Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/58fe6325-adeb-397a-9d6d-92833251a13d.roa
File: 58fe6325-adeb-397a-9d6d-92833251a13d.roa (raw, json)
Hash identifier: zw83VdQhQcVn5vdWoowr8pRdqfTJ9gOSqh53Qz7FNVs=
Subject key identifier: 57:E1:3B:D7:EB:D8:14:8B:00:2D:5C:0C:2D:1B:EA:38:AF:2D:AA:E2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66207C01CFAACE0C80A7A580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/58fe6325-adeb-397a-9d6d-92833251a13d.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.191.152.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:20:7c:01:cf:aa:ce:0c:80:a7:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=16a6bb73-af77-43a3-a783-54ba7eb0dac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:00:33:8c:ac:da:2c:d7:56:cb:a1:40:82:a9:
dd:90:14:22:f4:a8:b9:f8:2e:36:59:ce:61:c3:6c:
b1:1a:fe:25:1e:34:f4:7e:01:40:82:f6:97:18:c2:
2d:f9:12:4c:93:e3:66:90:63:d3:1b:12:d2:dd:35:
74:6a:8a:c4:77:9c:57:65:4e:d4:6c:0f:32:5f:51:
fe:a7:f1:b6:5e:b6:33:9b:60:ed:4e:3f:31:e4:fa:
18:2f:43:ea:19:c8:60:ef:c1:5f:16:70:56:d4:ba:
78:84:0e:0f:cd:ec:c5:d0:7d:26:cf:44:79:8f:7e:
cc:7c:58:6d:37:e0:fd:b2:85:45:8c:13:24:4f:59:
0e:69:ad:e2:85:97:e3:7b:3b:c5:e0:ac:7a:c0:0b:
73:22:8e:2d:ac:b1:bc:28:c6:b7:64:2e:24:41:1e:
c9:11:92:7f:b0:63:73:9f:61:87:c2:66:d2:2b:9a:
4c:8c:ca:50:f5:14:32:6c:60:ab:ea:e5:84:a3:3c:
76:5a:4f:78:bb:6b:77:13:cb:4b:ef:d7:52:76:86:
c6:a5:6b:c8:34:4f:0f:b7:5f:4a:41:c6:67:a3:ec:
53:1a:35:23:de:09:78:d5:4e:80:36:90:35:c4:3d:
c1:e8:30:94:8a:91:d3:f3:67:34:c5:41:95:1b:6a:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E1:3B:D7:EB:D8:14:8B:00:2D:5C:0C:2D:1B:EA:38:AF:2D:AA:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/58fe6325-adeb-397a-9d6d-92833251a13d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1a:7f:c8:a3:b6:a1:0a:b0:1f:bf:fb:f0:9a:2d:00:2f:8c:
6e:88:54:37:e2:16:f5:e5:34:1a:08:89:5e:36:34:e3:0b:65:
4c:03:34:65:ed:15:85:f8:97:77:fe:31:27:72:89:46:e6:27:
80:36:a5:90:57:d4:b4:5f:a7:27:58:b7:04:31:03:c4:09:6d:
6c:3a:41:b8:b7:80:ba:46:5b:77:37:0f:79:9d:0d:1a:da:f9:
a9:e7:66:4d:4a:29:8d:10:08:8a:1f:8c:73:40:a4:0a:2f:32:
61:86:33:95:f2:7b:56:f3:3e:f7:33:5c:0f:05:40:d4:9e:75:
d7:c2:20:52:67:e9:75:c4:53:6a:c9:3b:df:ac:8f:43:70:14:
41:cf:a5:40:67:b1:e4:33:b3:46:fc:67:9e:f4:fe:9f:aa:55:
8a:63:1b:70:a4:80:6c:79:fe:da:39:36:f2:79:bd:fd:75:98:
0e:e9:fe:ec:7c:83:50:58:92:72:8e:b4:2b:49:dd:9c:a6:eb:
d7:fa:ba:b0:70:b1:81:0b:f3:49:b7:81:fe:18:29:40:08:3b:
bd:dc:0f:23:a5:f4:d1:65:78:bb:f6:72:c1:b1:67:cb:6c:d7:
55:02:bb:f3:17:51:76:68:3a:68:df:3b:69:91:b8:c7:c2:c0:
75:fb:8b:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mIHwBz6rODICnpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTZhNmJiNzMtYWY3Ny00M2EzLWE3ODMtNTRiYTdlYjBkYWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gAzjKzaLNdWy6FAgqndkBQi9Ki5+C42Wc5h
w2yxGv4lHjT0fgFAgvaXGMIt+RJMk+NmkGPTGxLS3TV0aorEd5xXZU7UbA8yX1H+
p/G2XrYzm2DtTj8x5PoYL0PqGchg78FfFnBW1Lp4hA4PzezF0H0mz0R5j37MfFht
N+D9soVFjBMkT1kOaa3ihZfjezvF4Kx6wAtzIo4trLG8KMa3ZC4kQR7JEZJ/sGNz
n2GHwmbSK5pMjMpQ9RQybGCr6uWEozx2Wk94u2t3E8tL79dSdobGpWvINE8Pt19K
QcZno+xTGjUj3gl41U6ANpA1xD3B6DCUipHT82c0xUGVG2pDsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfhO9fr2BSLAC1cDC0b6jivLariMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNThmZTYzMjUtYWRlYi0z
OTdhLTlkNmQtOTI4MzMyNTFhMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMaf8ijtqEKsB+/+/CaLQAvjG6IVDfiFvXlNBoIiV42NOMLZUwDNGXt
FYX4l3f+MSdyiUbmJ4A2pZBX1LRfpydYtwQxA8QJbWw6Qbi3gLpGW3c3D3mdDRra
+annZk1KKY0QCIofjHNApAovMmGGM5Xye1bzPvczXA8FQNSeddfCIFJn6XXEU2rJ
O9+sj0NwFEHPpUBnseQzs0b8Z570/p+qVYpjG3CkgGx5/to5NvJ5vf11mA7p/ux8
g1BYknKOtCtJ3Zym69f6urBwsYEL80m3gf4YKUAIO73cDyOl9NFleLv2csGxZ8ts
11UCu/MXUXZoOmjfO2mRuMfCwHX7i7A=
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:36:03 2025 by rpki-client