Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52382634-e37e-375d-bcfe-436b69118086.roa
File: 52382634-e37e-375d-bcfe-436b69118086.roa (raw, json)
Hash identifier: BuaidUeXhHXDEp+SZhNBi/a0Ffw8JaRkPI5sk9IlVI8=
Subject key identifier: 5F:64:F1:E4:C3:13:7E:2A:67:7C:33:23:0B:2E:FF:3A:50:D7:3E:6A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FACCA6FAAD2A58FFB895540
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52382634-e37e-375d-bcfe-436b69118086.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.92.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ac:ca:6f:aa:d2:a5:8f:fb:89:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=926fd4e0-0da9-4153-9ddf-b4248257c83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:1a:e2:4e:da:f9:67:38:54:65:b9:05:3f:
2d:5a:fa:9e:52:c5:29:a3:fc:49:4f:46:9d:e1:cf:
8f:33:8a:87:a7:7d:de:23:bd:93:f8:92:12:1c:74:
21:30:f4:1b:3f:da:05:43:a2:f5:9f:b4:08:8d:0d:
e3:f8:b5:3a:47:b9:7f:cb:bc:a8:00:7e:cc:f5:de:
7c:87:ee:53:e4:d2:39:84:c5:5e:71:a1:90:d8:d8:
71:b3:8d:a8:b7:94:f1:71:8d:8f:fb:87:84:05:22:
9d:20:80:b6:d3:96:11:d5:86:82:57:a0:92:ea:08:
64:13:ba:01:fe:e3:68:65:bd:b0:15:d8:68:75:f4:
90:f8:21:1d:a7:64:71:e8:db:13:d9:4b:d6:1e:6e:
8f:58:a4:f3:10:a1:53:61:cb:a5:ea:ec:cc:63:0e:
65:f9:23:ba:53:e9:ad:27:82:96:f2:63:91:09:33:
a2:c0:14:85:71:c2:fe:7b:6d:6a:ca:aa:e6:8d:d4:
30:1d:42:c0:0e:84:de:05:e8:5a:fb:63:5d:6a:67:
82:48:0f:ec:9d:41:ef:7b:0c:9f:87:6b:0a:f4:39:
37:61:69:00:69:87:bc:10:37:71:61:42:92:a2:6c:
34:26:7a:57:2e:3d:d7:13:4b:b9:78:2f:a7:9c:45:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:64:F1:E4:C3:13:7E:2A:67:7C:33:23:0B:2E:FF:3A:50:D7:3E:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52382634-e37e-375d-bcfe-436b69118086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:b6:e6:72:c3:6f:74:04:fb:ed:15:7d:32:06:32:93:34:18:
54:b1:8a:57:c6:e1:73:a9:44:4d:af:31:5c:86:f2:cb:0d:d3:
48:21:93:d1:1e:9d:3b:1a:d2:48:8a:b6:fb:83:7e:90:71:fb:
ef:f4:7b:d9:c5:99:fa:3c:b1:e0:21:14:79:ec:1e:c0:fb:6f:
83:f0:93:d6:20:47:50:44:67:f2:84:e3:25:3a:ba:12:4d:73:
d3:7a:dd:6d:93:62:d2:e8:5b:6c:f3:ff:8f:32:78:da:7f:71:
fd:76:b2:d3:6b:fc:9b:cd:4f:5b:06:18:89:ac:90:44:48:d8:
d9:cb:4e:6c:9e:4b:fe:64:9b:56:38:68:55:2a:bf:21:55:aa:
b9:2a:93:4c:36:4f:2f:87:d8:29:b4:50:34:7f:e6:92:de:de:
43:31:cc:ce:06:d8:dc:0f:e8:b8:2a:2c:d0:cd:e0:10:c7:c1:
7c:81:44:fe:94:fd:d5:84:b9:f8:64:02:5b:a0:50:bd:e1:64:
9a:b4:e2:5e:61:c2:47:15:7b:b0:26:46:3a:68:34:78:fc:07:
b8:fc:9a:5e:59:d1:9c:4b:7b:25:27:0f:8f:66:88:60:bf:93:
af:d9:ec:74:cf:bb:5a:c3:17:f0:72:66:dc:38:76:44:df:26:
85:c4:50:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1PrMpvqtKlj/uJVUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
OTI2ZmQ0ZTAtMGRhOS00MTUzLTlkZGYtYjQyNDgyNTdjODNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicka4k7a+Wc4VGW5BT8tWvqeUsUpo/xJT0ad
4c+PM4qHp33eI72T+JISHHQhMPQbP9oFQ6L1n7QIjQ3j+LU6R7l/y7yoAH7M9d58
h+5T5NI5hMVecaGQ2Nhxs42ot5TxcY2P+4eEBSKdIIC205YR1YaCV6CS6ghkE7oB
/uNoZb2wFdhodfSQ+CEdp2Rx6NsT2UvWHm6PWKTzEKFTYcul6uzMYw5l+SO6U+mt
J4KW8mORCTOiwBSFccL+e21qyqrmjdQwHULADoTeBeha+2NdameCSA/snUHvewyf
h2sK9Dk3YWkAaYe8EDdxYUKSomw0JnpXLj3XE0u5eC+nnEUOjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9k8eTDE34qZ3wzIwsu/zpQ1z5qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIzODI2MzQtZTM3ZS0z
NzVkLWJjZmUtNDM2YjY5MTE4MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0VwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI625nLDb3QE++0VfTIGMpM0GFSxilfG4XOpRE2vMVyG8ssN00ghk9Ee
nTsa0kiKtvuDfpBx++/0e9nFmfo8seAhFHnsHsD7b4Pwk9YgR1BEZ/KE4yU6uhJN
c9N63W2TYtLoW2zz/48yeNp/cf12stNr/JvNT1sGGImskERI2NnLTmyeS/5km1Y4
aFUqvyFVqrkqk0w2Ty+H2Cm0UDR/5pLe3kMxzM4G2NwP6LgqLNDN4BDHwXyBRP6U
/dWEufhkAlugUL3hZJq04l5hwkcVe7AmRjpoNHj8B7j8ml5Z0ZxLeyUnD49miGC/
k6/Z7HTPu1rDF/ByZtw4dkTfJoXEUMw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:49 2025 by rpki-client