Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71207ee3-b24a-3d8e-8c7c-0a65976722d3.roa
File: 71207ee3-b24a-3d8e-8c7c-0a65976722d3.roa (raw, json)
Hash identifier: pCGe4fAa+dzT1mz1fJS4FkuXL9wh2ksyNZjKdFh8UYc=
Subject key identifier: E6:58:0F:86:47:E6:B9:B9:18:E5:4D:AF:77:DA:63:28:CC:01:67:54
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66183FCC0F7FF69C4FD09240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71207ee3-b24a-3d8e-8c7c-0a65976722d3.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.29.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:3f:cc:0f:7f:f6:9c:4f:d0:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=3922bc4f-186d-4bf5-b7a2-2069a5cac754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:b4:37:3a:53:9e:25:c3:42:86:6d:87:4c:
3d:75:f0:39:fb:c6:95:39:12:82:2f:2f:ae:77:fc:
67:38:dc:37:f2:3c:f1:75:3d:d1:0f:f0:8c:7b:80:
3e:c3:d7:10:d4:f2:82:d0:fb:1e:4b:e0:80:2b:64:
c2:af:b8:43:64:25:06:e5:cb:7a:17:5a:29:19:c1:
31:d5:22:09:50:60:c3:26:8e:85:ce:75:85:c0:82:
1d:8f:19:43:95:92:40:7c:f7:38:a1:f4:6b:1f:51:
87:ba:44:6b:d5:da:13:20:97:0f:66:a6:ef:cd:df:
1b:00:bb:b3:72:eb:12:70:fa:67:67:44:18:3f:d0:
5f:f9:38:8c:ba:e1:40:22:b2:95:40:96:c9:0c:ba:
8f:65:03:b0:be:b5:18:a3:5d:df:81:33:b8:ec:89:
86:b7:de:3c:3c:0a:49:e0:2a:b6:56:1d:c0:f1:16:
66:d6:4d:8d:52:ea:9e:2f:28:cc:c6:b3:98:c3:12:
51:71:a6:8f:43:e1:86:41:50:53:42:67:71:49:4a:
78:b9:ad:25:38:e8:c1:42:95:de:25:f6:45:22:5d:
3c:5f:d2:50:8b:15:26:c7:87:ff:9b:6a:f7:35:9d:
4d:9e:33:29:4a:a6:6f:e8:9e:4a:e1:32:7a:ef:ad:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:58:0F:86:47:E6:B9:B9:18:E5:4D:AF:77:DA:63:28:CC:01:67:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71207ee3-b24a-3d8e-8c7c-0a65976722d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:24:8b:34:3e:84:88:a2:ef:e7:d6:27:8d:0c:22:fc:9d:89:
8c:2d:70:1e:55:65:07:67:db:6c:aa:e6:9b:60:86:48:28:f1:
26:68:e3:22:f4:cf:dc:ab:ac:6a:c1:09:d8:2d:b1:24:fa:6d:
25:7c:36:1d:77:d8:ab:66:c5:d5:d8:9f:c2:78:79:d5:3b:1f:
ba:21:cc:de:a1:1c:9b:56:61:9e:36:57:ce:c9:0f:3d:69:79:
a5:12:d5:b3:f6:54:9c:6a:5e:d6:be:49:fc:55:01:b3:04:3b:
f7:54:89:31:54:35:fb:93:b4:37:a3:90:ad:d7:79:5b:4e:db:
f1:b8:de:f9:77:94:94:59:51:e2:57:55:2b:48:79:d3:6b:69:
50:49:e8:a5:07:22:ce:8e:bb:6b:e3:85:dc:17:c2:60:93:f9:
01:11:31:fd:07:48:68:47:7f:15:44:0c:23:34:2b:1b:b8:a7:
72:30:59:3f:13:bf:fd:fc:81:91:40:3f:0a:66:09:76:14:86:
0e:a8:58:34:6b:54:f9:03:41:65:a1:17:91:c6:60:72:6e:56:
42:04:62:31:d0:b7:18:4f:db:20:73:59:e9:c8:b6:5f:59:24:
56:f8:e3:a8:82:15:36:75:cf:16:9b:d8:bb:c9:83:74:3b:55:
68:b5:31:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mGD/MD3/2nE/QkkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzkyMmJjNGYtMTg2ZC00YmY1LWI3YTItMjA2OWE1Y2FjNzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsG0NzpTniXDQoZth0w9dfA5+8aVORKCLy+u
d/xnONw38jzxdT3RD/CMe4A+w9cQ1PKC0PseS+CAK2TCr7hDZCUG5ct6F1opGcEx
1SIJUGDDJo6FznWFwIIdjxlDlZJAfPc4ofRrH1GHukRr1doTIJcPZqbvzd8bALuz
cusScPpnZ0QYP9Bf+TiMuuFAIrKVQJbJDLqPZQOwvrUYo13fgTO47ImGt948PApJ
4Cq2Vh3A8RZm1k2NUuqeLyjMxrOYwxJRcaaPQ+GGQVBTQmdxSUp4ua0lOOjBQpXe
JfZFIl08X9JQixUmx4f/m2r3NZ1NnjMpSqZv6J5K4TJ6763D2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZYD4ZH5rm5GOVNr3faYyjMAWdUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzEyMDdlZTMtYjI0YS0z
ZDhlLThjN2MtMGE2NTk3NjcyMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkkizQ+hIii7+fWJ40MIvydiYwtcB5VZQdn22yq5ptghkgo8SZo4yL0
z9yrrGrBCdgtsST6bSV8Nh132KtmxdXYn8J4edU7H7ohzN6hHJtWYZ42V87JDz1p
eaUS1bP2VJxqXta+SfxVAbMEO/dUiTFUNfuTtDejkK3XeVtO2/G43vl3lJRZUeJX
VStIedNraVBJ6KUHIs6Ou2vjhdwXwmCT+QERMf0HSGhHfxVEDCM0Kxu4p3IwWT8T
v/38gZFAPwpmCXYUhg6oWDRrVPkDQWWhF5HGYHJuVkIEYjHQtxhP2yBzWenItl9Z
JFb446iCFTZ1zxab2LvJg3Q7VWi1MUA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:18 2025 by rpki-client