Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5868ae0f-0699-321d-8018-fff4089792c7.roa
File: 5868ae0f-0699-321d-8018-fff4089792c7.roa (raw, json)
Hash identifier: hJgyBW3CKuvWnxcbGwS6RfxtUUJrkp1AWmm6vkHCPF0=
Subject key identifier: DB:66:53:1D:A4:D0:04:AD:5D:E9:D6:93:AA:1F:C9:26:C3:25:BF:9E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21121AA248BE66F71356D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5868ae0f-0699-321d-8018-fff4089792c7.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 162.40.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 24 Mar 2025 14:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:21:aa:24:8b:e6:6f:71:35:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=cd5f7960-b2b6-49b4-9341-daba23f610bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:6f:3e:61:0d:98:33:22:2a:fd:77:77:9c:
97:22:2e:e5:04:31:f5:98:9a:4f:ad:89:32:95:32:
30:26:a1:16:2b:a1:d4:68:4f:e8:59:c2:4f:3c:c5:
73:12:a5:79:f7:6f:6d:4c:4d:7e:6a:d3:ce:7c:47:
82:61:37:0c:0c:a2:5a:5d:a1:a4:22:71:4f:40:f9:
95:70:eb:77:c6:1e:8a:39:0e:b9:5a:f1:6c:87:bb:
61:20:5a:f7:73:9f:b9:d8:23:fe:46:ba:1e:78:c1:
76:37:da:5d:a8:09:9b:3d:98:34:93:f5:e6:87:55:
7c:8d:e0:e4:99:15:61:cd:6f:6a:96:f4:16:f1:a4:
e1:d3:7f:53:29:a9:f2:c0:a8:6e:59:8e:c2:be:a3:
98:c2:8c:f6:09:58:41:26:a1:fd:7a:18:be:a7:3e:
d2:d2:d0:53:90:55:a7:a6:f8:ac:b3:3c:7c:f5:1d:
1b:0a:04:69:1f:74:2c:44:ab:9e:c2:7e:97:03:18:
0b:c5:6b:1c:0a:67:d5:3b:5e:b3:aa:72:56:8d:2c:
37:24:8a:99:28:be:c2:34:74:b7:89:59:23:93:c1:
f8:19:ea:d0:4e:ad:e8:4b:c0:9c:31:26:0f:e9:00:
d6:6c:74:4e:84:2e:04:23:c2:47:2e:4b:35:96:40:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:53:1D:A4:D0:04:AD:5D:E9:D6:93:AA:1F:C9:26:C3:25:BF:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5868ae0f-0699-321d-8018-fff4089792c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.40.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:4d:95:83:88:41:5a:07:e4:ee:ce:c8:9f:9f:27:5b:13:9e:
40:8e:e8:b8:06:10:50:b7:66:a7:3e:54:2d:52:84:d2:b5:47:
0f:53:dd:8a:9d:99:bf:0b:cc:91:f0:a1:33:6c:c0:7d:4d:f6:
b9:f5:e8:ab:ba:51:cf:4b:62:45:b7:6c:d7:22:ba:94:9f:bd:
c4:c7:28:95:5f:9f:cb:6d:06:bb:6e:d1:7f:4d:64:d1:f3:10:
61:d6:5e:31:12:29:14:91:51:37:95:02:f2:ce:5d:fa:35:c6:
b1:79:2f:4d:c2:90:97:e1:aa:c9:cf:3b:1b:ca:59:25:5f:1c:
61:38:08:0a:ec:f3:57:a0:c0:22:27:1d:62:1e:71:0f:e3:24:
58:22:f7:59:23:23:4c:a4:78:e5:cd:a5:67:5d:42:36:dd:aa:
6d:b5:31:f4:df:6d:39:ba:15:7b:a9:3b:f3:df:c1:0e:04:0f:
77:6a:8c:ee:00:c1:be:15:8a:c4:0c:fd:a0:37:2b:89:0d:89:
ae:af:2b:2a:94:f8:5a:e6:df:98:03:3c:2d:51:61:63:be:40:
7e:4d:ad:bb:56:ea:a3:58:16:8f:6a:f9:ed:17:d1:1c:06:1a:
3b:b6:4e:07:2b:75:1e:3b:11:ff:26:24:44:99:6d:a2:cf:7c:
78:38:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:37 2025 by rpki-client