Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2e20283-bd20-3249-85d7-9e99e7cae983.roa
File: a2e20283-bd20-3249-85d7-9e99e7cae983.roa (raw, json)
Hash identifier: Tq6KWBZynUA4RwF720Dojb2XLbbuzAZAq8pC9J+J8uA=
Subject key identifier: 41:0F:10:86:EB:11:B1:60:F2:03:8D:E8:1E:89:4A:04:CC:B9:61:8E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66169BA0EB7833CEE13E0E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2e20283-bd20-3249-85d7-9e99e7cae983.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 50.96.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:9b:a0:eb:78:33:ce:e1:3e:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=fdc2872d-3266-417e-96f6-cfcbd1037b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:a6:15:bb:78:42:c2:16:81:61:8d:2d:3d:
52:7c:29:22:30:05:20:ca:fe:92:f8:4b:dc:67:2a:
49:03:c4:78:96:03:89:d0:7b:0a:4e:dc:ef:0d:84:
94:3a:28:6f:16:28:5b:9a:31:f2:1d:9b:cd:f6:69:
4b:5f:2d:f8:fa:c4:55:c8:65:47:0b:2b:e7:36:ea:
30:5d:f0:ca:0a:d3:ca:0b:74:31:2c:cf:2a:28:f0:
13:ec:6b:0e:a1:cb:dd:55:85:dd:ef:93:3d:ee:d5:
64:70:fb:08:01:28:4a:8d:49:f4:fb:99:78:96:8a:
20:72:39:97:8f:c5:e3:42:19:49:0f:51:32:46:51:
71:c5:b1:61:e8:43:87:40:fb:4d:9f:26:6d:de:29:
29:e1:08:a7:10:9e:e5:ec:c4:36:c2:19:4e:60:db:
cb:3c:f4:a4:3d:d8:f4:f9:90:ad:e2:c9:c1:6f:1e:
3a:7b:38:a1:0c:c5:b5:cc:1c:68:06:fe:12:c4:26:
4a:ef:04:cc:a4:09:be:11:34:2c:fd:ba:5a:58:96:
aa:04:5c:15:6c:2b:ee:15:50:b1:81:83:9b:63:16:
a3:6e:94:61:15:9f:0f:cf:45:7a:7a:58:0e:24:b8:
0c:f7:fb:01:c2:0f:e8:71:18:e5:cf:3a:a3:46:44:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:10:86:EB:11:B1:60:F2:03:8D:E8:1E:89:4A:04:CC:B9:61:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2e20283-bd20-3249-85d7-9e99e7cae983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:aa:e1:73:84:88:de:d3:16:f3:79:97:b5:66:41:fd:00:40:
45:62:7b:43:cd:b3:0e:8a:54:91:b8:99:fd:f8:d8:de:3b:3e:
e0:f3:f5:9e:f6:0c:99:15:50:c1:18:d7:9c:17:eb:00:07:d5:
58:b5:4a:2c:86:bc:be:b3:d1:c7:25:b0:a1:61:66:1b:37:ef:
79:f0:c7:47:9f:05:8d:4e:f2:41:2c:a7:bc:82:05:48:34:0f:
f7:63:ef:28:6d:07:0a:0b:1b:e0:5f:c8:4e:a8:a6:fb:05:40:
59:cc:b3:c1:34:80:18:2a:c7:2a:9e:75:54:5b:1b:59:98:76:
e1:5a:c9:fa:97:3b:4f:13:64:ec:48:c3:87:03:3e:81:5e:32:
d5:db:6f:24:03:e4:c8:5d:0a:1d:0a:60:50:08:c4:f6:b3:df:
f0:c9:26:09:a4:13:6c:d3:57:08:a3:4a:e6:81:7e:35:8a:e6:
cd:91:bf:ef:45:cd:b1:1b:cf:b5:c6:93:90:22:55:89:f3:2c:
fb:20:8d:7a:3e:a0:36:23:cb:47:9a:84:56:e2:d8:08:8b:8e:
f5:60:b3:7a:90:6c:2f:51:ca:63:1e:ee:c4:51:6a:55:98:75:
19:27:2c:cc:cb:33:ea:5f:5d:4e:f7:9c:b6:b8:d0:f8:d6:c6:
30:1f:60:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mFpug63gzzuE+DoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmRjMjg3MmQtMzI2Ni00MTdlLTk2ZjYtY2ZjYmQxMDM3YjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9SmFbt4QsIWgWGNLT1SfCkiMAUgyv6S+Evc
ZypJA8R4lgOJ0HsKTtzvDYSUOihvFihbmjHyHZvN9mlLXy34+sRVyGVHCyvnNuow
XfDKCtPKC3QxLM8qKPAT7GsOocvdVYXd75M97tVkcPsIAShKjUn0+5l4loogcjmX
j8XjQhlJD1EyRlFxxbFh6EOHQPtNnyZt3ikp4QinEJ7l7MQ2whlOYNvLPPSkPdj0
+ZCt4snBbx46ezihDMW1zBxoBv4SxCZK7wTMpAm+ETQs/bpaWJaqBFwVbCvuFVCx
gYObYxajbpRhFZ8Pz0V6elgOJLgM9/sBwg/ocRjlzzqjRkQL8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEPEIbrEbFg8gON6B6JSgTMuWGOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJlMjAyODMtYmQyMC0z
MjQ5LTg1ZDctOWU5OWU3Y2FlOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmDsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiq4XOEiN7TFvN5l7VmQf0AQEVie0PNsw6KVJG4mf342N47PuDz9Z72
DJkVUMEY15wX6wAH1Vi1SiyGvL6z0cclsKFhZhs373nwx0efBY1O8kEsp7yCBUg0
D/dj7yhtBwoLG+BfyE6opvsFQFnMs8E0gBgqxyqedVRbG1mYduFayfqXO08TZOxI
w4cDPoFeMtXbbyQD5MhdCh0KYFAIxPaz3/DJJgmkE2zTVwijSuaBfjWK5s2Rv+9F
zbEbz7XGk5AiVYnzLPsgjXo+oDYjy0eahFbi2AiLjvVgs3qQbC9RymMe7sRRalWY
dRknLMzLM+pfXU73nLa40PjWxjAfYOk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:37 2025 by rpki-client