Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82b3635a-3c36-38e5-91e0-58a60b68b5db.roa
File: 82b3635a-3c36-38e5-91e0-58a60b68b5db.roa (raw, json)
Hash identifier: t1R+gEmpGDPQRGTAgeh2n3fa8C8GGCJYCsJkpnKXyU0=
Subject key identifier: 1F:2B:1D:B7:0E:AF:91:D2:3C:89:AB:F9:48:C6:5B:CF:91:BA:F9:44
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6618D8F0CBB42E0ACB9577F0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82b3635a-3c36-38e5-91e0-58a60b68b5db.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.30.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:d8:f0:cb:b4:2e:0a:cb:95:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=38235740-0924-4c0b-9136-b6948eff4210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:24:49:f1:6a:ca:cf:8d:7f:75:16:45:2f:
be:89:6e:b4:57:85:1b:ac:ab:74:1e:5f:da:5f:30:
9e:2b:02:d8:f7:eb:da:b9:24:1a:b0:84:81:0a:ca:
98:b7:28:ca:27:d6:8e:a2:b8:85:11:1a:21:db:c4:
5c:29:11:4c:01:19:eb:88:86:0f:47:95:d3:e8:92:
98:57:9c:f2:0e:80:02:d7:dd:a7:d0:9a:9a:b7:e5:
d4:d2:91:ff:6b:cd:8a:42:b3:56:d9:f9:d1:b1:19:
e9:3e:c5:06:31:19:d4:7b:1f:55:67:6f:3b:79:b0:
e2:13:11:68:92:78:22:1b:09:f1:c5:69:a8:6e:32:
73:66:1c:04:7f:c2:ac:db:78:9c:4e:f6:0b:11:f6:
30:8c:99:44:e5:a6:90:83:88:14:84:d7:b9:34:f3:
a8:7c:c9:97:a8:8f:17:34:fb:6b:ff:17:2c:a6:8b:
9b:79:f8:d9:c8:2a:9b:d0:6f:de:3f:7b:4c:42:ce:
23:4f:80:1d:15:9d:db:38:79:6b:63:6e:5c:73:7d:
03:42:ec:ff:5f:a5:73:e4:21:cf:1e:9f:72:27:d2:
19:98:34:51:58:b2:ae:3f:9b:44:ef:fe:5c:0d:a5:
05:2a:9c:5c:d4:d2:10:e0:b3:53:8e:37:28:2b:4d:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:1D:B7:0E:AF:91:D2:3C:89:AB:F9:48:C6:5B:CF:91:BA:F9:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82b3635a-3c36-38e5-91e0-58a60b68b5db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:97:0e:b7:b2:2b:ac:d0:43:e5:e2:86:1f:ca:0c:7d:23:d6:
13:d1:e8:b8:f1:38:64:d3:be:f5:c5:dc:48:b0:ee:1f:63:42:
5b:8c:e6:b6:f9:36:19:8c:34:ce:fa:aa:24:34:ab:90:3a:91:
64:26:b2:04:50:7f:f6:3c:fd:16:91:74:1f:23:9e:91:f3:50:
93:bc:e4:8f:07:58:b0:60:65:b5:b3:50:4c:73:f6:83:22:d1:
d4:39:c2:d6:c6:5e:48:98:c6:83:57:ec:c4:65:ac:6c:e1:ce:
b6:92:fd:f1:0d:b4:7a:fe:4f:b8:9d:50:1f:52:6a:26:48:bd:
df:3b:a0:de:1c:9b:42:66:00:c0:df:13:a1:be:45:0a:8a:de:
8e:c9:b6:ab:e2:e2:9b:20:61:6c:76:66:8a:1b:07:cc:9a:57:
3c:f8:47:7f:e6:5a:42:e3:a3:22:aa:68:64:6b:16:d3:f3:aa:
36:da:33:18:ef:82:1a:30:e1:90:6a:35:65:a7:8b:a1:ce:b0:
63:ec:69:ab:9e:65:46:db:9b:82:83:e2:78:d9:7c:5e:c9:58:
bc:91:bd:59:b0:5c:c9:fb:e5:44:a1:bf:a9:7c:7a:a7:1f:97:
f5:88:97:09:61:5f:67:27:4d:03:85:d7:3b:da:7d:e8:95:31:
97:a0:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:14 2025 by rpki-client