Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a20622a-ca70-3994-bfa3-519cb4576894.roa
File: 7a20622a-ca70-3994-bfa3-519cb4576894.roa (raw, json)
Hash identifier: u2xz+YINKFl/DMbvFeDtWIJihd7lon2dAW8sEzRtocA=
Subject key identifier: 3F:87:16:EA:E0:67:4C:A5:E5:04:00:CE:F8:A2:59:83:A0:58:F8:3B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661D2C81061F1AF66B4A96A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a20622a-ca70-3994-bfa3-519cb4576894.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.17.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:2c:81:06:1f:1a:f6:6b:4a:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=122437aa-e68f-4575-a601-f7db691e0fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:fd:79:e3:e5:c3:8f:26:86:86:b5:9d:e0:
8f:39:f9:2d:82:cc:02:55:8a:ac:55:7d:51:df:ab:
c2:81:1f:98:9d:4c:f5:ed:b7:aa:ad:6b:e3:9f:c1:
64:72:a4:0c:b7:b2:33:d1:48:cb:1b:aa:78:cf:09:
ef:db:a5:bc:65:de:d7:e7:2f:bb:ec:84:3d:f8:d2:
20:bd:05:65:24:d7:be:e7:7f:d1:20:a8:0e:21:8a:
e2:ab:b8:67:9c:82:19:c4:53:de:c8:9a:31:47:ad:
e8:71:44:1d:92:96:ac:db:80:55:bf:cc:ab:8f:93:
91:e9:9a:14:85:88:8f:46:9a:13:37:f6:2e:d1:32:
71:20:da:60:e0:39:2f:8c:71:bd:62:ee:b0:a0:0f:
39:76:75:95:03:e3:40:21:8c:1d:2c:fb:80:7e:ac:
ea:80:54:4f:b5:e4:63:b4:4b:42:06:ab:d3:4d:69:
52:f2:dc:6d:b7:9e:06:ce:e1:ee:ff:63:c1:11:91:
f4:9e:ef:29:17:24:1d:0d:11:1e:be:a4:1a:db:38:
67:e5:f1:23:42:60:8e:26:2b:ef:89:f7:02:2e:77:
c0:8b:28:b3:ee:a3:8e:3c:c2:ff:06:2e:91:0f:68:
1a:f9:39:80:20:cf:21:f5:a6:33:9a:4e:32:50:cc:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:87:16:EA:E0:67:4C:A5:E5:04:00:CE:F8:A2:59:83:A0:58:F8:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a20622a-ca70-3994-bfa3-519cb4576894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.17.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:44:74:d1:82:44:09:c5:dd:87:8a:e4:3d:86:dd:0c:b2:1a:
34:93:30:e0:00:34:e9:21:13:fa:80:1d:95:d2:14:01:f1:b5:
89:dc:f5:7d:e4:aa:fa:e3:60:db:64:8b:20:a1:77:a8:8a:9f:
eb:d0:7b:df:b9:ab:f6:97:53:02:84:40:2b:d1:11:b1:68:06:
55:4c:41:d8:6b:b6:89:ac:bb:b0:61:d6:ef:69:65:62:aa:c1:
c3:c1:68:3e:95:c3:3d:f5:f8:82:ca:dd:e3:63:c2:0c:80:d2:
48:2c:e9:4a:9b:d9:71:59:de:ba:a9:fb:62:3c:13:b4:91:78:
0d:ef:41:03:a3:6d:ce:d3:d4:a6:28:0f:0d:ec:2d:a6:2a:e6:
15:db:91:3f:47:38:74:f9:44:d3:e2:9c:ce:f6:95:01:5e:a4:
5f:12:11:04:b4:33:4c:65:83:0a:9e:7d:c3:f7:53:de:db:c3:
50:d6:40:3c:c6:ad:3a:8d:58:6d:d3:2d:96:fb:e4:63:b0:d6:
2c:23:1d:b8:08:ed:83:77:d2:be:19:b3:37:b9:6e:3f:fe:ed:
70:73:f0:bb:85:c0:7b:e5:d8:f0:50:04:fa:2c:71:36:ee:01:
94:de:f5:6b:50:f5:13:b4:9d:db:c0:96:ac:4b:fa:55:fa:56:
f8:c3:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:53 2025 by rpki-client