Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/996909f3-4f80-3fec-847b-57ef6e8549c6.roa
File: 996909f3-4f80-3fec-847b-57ef6e8549c6.roa (raw, json)
Hash identifier: 7DKon6GuUpjJK5GVLGc8lB/jzUKrG7Ln3bMX7R/68Z4=
Subject key identifier: F4:25:77:A0:F4:60:C6:09:BC:3A:2E:A4:0A:79:C1:2A:E3:7C:93:77
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551ABC0260E0415F11375740
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/996909f3-4f80-3fec-847b-57ef6e8549c6.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 54682
IP address blocks: 74.8.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 06:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1a:bc:02:60:e0:41:5f:11:37:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=35ae5bac-edce-4966-9c95-80ce287e0d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:0a:0d:1d:74:e5:fd:00:47:ea:5d:2c:cf:
37:00:d5:89:36:43:dd:82:1d:4d:a5:39:da:de:8d:
94:34:df:b4:ba:6a:99:c4:e0:91:b1:e1:42:c8:33:
f0:bf:65:c9:47:37:a0:9c:45:d9:11:da:15:0a:32:
ee:a3:3a:7a:34:cc:c8:0f:96:ea:a4:8f:32:08:03:
17:ed:4d:d0:41:61:d6:1b:db:21:e9:7d:9c:f9:44:
00:fe:29:07:5b:32:a5:db:07:16:04:27:dd:60:28:
ba:94:95:8b:11:57:74:e9:69:20:f8:14:66:33:5b:
5a:0e:f5:58:dd:5b:ba:a2:67:f3:bf:16:b2:c2:c5:
47:21:31:ad:eb:8e:1d:2b:d2:59:2c:93:9f:1c:14:
79:a8:23:87:65:de:e7:47:6f:54:48:1e:b2:f9:f1:
60:86:8e:5a:5b:3e:a1:b3:db:1b:7c:0c:2a:0a:1c:
d2:63:48:bd:d0:be:ac:f5:5c:ea:6b:01:95:e8:d9:
cb:86:d1:f0:6b:83:3d:f3:be:d2:d9:b5:eb:a5:70:
a0:05:b1:e1:e9:47:16:81:93:d3:00:a9:ef:9b:a7:
56:db:08:41:ce:5b:6b:3a:cd:1d:d8:95:18:6e:4c:
31:0d:3e:85:17:6f:47:ba:e0:65:ca:f4:e0:5c:7c:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:77:A0:F4:60:C6:09:BC:3A:2E:A4:0A:79:C1:2A:E3:7C:93:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/996909f3-4f80-3fec-847b-57ef6e8549c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.8.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:de:e1:a0:3a:87:7c:dc:47:d1:7b:41:ed:c0:83:cb:09:64:
2f:dc:d9:57:21:ee:61:f2:57:fe:bb:cf:b2:a3:84:a5:2d:b8:
3e:54:8d:8f:26:93:83:b0:2a:e7:04:e9:58:10:e5:ec:12:93:
b3:f1:4f:16:e3:e1:c3:f1:31:22:b7:f6:10:aa:d4:c7:86:6e:
e5:ad:db:31:07:43:6e:81:54:ac:da:7f:49:3b:0f:a6:18:21:
22:73:fc:5f:f9:a0:5d:49:06:6f:d2:e3:ae:4b:5a:5c:28:99:
88:0e:43:f3:30:51:0e:6d:84:c7:d7:1c:3b:cf:87:86:3e:81:
4f:06:1a:60:68:3b:e2:32:2c:87:4f:2d:f6:39:af:bc:29:08:
50:14:dc:79:79:59:50:12:b7:ee:46:24:cb:9a:f8:77:a2:d9:
e6:28:4d:16:b4:79:06:20:73:aa:fb:76:15:4b:91:7f:95:21:
41:35:36:a0:9f:30:9f:0b:53:db:85:6c:84:a4:24:01:19:fd:
75:a3:bc:46:26:99:2b:cd:d4:3d:5f:bc:15:7e:6d:61:b9:6d:
d4:57:68:ac:aa:11:da:67:2b:09:ee:d2:92:c1:6e:14:40:a6:
35:78:4c:b8:7d:66:61:cf:56:10:22:cf:d8:20:c3:55:e1:6a:
66:ca:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:27 2025 by rpki-client