Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4d4e84c-f118-3f43-970e-167acb4b8138.roa
File: b4d4e84c-f118-3f43-970e-167acb4b8138.roa (raw, json)
Hash identifier: 5iZ131Jf2AC9Y8J54ZDu3lTLuowr5YFGTq0Gw1Fj5v0=
Subject key identifier: 3A:B7:AD:B1:FE:96:97:D3:AD:FE:75:68:D3:EC:F9:06:CB:6D:C8:F7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661AA3B562850A1638F585C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4d4e84c-f118-3f43-970e-167acb4b8138.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 75.88.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1a:a3:b5:62:85:0a:16:38:f5:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=0bb8b22d-1d43-4828-b56c-3c3d0b7a9d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:2a:e6:2a:eb:a9:92:d3:bd:8d:78:2b:b8:
9d:00:80:a2:94:95:97:b3:80:39:40:7a:7c:c1:97:
24:77:42:ed:5d:2c:f3:6f:00:25:a1:f3:e2:d3:30:
cb:d9:d7:0c:1c:c9:c4:f4:52:f3:1a:69:c2:75:c2:
fd:a7:4f:45:29:2b:3f:52:e2:07:b5:54:98:c4:9b:
fc:09:c7:8e:00:62:42:35:d4:bc:eb:bd:c3:e8:d7:
bf:45:5d:2a:72:c6:47:b8:ca:e7:a0:2f:96:5b:d8:
8a:17:82:2d:23:3d:c4:9c:9e:5a:84:fe:bd:db:18:
db:7e:a3:e4:9a:58:de:57:8e:6e:d1:ce:d1:77:84:
d2:f1:3c:cd:d0:d3:be:52:69:53:2c:cb:c0:74:30:
7b:5a:e1:de:12:1b:dc:32:f4:e7:ea:3d:33:26:b3:
0f:1e:4a:be:0f:21:61:b2:e4:d8:de:19:87:dc:d7:
ca:8f:98:ab:67:d1:14:77:31:4f:fc:48:2f:f4:5f:
06:05:b4:f9:39:f1:87:a5:e5:e1:8c:26:0f:27:20:
6f:04:cf:30:72:80:84:7c:ed:64:31:2c:4c:5c:e6:
26:f6:a2:b5:03:55:e2:8f:fe:e6:e8:fb:95:c8:13:
12:68:90:ed:b9:eb:69:27:ce:b8:76:e2:8e:54:16:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:AD:B1:FE:96:97:D3:AD:FE:75:68:D3:EC:F9:06:CB:6D:C8:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4d4e84c-f118-3f43-970e-167acb4b8138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:fa:cc:58:1a:4d:61:04:21:57:e3:eb:97:7a:21:6c:35:95:
17:cb:6b:6f:9b:a1:51:54:e2:b6:ff:b3:a4:d6:fe:17:c1:98:
d1:25:c8:bc:be:10:89:06:5b:ce:9b:73:76:48:49:c7:3a:1a:
16:87:3c:47:80:58:d0:6d:b3:60:c9:79:2a:73:7f:e6:24:63:
1a:83:06:31:03:e4:36:d4:b0:f2:de:74:a2:fd:04:e2:d7:44:
d3:52:6b:29:be:1f:5f:95:5c:ee:d3:72:2a:29:62:b9:03:8a:
54:24:43:78:d3:78:4b:46:f2:74:42:28:c5:4d:db:cf:dc:29:
5f:de:8e:02:8e:0d:6f:7e:4e:c6:53:ed:53:cf:9d:92:37:05:
5c:07:88:7f:22:2f:e2:da:3d:59:df:d5:78:b1:78:3e:64:55:
9a:b5:8d:18:c9:4d:59:21:b3:64:7e:24:bb:4d:b6:73:3c:43:
a9:ad:1c:b2:f5:41:fa:af:ed:54:91:d3:01:ad:65:c8:a2:b4:
49:81:58:08:fb:7b:26:85:b1:2f:7d:cd:59:f1:7d:b2:ac:75:
76:a0:d2:b6:7d:1b:0a:fe:82:e7:62:85:0b:19:78:09:2f:f7:
0d:5e:87:0e:91:b3:07:85:fe:d0:12:65:d8:6b:54:aa:64:63:
3f:53:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:12 2025 by rpki-client