Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af1b827e-ec96-3c94-9b3c-036ae6d9504c.roa
File: af1b827e-ec96-3c94-9b3c-036ae6d9504c.roa (raw, json)
Hash identifier: gCDDAlXBIK6rpxoN9IhElaP36WQOhhv4BmtS/AAkxqo=
Subject key identifier: EF:12:FC:CE:A5:D2:0F:30:ED:A3:55:15:96:B8:2F:E8:76:1F:DE:5C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DF4A024F6C2144A1948F73F20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af1b827e-ec96-3c94-9b3c-036ae6d9504c.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 11 May 2028 04:00:00 +0000
asID: 7029
IP address blocks: 64.24.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Sep 2022 21:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f4:a0:24:f6:c2:14:4a:19:48:f7:3f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : May 11 04:00:00 2028 GMT
Subject: CN=d163603d-4bb4-48df-b55f-bc9891a2d193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:cb:27:ca:46:8f:d8:7a:c5:a9:86:32:bb:
5d:ea:98:ef:17:3a:8f:49:98:79:e9:63:5f:a2:ce:
29:b7:17:57:86:82:98:f8:5b:37:c9:da:77:a2:80:
f1:7a:46:5a:2c:a0:9a:5d:79:32:02:e6:82:15:5a:
1d:8c:b2:4c:a7:ba:09:5b:52:03:1f:48:7c:74:c5:
c5:57:88:fa:3d:22:52:19:e7:95:0c:17:23:a0:2e:
24:2b:0d:42:87:16:49:ee:2c:5c:c9:32:d4:cf:30:
28:88:b7:62:16:aa:c7:07:9e:6a:a2:6e:bf:39:aa:
7a:d5:3b:61:4a:11:13:f2:bc:b2:85:64:32:d4:86:
3a:3a:38:94:93:5c:d1:e7:1e:a6:0b:08:1e:bd:d1:
fb:58:ac:7a:bf:dc:0c:5f:c3:d5:1b:24:52:a2:a3:
c3:44:03:dd:c7:ef:10:9e:bc:18:cc:28:87:54:a3:
5a:ca:83:47:fa:55:96:56:75:9e:e6:04:a9:19:ee:
54:3b:76:be:13:46:3f:7e:ac:f3:ed:1e:6a:44:10:
e2:dc:8c:f1:91:47:d4:62:34:be:87:81:8b:d7:a0:
29:d5:be:1c:7e:8e:82:32:8f:db:50:bc:18:83:6d:
56:b2:c8:83:06:46:c5:2c:5e:33:97:03:80:67:06:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:FC:CE:A5:D2:0F:30:ED:A3:55:15:96:B8:2F:E8:76:1F:DE:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af1b827e-ec96-3c94-9b3c-036ae6d9504c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.24.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:8a:34:70:14:4c:2b:a5:42:1b:db:b5:3f:58:4c:d9:11:83:
46:c1:23:d5:7b:24:c5:ac:a2:7a:71:a3:dc:d4:9c:d3:18:14:
2b:57:da:95:67:96:d5:99:aa:ac:83:97:9f:fd:0c:64:e1:92:
48:ba:da:71:1f:d7:e8:f8:5b:76:36:43:90:76:66:5a:10:95:
c9:34:c8:22:1a:c4:40:44:84:c8:cd:f6:fc:7b:bf:43:6d:23:
8a:04:e4:6d:c5:05:16:c2:a3:cf:fb:79:6e:ab:12:4e:0d:fe:
e2:c5:62:cf:a6:5a:af:98:2c:2a:2c:28:78:c1:26:ee:22:f6:
e6:1c:ed:a6:de:74:fc:bd:4a:9a:44:dd:1e:10:21:77:05:b3:
b4:74:22:05:ef:31:08:82:59:6c:68:6f:a9:31:d2:fa:25:69:
65:95:97:4d:9f:23:83:f3:45:b0:ca:cb:b6:71:0e:65:4e:c4:
de:11:f8:8f:40:d5:e0:e2:c0:91:e3:54:f3:29:8a:aa:b8:b6:
db:00:1d:1f:09:1d:58:af:10:2c:f0:e9:59:31:58:b0:74:d7:
b5:5c:a6:22:d4:d5:b6:00:72:b4:16:ca:4b:22:3f:22:f1:99:
11:91:dd:0d:3c:a7:09:ad:48:2c:48:18:be:10:42:9a:06:b9:
a1:ce:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:17 2025 by rpki-client