Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75d535a7-3c22-3ebb-bd6e-a85132545107.roa
File: 75d535a7-3c22-3ebb-bd6e-a85132545107.roa (raw, json)
Hash identifier: Dw0MnwieK6uKr+Wa090Xkru4L6YtAFMHdctJhatObbk=
Subject key identifier: 9A:02:6B:1D:2B:11:3C:2C:14:5E:48:33:2B:4A:CD:8B:A1:17:2D:8B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F303A868AD20354B2200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75d535a7-3c22-3ebb-bd6e-a85132545107.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.23.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 24 Mar 2025 15:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f3:03:a8:68:ad:20:35:4b:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=5fb495d7-143f-43b8-93ca-fd42458d2a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:ff:0d:17:8a:1b:28:54:d6:d5:92:fe:31:
51:7f:14:3e:7e:8b:09:17:b6:10:2c:a9:3d:d3:fd:
ff:10:1a:89:bc:57:70:47:c8:ba:cd:bb:a9:fc:6e:
5b:fa:b8:66:f3:f9:d9:41:92:38:ba:2e:98:47:90:
63:9a:89:d2:2c:53:b5:f5:87:f8:da:b0:32:24:70:
45:04:65:95:09:b5:b3:a3:2f:f4:3b:18:14:33:d5:
88:b1:9f:3a:b6:37:dc:0c:12:61:21:82:06:b8:1b:
c7:df:31:e4:5c:02:e0:d5:0b:fc:ce:35:47:21:a6:
de:de:90:49:7e:3d:b7:d6:6e:4c:44:a7:8f:42:a0:
70:90:97:58:63:32:08:fa:e1:8f:1f:50:2f:d8:c1:
c6:45:96:14:fd:c6:b6:15:d0:b9:63:76:85:09:5f:
c2:a5:8e:e3:6d:41:2e:41:7b:66:e0:70:54:cd:c8:
4d:36:d2:12:c8:ea:1f:b9:bf:d7:fa:c0:76:3b:2d:
3d:3e:bf:00:c6:81:dc:f5:4d:72:a6:03:78:09:47:
b3:14:7b:40:35:cf:10:f9:ed:87:19:c1:b1:93:dd:
90:c2:45:32:64:d3:c1:a4:ca:de:72:c5:40:bd:80:
65:59:44:7b:d3:ad:3c:5d:64:c9:80:53:70:2e:2f:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:02:6B:1D:2B:11:3C:2C:14:5E:48:33:2B:4A:CD:8B:A1:17:2D:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75d535a7-3c22-3ebb-bd6e-a85132545107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:56:19:89:ba:72:88:65:b8:d7:2d:0c:4d:83:c5:c8:bb:fb:
fc:62:e9:03:4b:0d:63:db:7c:b8:da:18:b7:57:9e:5d:a0:f4:
0d:6a:c5:da:0b:47:60:2f:59:f2:bf:97:0d:aa:47:da:13:8e:
f6:1a:37:45:0a:8b:76:fc:bf:2c:e4:59:12:49:65:b6:4c:a6:
b3:c0:e1:a1:a6:32:9c:e0:6a:34:9e:c9:9f:a1:d0:4f:f8:b5:
73:f2:82:b7:f8:26:53:f5:3a:fa:b1:ef:06:a1:55:1f:3c:fc:
6d:f1:13:b6:83:df:4e:50:5d:dd:5f:49:21:d6:c2:c1:94:d1:
2a:cf:45:d0:ee:36:35:d8:9e:d0:f0:40:79:6f:80:98:6d:60:
05:37:ec:8d:f9:9c:b0:a3:e6:a0:dd:df:cc:9a:65:29:2b:6d:
01:ac:38:72:ce:e0:99:7f:e5:8a:09:a2:ba:48:85:97:1f:81:
ea:79:04:1f:77:af:8d:df:37:c8:7a:66:23:46:0d:32:88:9d:
22:c6:41:2b:d7:79:bc:1c:38:e9:4d:29:f8:d2:c2:1b:a9:5e:
e7:2a:35:81:c5:cc:bb:bd:6f:da:d7:6f:cc:2d:5e:29:1e:bc:
9e:2d:0a:ca:7e:88:e8:bf:ed:99:62:b7:8a:b1:82:9e:51:16:
a9:ac:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:10 2025 by rpki-client