Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2e632dc-c266-30bb-b2af-db9d74cf970b.roa
File: a2e632dc-c266-30bb-b2af-db9d74cf970b.roa (raw, json)
Hash identifier: CseZlSTJxtgjdzTiQZxr90aZoUz3DUL+uEaTKmCQWWE=
Subject key identifier: 62:57:64:72:A9:BB:9B:8E:A0:81:8D:F1:66:BC:46:AC:12:6A:98:E4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FC2ACF04CF4A773CD5CBA00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2e632dc-c266-30bb-b2af-db9d74cf970b.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 27338
IP address blocks: 66.0.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 06:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:c2:ac:f0:4c:f4:a7:73:cd:5c:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=3cf60158-a356-4744-806f-b924b9eeaa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:2c:3d:6a:85:0a:3b:e9:fa:d3:ce:f5:bf:
b2:c9:d4:bf:40:4e:a1:ed:43:5e:08:1d:67:a4:eb:
63:59:fb:53:60:ba:f2:ee:85:95:a7:bb:51:83:45:
da:08:7a:c0:9f:5a:54:cc:a6:0f:2e:f6:bc:81:2b:
d9:92:19:ba:22:ab:47:e5:43:3a:aa:a7:de:c5:18:
e8:73:04:89:9d:d2:ef:40:00:f6:a1:73:19:50:6d:
5b:52:c4:06:c0:4f:6d:f1:44:63:8a:5e:74:79:e7:
e4:70:2e:c2:d0:b2:23:3e:40:b2:c0:f9:52:dd:f1:
b9:2a:c0:33:96:f9:3a:cc:45:32:14:76:37:08:6d:
a6:e5:36:0e:f9:05:4f:64:5c:36:cc:8e:f1:77:b7:
c1:a8:1f:99:d8:40:3b:8d:74:6e:5f:16:9f:05:51:
b5:44:b6:27:a1:97:d0:93:7a:39:a9:f1:75:19:5c:
a5:b5:74:81:a1:cf:6d:25:3e:bf:65:89:d9:f8:13:
93:d0:be:34:8f:f6:83:56:5a:21:ca:c1:3c:55:61:
90:c7:1f:f0:50:67:68:c4:db:20:19:d7:a4:87:d0:
16:b5:53:ef:aa:4f:48:bf:f0:0f:be:d4:d5:4c:1b:
f7:d5:41:a5:a5:c7:b1:4f:c6:14:f3:56:8c:98:9f:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:64:72:A9:BB:9B:8E:A0:81:8D:F1:66:BC:46:AC:12:6A:98:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2e632dc-c266-30bb-b2af-db9d74cf970b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.0.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:12:0f:0f:e5:22:0e:d7:2e:b4:93:58:8a:c7:46:16:d3:e9:
dc:45:3d:d0:73:85:82:91:59:3c:8e:3d:8b:48:ac:5f:67:96:
34:2a:fa:1e:c2:78:f7:17:26:cf:36:a1:0b:00:fb:e8:a2:ca:
b7:ff:b6:53:eb:44:56:aa:14:2f:77:7d:f4:64:04:90:b4:00:
c9:94:6d:97:13:00:e7:b0:0c:36:17:20:2a:4c:3a:84:31:6b:
90:2e:ba:5a:99:64:69:01:e0:39:fd:62:f0:02:20:43:fa:7c:
e1:44:e5:b2:3e:32:bb:60:fb:d2:15:55:19:99:bb:e8:f4:81:
b4:d2:5c:13:e8:fa:2a:72:6b:5e:d8:d9:b9:cd:b9:af:8f:2d:
15:af:30:7a:75:e8:9d:d0:7c:0e:04:09:5f:b8:6f:fb:b4:18:
14:a2:97:e0:90:c5:37:58:62:d1:8e:5b:59:b8:6a:48:c4:51:
65:51:be:66:95:01:69:4a:e2:0e:d5:a1:da:a1:b7:55:74:83:
49:0c:ff:f9:a4:6e:c7:53:f3:8d:00:e1:ed:9f:3d:73:c8:59:
d0:51:6b:fa:56:dd:06:02:29:79:1f:61:b6:0e:2d:ea:03:83:
f7:3d:7c:26:0c:58:46:c6:f0:c4:bf:0f:91:3c:8e:0b:a1:d7:
02:f7:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:53 2025 by rpki-client