Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d0945e6-9db9-39c4-8711-e91a1ab3125e.roa
File: 5d0945e6-9db9-39c4-8711-e91a1ab3125e.roa (raw, json)
Hash identifier: GGavhlfcbclFDtvmIOTyDHLeTUzdn79sSUuzbDl3Brw=
Subject key identifier: F9:9D:26:CE:E9:ED:8F:8B:EB:D1:66:10:14:2F:7B:9D:E9:CA:63:43
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6616091810CFD3EC68530B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d0945e6-9db9-39c4-8711-e91a1ab3125e.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 50.96.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:09:18:10:cf:d3:ec:68:53:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=01a9863f-a909-4e51-8714-5dce1d81f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:89:a4:37:b3:ff:23:80:2a:4a:fb:9e:df:30:
9a:04:38:00:d7:29:77:f7:dc:b8:f5:73:25:30:ff:
49:97:be:53:07:cc:f0:72:7d:89:14:d2:c6:bd:6d:
bc:f0:3a:bc:ab:66:03:02:76:2f:df:ca:96:fe:9e:
45:8b:05:5f:44:92:a3:26:02:7a:2f:d2:6f:09:11:
6f:c2:d7:f5:6b:ea:f1:eb:9a:b3:0f:aa:e1:0c:be:
09:3c:3a:cc:4e:9e:1d:83:c6:71:72:39:b8:e0:e5:
3a:94:a7:9a:1b:5d:5d:7a:a2:82:1f:43:ff:a6:d6:
b5:62:03:e8:6a:02:9c:f6:69:1d:cd:ea:83:7a:25:
22:49:d4:53:fa:de:1a:53:cd:78:76:01:1f:a4:ce:
e4:d0:80:9b:d3:6d:a0:d0:d8:18:20:2a:7b:e3:2e:
63:5d:4a:7b:b5:eb:4e:2c:2e:b3:c3:ab:b0:68:cc:
a7:ea:73:8c:0c:9c:5b:62:f8:6c:82:9e:4a:ac:d4:
b4:16:47:ae:c8:0f:72:4e:73:73:5b:ed:0f:99:d2:
d6:56:d7:67:c6:28:3e:4c:9d:d7:49:ae:ed:14:5b:
ab:6f:08:14:7d:d9:ae:1d:56:53:35:9d:56:61:e3:
0b:53:05:a2:aa:d5:a2:9d:97:84:28:62:f9:d4:b9:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:26:CE:E9:ED:8F:8B:EB:D1:66:10:14:2F:7B:9D:E9:CA:63:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d0945e6-9db9-39c4-8711-e91a1ab3125e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:84:98:48:11:47:9b:ec:5d:69:53:92:90:f7:b2:6d:95:24:
ba:1b:54:a4:c0:79:47:a9:4d:f7:06:be:fe:be:d7:a5:c5:e5:
9f:8a:1b:51:5c:c2:df:71:da:a1:fa:75:b9:ff:04:12:69:93:
82:43:55:87:47:c1:df:58:b8:79:76:07:6f:93:bf:d1:2e:62:
50:ec:ed:43:9d:39:40:0c:81:34:76:cc:92:de:88:c4:50:48:
85:3f:3f:af:af:bd:d0:cd:a3:e0:b6:8e:37:61:5d:ed:7b:c2:
ea:31:f6:fe:0b:65:0b:b3:6a:f7:bc:87:db:11:6f:7d:01:06:
06:eb:d4:5a:a7:8d:18:89:51:c8:b5:66:58:5c:77:06:df:35:
ea:b5:5e:27:0f:26:8d:d7:0d:88:58:e0:d0:a1:13:5b:28:5d:
1c:21:af:10:29:6c:34:2d:d7:0c:5e:bf:21:b5:7e:1f:f4:94:
20:39:48:d4:69:06:60:7c:d8:0a:13:f6:1a:ae:3f:28:b5:8d:
d9:28:c8:95:9a:5c:1b:04:0c:b6:1d:8f:a0:d4:23:fb:67:88:
07:7f:a8:7c:01:29:01:63:ed:38:8c:ac:cc:89:5a:81:1c:7a:
02:72:52:bc:05:18:06:33:90:83:9a:cb:09:3a:b0:17:d1:84:
98:72:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:17:26 2025 by rpki-client