Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7efd298c-ac20-31bf-83e3-2a7f00c44920.roa
File: 7efd298c-ac20-31bf-83e3-2a7f00c44920.roa (raw, json)
Hash identifier: MoNLRWWxSRSaDC1VpTHxI2qU3App+xuwV0D7oxJgtyU=
Subject key identifier: A6:4E:B7:1A:5B:D7:FA:08:D0:C8:B2:69:81:02:EB:0A:61:8B:E1:EE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FBACB82FFE0AED7C38A5E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7efd298c-ac20-31bf-83e3-2a7f00c44920.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 18633
IP address blocks: 63.252.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 06:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ba:cb:82:ff:e0:ae:d7:c3:8a:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=0989d0ce-5c09-499f-90c1-f39e6e0472a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:56:fd:f6:27:4a:1c:74:20:0e:b4:1d:d5:
39:07:79:5e:2a:33:11:e8:4b:21:23:98:fa:87:7c:
a3:f7:74:4a:4e:66:53:45:92:bb:9d:4a:05:7c:c7:
fb:bf:56:66:43:26:ce:b5:79:3f:2d:b8:bb:e5:7f:
e9:63:da:b5:d9:c3:04:12:6c:b8:0a:7a:87:80:10:
c2:38:2f:14:33:ce:5a:e3:04:e7:41:94:92:db:68:
79:f1:80:cd:38:f7:4b:d5:58:c4:7e:40:76:6b:31:
32:12:a1:9a:3d:ad:8e:03:e7:9b:b5:93:23:8f:e7:
8d:f2:a8:57:f5:9a:c3:8c:3d:f8:62:4d:6a:79:30:
5a:fd:3e:57:a4:3e:51:54:66:4c:b0:58:a9:df:9b:
d8:52:de:70:a0:35:f3:4a:02:d1:49:88:e5:60:1d:
09:d9:ea:34:6d:e0:ae:d0:13:08:07:e7:ce:61:cd:
13:0b:06:82:57:8e:d1:bc:2c:5a:f7:f6:0a:65:e5:
fc:02:67:88:8b:64:b2:1b:d7:04:4e:dd:0c:dd:5c:
cc:2d:f3:47:36:9a:36:c5:6c:3a:9d:22:03:3f:08:
5a:3d:64:00:a6:b2:15:77:15:79:cb:76:15:64:c0:
5b:a6:66:b6:1e:f2:99:7f:96:01:c1:33:be:ad:dc:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:B7:1A:5B:D7:FA:08:D0:C8:B2:69:81:02:EB:0A:61:8B:E1:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7efd298c-ac20-31bf-83e3-2a7f00c44920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.252.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:04:99:38:49:23:ab:1f:f8:76:a8:23:86:9f:18:7d:1a:91:
bb:4a:64:bc:66:71:05:5f:ba:77:de:7a:5e:8a:25:65:db:ff:
27:17:c7:dc:79:bd:07:2c:e0:cd:c6:8d:8c:dc:b2:51:63:d1:
c6:49:f3:9f:3e:12:03:ab:85:da:6e:59:a3:63:32:0b:c0:e3:
a5:b7:2a:d0:47:b1:4a:68:c6:f9:b8:c0:83:ad:03:b2:81:72:
97:9f:23:74:a7:f4:28:c8:e5:62:4e:9d:7b:f9:0f:14:56:6a:
0d:6f:65:b3:81:23:25:01:74:53:89:4c:3b:5a:b3:2c:67:1f:
3e:21:41:0b:b9:1f:00:67:e4:e5:f7:ef:d7:b1:3b:9d:5c:4a:
c3:c3:b7:69:07:a0:b9:f9:29:52:08:34:91:78:59:e4:0a:0a:
d3:97:a5:c0:0e:9f:7f:33:87:fe:65:7d:8b:26:fd:de:99:d7:
e7:bc:a9:d2:16:81:85:21:c2:63:98:90:c1:4e:1a:be:fd:ab:
56:fd:1b:d3:d4:f7:76:59:8a:a7:32:90:a3:89:0a:65:8e:64:
84:d2:4b:cc:d7:64:b0:07:e2:a7:02:dd:9f:c7:0c:21:c1:a7:
0c:e2:4c:0b:6b:14:33:63:ec:ea:87:c8:0b:c1:fc:07:75:0b:
ef:52:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:15 2025 by rpki-client