Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67416a9c-33f9-3f90-b631-321afc3c8d25.roa
File: 67416a9c-33f9-3f90-b631-321afc3c8d25.roa (raw, json)
Hash identifier: TsFD3M9n9doEvgwt3BkwSZ1d+vrxN5NChzxzOWSRwE4=
Subject key identifier: 28:35:B2:E9:C6:D6:25:5B:5D:08:A9:41:12:8A:58:C8:95:93:65:65
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FB061DB6D79707C42400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67416a9c-33f9-3f90-b631-321afc3c8d25.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 69.66.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 22 Jan 2025 18:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fb:06:1d:b6:d7:97:07:c4:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=d121f891-04e4-48aa-b890-3775aca5723b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:81:2c:03:3e:98:f5:e2:c8:b6:b8:8f:df:
b7:57:b5:87:c3:2b:d8:ff:55:b0:18:2b:ad:41:09:
f8:2a:80:01:55:0b:cf:cf:e3:be:0c:91:52:69:f5:
d3:67:5a:8f:79:e4:8a:cb:09:d6:b7:1f:ff:01:79:
d3:f1:0f:ec:4a:77:59:fc:3f:5b:53:be:00:79:2f:
1f:93:04:3d:dd:30:12:61:49:22:4e:15:8b:23:0c:
cc:3f:ca:4a:03:76:b1:98:90:37:f6:32:b1:4c:d1:
5b:89:17:53:c6:ed:c8:bd:2f:98:76:cb:d6:40:29:
31:33:81:d8:f1:ed:3d:95:e2:81:1e:fe:62:6d:7f:
a3:1d:a3:46:bc:60:df:e7:1b:1b:d1:54:f4:d4:a8:
5c:73:3e:86:ec:dc:22:01:56:c4:77:1d:9d:1a:f1:
0d:1a:14:6a:a2:4a:d4:61:4e:17:ad:d2:c0:15:74:
89:7e:08:9e:8a:66:9c:3f:2e:cb:1c:4a:4d:f0:f3:
ae:c5:c3:84:ac:39:12:78:e0:2e:a6:5b:bc:17:bb:
04:79:3c:e0:9a:8c:70:36:2b:59:42:31:c2:69:71:
46:e1:75:2a:40:cf:3f:cf:04:7b:c0:a9:7b:f5:c4:
2f:30:2e:6a:90:e3:ef:84:2a:87:a0:e3:72:14:fb:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:B2:E9:C6:D6:25:5B:5D:08:A9:41:12:8A:58:C8:95:93:65:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67416a9c-33f9-3f90-b631-321afc3c8d25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:a7:7c:2d:3d:46:1c:32:ae:3e:8e:4f:1d:e7:c2:5c:f8:9b:
86:fd:76:ba:91:e7:2c:d5:0e:39:ab:38:d4:8b:4b:a5:1b:4b:
5d:9b:72:06:3d:4c:03:0d:97:c9:3b:96:c4:34:bf:10:ba:37:
0a:61:df:fc:15:c3:b3:aa:e9:04:66:69:e0:69:40:01:8b:d6:
9f:c0:2e:ad:f1:2b:26:ad:99:df:50:03:f0:ea:ba:c9:df:a7:
02:5e:ec:eb:7f:c6:87:99:ff:bc:38:01:6b:8e:d4:b8:cd:3b:
f0:fc:1e:42:15:f4:c7:cc:d6:78:44:42:ca:ce:43:cd:f9:34:
b6:38:b8:9e:a5:3c:75:80:0c:7a:16:5d:9d:70:aa:8c:49:14:
bf:69:9e:2c:5f:1e:84:3f:35:f6:db:cf:24:9c:9c:43:d8:4d:
f1:68:9d:9e:d3:e6:bd:7c:34:81:70:8e:4d:f8:66:be:34:c5:
ac:b8:bd:08:3a:0e:4c:fd:56:76:71:46:bd:db:76:54:76:1a:
f7:e8:b7:3c:a1:bf:b8:8d:c4:60:b4:51:1d:34:16:35:0d:24:
96:e0:b0:56:5a:76:c5:f8:ad:71:82:cf:6a:6e:a3:24:37:10:
96:4b:6a:f6:c0:be:6c:35:c6:bd:c2:24:31:d9:63:98:81:fd:
24:4c:b7:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPsGHbbXlwfEJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
ZDEyMWY4OTEtMDRlNC00OGFhLWI4OTAtMzc3NWFjYTU3MjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo36BLAM+mPXiyLa4j9+3V7WHwyvY/1WwGCut
QQn4KoABVQvPz+O+DJFSafXTZ1qPeeSKywnWtx//AXnT8Q/sSndZ/D9bU74AeS8f
kwQ93TASYUkiThWLIwzMP8pKA3axmJA39jKxTNFbiRdTxu3IvS+YdsvWQCkxM4HY
8e09leKBHv5ibX+jHaNGvGDf5xsb0VT01Khccz6G7NwiAVbEdx2dGvENGhRqokrU
YU4XrdLAFXSJfgieimacPy7LHEpN8POuxcOErDkSeOAuplu8F7sEeTzgmoxwNitZ
QjHCaXFG4XUqQM8/zwR7wKl79cQvMC5qkOPvhCqHoONyFPvTcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCg1sunG1iVbXQipQRKKWMiVk2VlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc0MTZhOWMtMzNmOS0z
ZjkwLWI2MzEtMzIxYWZjM2M4ZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOnfC09Rhwyrj6OTx3nwlz4m4b9drqR5yzVDjmrONSLS6UbS12bcgY9
TAMNl8k7lsQ0vxC6Nwph3/wVw7Oq6QRmaeBpQAGL1p/ALq3xKyatmd9QA/Dqusnf
pwJe7Ot/xoeZ/7w4AWuO1LjNO/D8HkIV9MfM1nhEQsrOQ835NLY4uJ6lPHWADHoW
XZ1wqoxJFL9pnixfHoQ/NfbbzyScnEPYTfFonZ7T5r18NIFwjk34Zr40xay4vQg6
Dkz9VnZxRr3bdlR2Gvfotzyhv7iNxGC0UR00FjUNJJbgsFZadsX4rXGCz2puoyQ3
EJZLavbAvmw1xr3CJDHZY5iB/SRMt0Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:33 2025 by rpki-client