Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5e3e350-7e0a-350f-82ff-b89b9ec216fd.roa
File: b5e3e350-7e0a-350f-82ff-b89b9ec216fd.roa (raw, json)
Hash identifier: xQB3HtqkIyQ5hMMmPBxOzPV0Qk20KsYopjavkyZ3Cz8=
Subject key identifier: B1:4A:FA:F6:33:A7:80:DB:0D:A0:19:C2:28:ED:65:BB:9C:4C:50:31
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210ECE60E7F551EFCE59D40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5e3e350-7e0a-350f-82ff-b89b9ec216fd.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 67.141.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 19 Feb 2025 14:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:ec:e6:0e:7f:55:1e:fc:e5:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=e4a3dd0c-cce8-4e72-bcc8-eed23f04883f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:c1:dc:e9:aa:3b:97:aa:bb:db:8e:74:a4:
62:a3:18:43:5e:2a:37:70:cf:1b:d2:7b:0c:8e:11:
9a:48:6e:81:1a:b3:a3:18:cb:84:e2:07:8a:a5:1b:
4d:17:ac:9c:92:a2:53:ec:99:b1:4c:7a:de:8c:9d:
a2:ac:be:cd:38:16:a8:1d:46:8b:bb:59:07:e1:cb:
c8:0a:fc:d9:bd:8b:b4:37:64:43:68:91:e4:73:e1:
76:0b:47:4c:b8:f6:f8:a4:8c:5b:78:cb:b7:a2:fc:
d4:7a:f5:ba:99:02:a0:6e:67:46:dc:6e:96:e4:f0:
53:d2:85:43:e6:9e:34:ce:48:6f:64:b1:97:51:53:
ea:e2:4e:7a:ab:ae:a5:01:5b:84:2f:ae:e5:fb:9e:
4b:fc:1f:2e:be:34:06:0c:02:98:16:71:a7:02:f2:
2d:c6:5a:bc:d6:3b:8e:20:32:04:21:e3:f0:50:67:
74:d7:91:9b:17:70:be:a2:47:5b:f3:ad:83:40:2e:
38:6c:49:c3:43:e4:47:4f:03:f5:81:37:8e:c7:bb:
06:d5:75:40:08:1a:50:07:cb:d0:96:10:9b:df:e9:
3d:36:fa:fc:09:eb:04:d0:15:47:89:f4:ae:35:c8:
e6:07:d9:7c:c6:5f:1a:2d:e6:9b:cf:1b:0b:c6:1c:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4A:FA:F6:33:A7:80:DB:0D:A0:19:C2:28:ED:65:BB:9C:4C:50:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5e3e350-7e0a-350f-82ff-b89b9ec216fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:b0:44:f8:86:67:9c:f7:d9:d8:ff:1e:88:20:6e:08:44:15:
63:29:a6:86:b8:00:d8:ce:7a:89:7b:ef:99:f1:59:11:5c:b1:
af:76:a3:b8:4a:7d:41:69:ee:e6:e7:2f:19:62:39:92:da:b7:
ea:24:14:78:e6:f4:01:0e:5a:09:5f:27:86:54:5b:de:55:b1:
b5:3c:6f:ba:a2:43:01:47:5e:ec:07:1a:aa:c0:dd:0b:f9:6c:
2f:3b:18:53:75:10:29:b3:6e:c4:4c:66:ec:a6:80:8d:21:e0:
3c:13:ea:08:8c:fa:b1:72:1e:47:02:86:9e:03:6a:76:33:3d:
e2:57:45:e7:97:d2:38:9a:56:df:a3:46:81:60:ff:70:33:3b:
82:cc:2e:45:2f:9c:2c:df:04:32:fc:27:2b:2b:34:34:0c:c1:
72:24:e8:69:ba:f0:b9:61:d0:8f:46:08:60:b7:f1:27:3c:fd:
5b:69:da:ef:c4:d5:7a:2f:ec:b3:10:52:93:e5:3d:0e:e0:3c:
26:57:a4:77:ee:2c:67:5b:b2:a7:e8:9e:40:da:1f:45:ef:0c:
db:54:ba:0c:73:66:32:34:40:98:6f:41:fe:23:53:51:21:ee:
a4:16:a1:6b:78:e6:67:0d:fc:87:d1:e8:56:34:e5:27:5e:8c:
34:ba:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:34 2025 by rpki-client