Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c658060-04ed-37b7-9f68-27e4c7e3974a.roa
File: 7c658060-04ed-37b7-9f68-27e4c7e3974a.roa (raw, json)
Hash identifier: Iptunz+uVx+s+jrxyj02nQ3S5t8ZOVUx0RdBWbf1xE4=
Subject key identifier: 9C:03:A9:AF:74:CF:A7:C6:6D:36:91:8B:FB:E9:0B:A6:C6:87:D4:50
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661695328C6B89524498CC40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c658060-04ed-37b7-9f68-27e4c7e3974a.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 50.96.152.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:95:32:8c:6b:89:52:44:98:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=593c95a5-2c0a-4607-bda9-adac3485b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:5f:74:52:20:fa:5c:6c:12:6d:e9:59:a3:
b1:8c:19:39:7a:68:29:42:c8:98:43:82:ed:84:c9:
05:59:a9:37:d0:5b:7a:82:7d:de:95:67:2c:9a:3f:
6d:0d:e3:ec:b9:8d:e0:21:2a:7c:56:e5:00:bc:e3:
3a:ec:7c:cf:bc:17:74:f7:d7:ec:b5:93:1a:0c:5a:
fd:dc:42:11:56:7d:87:4a:ee:c8:17:59:4e:c3:51:
6c:62:44:f3:ef:a3:86:aa:8e:e4:f2:96:f7:a2:f3:
66:d2:69:b6:e0:44:c1:fa:96:90:88:cd:66:26:e4:
7d:8b:82:9d:b2:ef:a9:fc:fb:1c:3e:ce:9f:95:a1:
04:86:ea:33:58:d8:cd:bd:1f:37:e4:6f:55:d0:c0:
1b:f5:5e:e9:ca:d9:44:14:58:66:49:48:31:31:97:
cc:3e:5b:4c:24:d9:d7:71:81:90:72:57:26:e7:c5:
8a:91:7f:9f:d0:dd:f0:95:3e:34:9e:ee:2e:99:01:
05:b2:0d:94:6f:03:26:a1:2a:12:db:39:c5:43:60:
fa:ad:eb:95:19:ae:95:1e:fd:5a:35:84:80:e8:eb:
f7:cf:83:df:7c:e9:81:0c:9d:fc:fa:e3:ab:a5:28:
a7:94:a5:ac:f3:38:f1:b0:de:70:a5:ee:d3:65:3b:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:A9:AF:74:CF:A7:C6:6D:36:91:8B:FB:E9:0B:A6:C6:87:D4:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c658060-04ed-37b7-9f68-27e4c7e3974a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:48:a1:d3:cc:a8:59:1b:6c:c4:c0:5a:9e:e3:66:7b:a8:06:
b3:84:29:1c:2f:32:5a:3a:22:45:d5:4f:c7:9c:d3:20:71:fe:
ff:c4:e6:8f:c8:36:61:d8:f0:bb:99:1b:e8:25:e1:20:ff:be:
cb:58:6f:c0:08:11:0d:bd:82:d2:19:08:81:df:aa:3c:b0:87:
52:2a:e0:cb:7f:24:38:bf:61:dc:25:51:37:6a:3a:54:3a:7f:
ff:12:5a:f4:ca:72:1c:1e:c5:c3:cf:b6:ff:8b:58:a4:8c:b4:
05:18:48:aa:f6:cd:bb:1b:a0:96:a7:1b:97:ba:fc:a0:f2:4b:
0b:50:0e:86:17:1c:fb:d6:19:ae:32:7b:55:56:88:b9:e5:54:
f1:a0:bc:52:ca:e0:5a:74:ae:88:73:e5:78:bd:6f:9f:9a:a5:
b6:4a:d3:ee:d4:69:86:64:88:ad:37:2c:f9:0c:4e:e2:e2:b7:
5f:6c:fe:97:ef:a4:ba:08:1d:ba:04:b0:cf:1d:8d:99:8b:12:
4e:cb:96:12:16:3e:89:a5:48:93:88:97:a5:69:ec:7d:cc:07:
49:6b:ee:8c:74:a3:a6:a3:21:f8:68:e7:a3:6e:1e:e2:38:9b:
7b:2e:ee:ba:c3:5b:19:74:5f:f3:21:57:74:6b:3f:0d:31:5b:
f2:6e:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:11 2025 by rpki-client