Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c79728c-4925-3cc6-a3c9-61a7ba616fde.roa
File: 9c79728c-4925-3cc6-a3c9-61a7ba616fde.roa (raw, json)
Hash identifier: rwf/lOa0Aq5HQ/5Js+PAPH0n5uXCHk9oSsKr53LWb8I=
Subject key identifier: B2:78:98:E9:44:89:2D:FD:76:2A:0E:48:70:6F:CD:28:0F:16:4D:74
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6618463AFD3DEEB9A5FC6000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c79728c-4925-3cc6-a3c9-61a7ba616fde.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.29.40.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:46:3a:fd:3d:ee:b9:a5:fc:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=45f8e63e-b859-42b0-8b67-30ac177e1b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:c8:10:a2:29:ba:ab:48:b5:b7:22:b6:97:
72:74:cf:2b:a3:49:e3:40:05:d1:7f:3e:bb:ab:65:
b0:85:d3:f7:7e:9b:1e:5a:d5:03:48:1f:54:4b:34:
82:e4:66:94:08:3d:dd:e6:e2:d8:1b:8b:7b:55:3e:
ee:60:c1:d2:51:af:8f:51:36:84:2c:7f:9a:3e:69:
61:f1:bc:c7:85:60:f3:63:d6:11:73:e5:0c:ba:28:
4b:b3:90:37:31:e8:df:6b:75:2f:d6:2d:18:d6:ea:
51:d3:37:d5:96:26:5a:17:0a:e8:58:b6:75:67:3e:
79:62:d0:5f:cd:7c:5c:b5:c3:e9:db:a0:2d:b0:a5:
82:65:1f:99:50:db:8e:aa:8f:5a:32:cb:74:08:6b:
fa:f7:32:3d:62:75:ab:52:31:9e:7c:26:49:a8:49:
f3:6d:78:8d:a7:ef:56:d3:7e:1a:84:4e:76:3e:f0:
e6:17:02:44:81:03:af:c6:e1:85:27:47:9a:21:14:
b5:f6:f6:ed:83:6f:fe:2c:39:f0:ea:4a:9d:bf:9e:
a4:48:8c:f2:cc:ff:b8:67:4c:3a:39:0f:a4:98:1b:
4d:a6:49:b0:7d:39:5d:18:73:59:1e:35:58:f4:c5:
00:80:85:4a:08:e2:1a:b2:2b:71:7d:7d:5c:f9:c2:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:78:98:E9:44:89:2D:FD:76:2A:0E:48:70:6F:CD:28:0F:16:4D:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c79728c-4925-3cc6-a3c9-61a7ba616fde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:98:53:0d:b4:01:43:12:1f:35:48:1b:b4:1a:94:2b:bb:2c:
64:74:c5:08:3f:4d:15:ea:f7:3c:f3:6b:3c:d0:ef:bd:55:42:
ad:82:57:17:0e:df:f4:7d:57:bd:82:e1:31:8b:5b:62:9a:50:
65:bb:9e:2a:e9:6d:66:9b:4a:b2:92:20:f7:41:54:6a:51:db:
f4:31:99:f5:39:74:40:40:2a:fd:64:e1:76:97:d7:55:4f:5d:
ce:66:60:0c:85:2d:1c:e4:27:e2:65:06:28:af:2d:87:e7:a1:
87:f0:db:dc:d0:99:2d:fb:bb:d3:ab:36:4a:81:f2:a5:c5:5a:
d7:cd:43:a8:81:8b:70:02:1f:ed:4e:ae:1b:f0:5a:73:06:70:
29:ba:0d:57:9d:bd:60:0d:4f:c0:2f:95:bd:86:ef:ad:99:04:
dd:9b:d1:d9:24:d4:1a:84:8c:fd:c8:bd:ae:f3:36:f5:30:42:
33:d9:fa:71:14:17:9c:c0:60:f9:64:fa:b7:69:4b:f8:32:b6:
f7:54:22:1a:16:7d:fc:56:72:5d:ed:ef:f8:e1:7b:0a:3b:a1:
63:af:eb:27:f5:e7:7a:c7:79:fd:1b:f4:8f:36:99:74:ba:30:
80:82:34:ea:9a:b7:44:0b:0b:bf:3f:ec:97:4f:2f:87:5a:35:
3b:52:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:54 2025 by rpki-client