Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51cd468-a026-39a2-8b7f-820cfbf29315.roa
File: a51cd468-a026-39a2-8b7f-820cfbf29315.roa (raw, json)
Hash identifier: rhPxbLTA9AcAkp+UMEFgaejJ+P7cpO3+w9bUscaxbJs=
Subject key identifier: D1:4B:9A:0E:16:03:9A:B4:B0:25:E8:18:FB:15:FA:1A:56:1E:74:A6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112755571EC1F0E97707C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51cd468-a026-39a2-8b7f-820cfbf29315.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 209.102.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 19 Feb 2025 16:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:27:55:57:1e:c1:f0:e9:77:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=8029099c-f386-42ef-b6d9-efa8952eed2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:92:58:c3:0f:9a:53:35:61:7f:ed:9b:96:
b2:93:ba:79:0d:8a:48:f4:5d:38:39:58:32:b1:d9:
a9:42:51:44:7d:ad:5e:01:7c:7c:15:c2:e5:a2:89:
2d:d9:66:df:7a:80:c7:b3:5f:9c:3f:9a:59:46:64:
d1:4a:77:bb:b5:d7:a2:0f:4b:33:98:b8:8c:0d:b3:
30:71:93:9b:02:34:61:f5:25:1e:c8:59:40:55:08:
82:6f:26:d0:2a:3c:10:b0:56:7e:44:90:2e:c6:4a:
cc:27:ec:06:19:10:d2:e9:33:60:82:9d:c1:15:4b:
bd:06:12:2d:90:62:2c:76:fc:d7:25:2b:2b:63:88:
3c:0d:59:b2:d7:30:b0:94:b5:82:54:f4:90:fd:0f:
08:f0:a0:b2:f1:3f:cc:6c:28:33:0e:64:45:46:cf:
09:dc:da:a0:8e:bc:27:15:44:97:fd:c5:70:2d:dd:
70:3f:41:3f:9d:58:1e:e9:a4:c6:77:a8:8f:a8:5b:
07:fe:c6:22:40:04:35:7c:e2:9d:ee:12:bc:4d:20:
df:38:f4:61:e7:b4:71:cf:f2:91:3e:f9:00:07:74:
25:b6:a9:7b:23:08:29:2f:21:61:0e:d8:29:a8:0b:
ba:f6:e8:26:d7:8d:b6:10:b6:ed:cd:2a:bb:12:5b:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4B:9A:0E:16:03:9A:B4:B0:25:E8:18:FB:15:FA:1A:56:1E:74:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a51cd468-a026-39a2-8b7f-820cfbf29315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.102.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:6e:01:85:aa:63:12:a8:83:9d:56:2a:9d:e9:84:f4:01:d6:
64:ed:0b:2c:ed:bd:02:45:92:79:2a:c0:d2:e0:f6:a6:b0:2c:
9d:b6:86:23:39:83:22:e3:45:f3:b4:67:7a:ea:4c:3b:13:88:
8c:58:80:33:75:4a:43:5f:50:1e:8a:61:e5:4a:86:58:cc:e8:
ea:d1:ea:f3:3b:86:5c:bf:e4:76:2c:f3:61:8d:65:9f:88:23:
2d:8f:8c:da:69:f0:2a:ef:d3:74:55:0d:08:9d:a1:90:6e:75:
e6:3c:b1:e0:b4:9e:dd:e3:28:af:45:38:79:77:4f:f6:12:1a:
9d:3f:cb:84:6f:dc:c0:5b:5d:ea:4f:bd:30:73:bf:d2:f5:79:
63:cb:91:f2:fe:8f:b2:3c:38:5c:ef:ab:e7:7f:6f:f2:9f:1c:
fe:bf:95:a7:f7:68:13:05:c7:27:3b:87:01:fa:68:39:83:10:
0d:d4:e7:03:20:03:87:b7:17:04:42:5a:ee:83:17:a4:05:ba:
b4:da:fc:f4:59:df:b5:61:fe:bb:db:ca:23:aa:83:c5:a8:23:
be:f8:1d:f5:42:cf:2e:5e:cd:72:d6:2d:67:06:ec:63:73:00:
da:08:94:d0:97:cf:81:da:d2:43:fc:99:3f:8d:74:71:73:03:
63:b9:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:32:16 2025 by rpki-client