Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c04d8370-0623-3e10-8323-03c73eb485bf.roa
File: c04d8370-0623-3e10-8323-03c73eb485bf.roa (raw, json)
Hash identifier: C7TpApfoqmyLhvo0n8qlyjcQH0+5IUsch6OGTk3QAWk=
Subject key identifier: 22:62:86:14:A6:D9:37:4A:C6:26:72:97:C0:1E:08:CD:61:10:9B:B0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661D33473122FE02267E39DC
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c04d8370-0623-3e10-8323-03c73eb485bf.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.18.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:33:47:31:22:fe:02:26:7e:39:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=f5a32981-340a-44b1-b177-fe9ffd064c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:28:8b:dd:6c:db:b0:e7:42:05:ca:84:59:
d4:ae:6a:e1:84:58:9f:0c:1f:2c:36:51:52:29:34:
83:81:bf:1a:b0:f5:ac:9d:e2:da:8a:cf:81:2f:12:
70:a9:89:42:05:3d:b9:38:4d:54:e5:8c:34:32:d1:
c3:52:8f:78:1b:23:63:7e:35:38:e1:88:8e:1d:61:
bf:8b:ec:4c:36:89:4e:1d:09:ad:bf:f0:f8:01:6b:
c5:95:6a:d6:db:e3:27:07:07:87:83:f3:7f:69:a8:
d0:9f:fe:9e:8e:d9:9b:82:34:3c:c7:8b:c9:b2:a9:
f0:8b:ad:53:d2:74:a6:c8:90:98:28:33:6b:55:f7:
7b:b9:cf:06:a5:3e:2c:b5:07:b7:66:69:fe:4c:75:
02:e1:e5:30:b8:5c:85:a5:25:22:28:3e:1f:36:a9:
29:93:6e:92:d2:63:1b:f9:14:65:94:0d:e6:9a:57:
bc:36:16:a8:05:eb:c4:aa:62:a1:b1:83:c0:18:50:
d3:dd:0c:43:df:ad:07:34:e2:d1:3a:e9:97:3a:a9:
e6:af:2c:e6:12:c0:1f:31:bf:33:fc:a4:de:4c:97:
9d:5c:ba:fd:58:8a:6d:2e:e5:4d:c4:e0:63:6f:69:
de:44:7b:e3:d6:48:c8:78:c1:b8:53:0d:62:33:6e:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:62:86:14:A6:D9:37:4A:C6:26:72:97:C0:1E:08:CD:61:10:9B:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c04d8370-0623-3e10-8323-03c73eb485bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.18.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:f2:c8:3b:2e:20:8c:0e:36:13:fa:12:d7:7d:e4:c0:1e:d2:
a8:31:4a:81:98:8a:43:f1:58:21:85:5a:e2:99:d7:bd:71:ac:
19:c4:14:6d:7f:d0:2e:a2:1c:73:e1:f4:3b:76:e4:57:12:b2:
23:a1:bb:43:9e:e4:30:2d:53:42:d2:f1:bd:c5:db:03:34:68:
47:af:73:de:20:60:17:5d:2d:be:44:6f:1f:9e:a6:f2:50:17:
00:68:2a:11:8f:52:7c:de:a5:65:b6:24:76:90:d5:e5:53:03:
30:a8:39:51:7c:81:dd:bc:e5:c9:fd:2c:23:3e:8a:16:de:1c:
b1:a3:48:4e:c6:ad:6e:8f:f7:d3:13:8f:cc:0f:f6:b2:24:56:
c1:ac:38:5e:ec:1e:32:34:e1:db:02:6c:34:7b:3b:02:f6:ff:
a9:69:28:46:ec:36:00:28:15:d7:71:5b:2c:11:89:ca:69:4a:
92:4a:0d:73:0a:31:4c:7c:cd:61:35:58:df:cd:0d:5a:a5:a5:
1c:fb:19:62:0d:3a:a2:5c:a4:a2:69:9f:ab:6d:6c:f8:32:0a:
c7:99:4e:ac:0d:6c:05:17:2c:13:c8:3b:73:6a:67:be:88:cb:
b7:2b:45:b8:76:ef:cd:d9:fb:cd:47:b5:38:41:e3:0f:f1:49:
75:6a:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:56 2025 by rpki-client