Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a620a8fa-d01c-3186-9282-5c9a42c75a64.roa
File: a620a8fa-d01c-3186-9282-5c9a42c75a64.roa (raw, json)
Hash identifier: cDQ8ViTITf2jxTj9ccWA3+N9CcCSLVyGk6p3MRbG6wQ=
Subject key identifier: 17:0F:C9:F8:8B:E5:DD:A4:89:89:FD:65:DD:00:60:C5:76:5B:88:E3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FACA916B0FA4E196BF2A200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a620a8fa-d01c-3186-9282-5c9a42c75a64.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.50.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ac:a9:16:b0:fa:4e:19:6b:f2:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=6646f7de-96fe-4065-9cd0-7b170b19b4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:a5:58:ce:ae:98:ac:e5:25:ac:4e:7a:ed:
99:62:d6:e1:12:4d:ec:d5:3e:bb:1b:05:e3:c4:da:
6d:8c:33:ad:91:4c:a4:e8:c5:8b:15:c5:3b:47:b1:
22:af:1d:98:72:d9:d7:19:ac:57:0b:e4:44:50:e1:
a0:e0:91:c4:82:25:ed:a1:e0:60:ae:f1:0d:28:b2:
7d:52:1f:a8:a8:73:3b:20:cf:0b:fe:c4:e6:e2:e9:
57:5d:1d:db:2f:1a:24:a5:b4:5f:3e:45:fa:b0:1d:
12:ab:42:03:b3:78:ca:5a:5c:6e:69:3c:ee:02:4e:
ed:15:da:b8:dd:48:ff:eb:6b:27:83:cb:c8:24:ec:
b7:65:c6:7e:6c:30:13:ac:6c:29:7b:a1:d0:92:54:
01:25:b2:fa:ff:e7:28:83:22:bd:12:72:57:80:c8:
e3:d3:de:9c:11:30:ea:44:50:f0:ea:69:2a:88:93:
b3:a3:42:6c:6f:1d:b1:c2:b7:a4:fe:ae:10:27:2b:
79:a9:34:d8:2b:10:88:58:b9:52:9c:bd:1d:b1:55:
5f:24:60:07:20:ba:03:a9:41:ad:c1:66:9c:ee:68:
4f:40:a1:41:54:1c:b2:bd:23:e1:15:63:7e:96:aa:
98:43:83:5b:8b:86:94:eb:a5:36:a4:33:b9:d0:57:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0F:C9:F8:8B:E5:DD:A4:89:89:FD:65:DD:00:60:C5:76:5B:88:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a620a8fa-d01c-3186-9282-5c9a42c75a64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.50.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:4e:ef:d5:32:28:d8:51:ca:7e:8f:bf:86:ec:51:fd:0d:6d:
3c:0a:d4:ee:7b:08:61:6c:ec:9d:05:78:0a:9c:ee:24:e5:25:
dd:c3:67:bd:c9:40:d3:0f:1e:17:86:d3:76:81:92:81:2f:5b:
e8:9d:b4:32:9e:82:d7:ff:99:3b:70:38:43:34:b4:9f:6f:17:
74:27:bf:9f:38:ed:c0:41:13:be:af:8a:83:5a:bd:f2:7a:30:
34:d4:8a:d2:3f:05:fd:55:c0:15:da:e5:43:bc:cf:b0:24:e6:
aa:a9:76:ef:1f:c5:2b:72:97:b1:db:46:cd:50:86:f3:6f:ff:
7c:32:98:7f:c3:3a:cc:64:86:8d:24:c2:90:d2:ad:ff:8d:ec:
d0:bd:da:da:66:f8:cf:49:d9:b1:3a:d7:b5:27:42:48:60:2c:
08:41:34:40:01:67:6c:5d:f5:5a:33:df:15:3d:cf:82:a1:06:
f0:92:2f:d1:d9:0f:cc:65:c2:25:47:c2:f2:c4:41:a5:a1:ab:
15:e8:2c:49:4a:f5:03:cf:13:df:e9:ec:c9:cf:4a:d9:74:52:
65:41:c1:2c:48:0c:a8:e8:f1:2f:62:28:32:43:f3:c9:42:2c:
13:18:a2:4e:b4:36:70:1a:25:82:22:cc:aa:1e:2b:3c:e0:76:
90:9e:68:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:06 2025 by rpki-client