1:2a:bc:d6:
5d:d6:60:f8:cd:cb:a3:e2:63:1c:26:b0:a3:94:6b:75:e2:10:
e3:ad:0e:7b:81:3b:4e:21:10:4c:3b:86:27:31:9a:d8:99:7f:
2b:58:da:ce:60:24:a3:6b:cc:3f:17:f7:84:8e:d8:9d:86:ef:
88:68:4b:74:73:e2:24:52:5a:b6:42:fd:bf:7e:47:34:79:05:
86:1b:2e:9f:83:80:a9:c6:77:06:db:d2:c7:e4:43:6a:b0:ff:
88:bb:de:a4:c7:40:fc:cb:7f:af:84:bb:20:a3:f3:b1:ba:ef:
3e:78:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:09 2025 by rpki-client