Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c311989b-8c7e-3092-b71d-678787fdee09.roa
File: c311989b-8c7e-3092-b71d-678787fdee09.roa (raw, json)
Hash identifier: 3bwjfgWrxyf1nwa/3v4DqijP00FMfDQR4qtP8U6r9Ac=
Subject key identifier: 28:87:C0:42:34:CA:8F:D6:E4:FA:B9:E9:C5:B8:2F:A9:BB:22:7E:83
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D662167DC816FCF9CF711EF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c311989b-8c7e-3092-b71d-678787fdee09.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 198.14.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:21:67:dc:81:6f:cf:9c:f7:11:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=4d89f136-fc9b-4d54-8cc0-830788aa9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:01:f0:99:ce:9f:82:3d:cf:ae:4a:39:8b:
7f:da:06:16:e2:ac:09:c0:01:1e:43:04:17:21:57:
da:3f:8b:c8:9d:cb:d0:f8:f1:6b:6c:5d:49:79:dc:
07:ad:77:b2:2e:b9:9a:c9:41:89:7f:ab:e3:85:5d:
6b:bd:25:67:71:c3:62:94:e6:ff:3b:f2:d5:3a:50:
bc:52:bc:3d:0f:db:a1:4f:cb:25:7b:3c:d0:10:b7:
ae:25:16:a3:96:c3:ad:fe:75:8b:a6:68:8f:52:cb:
c0:bb:b9:8b:88:fb:61:b8:ac:cb:67:0c:27:81:f9:
3c:46:cb:a9:f1:d2:a8:5a:80:69:5d:b7:10:04:75:
a9:9f:9f:7b:90:5a:6b:0a:9d:70:c6:3b:1e:c6:8f:
f1:fd:54:db:33:b0:77:a8:a7:85:9c:ee:46:bf:0f:
a2:87:7f:83:a6:fa:7e:94:34:e6:7d:73:dc:3f:5c:
43:34:75:cd:b0:ab:b8:f4:31:e5:57:24:51:cf:c1:
05:d3:5e:13:31:ca:94:e1:0c:a5:5c:0b:a5:d7:97:
43:15:b5:f0:5b:0e:cb:65:97:d1:77:96:d9:d0:c5:
64:54:05:a1:b1:ee:fe:72:03:5d:ba:72:80:58:ff:
87:86:45:11:49:6b:5e:6c:14:39:29:75:12:04:36:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:87:C0:42:34:CA:8F:D6:E4:FA:B9:E9:C5:B8:2F:A9:BB:22:7E:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c311989b-8c7e-3092-b71d-678787fdee09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.14.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:89:9f:aa:3c:b9:f1:e6:87:7f:79:19:d9:ef:91:d2:a7:f6:
25:c6:b8:48:ff:2c:bd:da:74:62:f6:21:fc:b6:4c:8e:5d:e0:
70:0a:c8:95:f8:3d:5b:dc:51:08:dc:9a:e0:67:ec:3d:db:a9:
6d:cd:ec:25:82:ea:c4:05:57:81:76:fb:0e:f9:1f:0d:47:fb:
a9:e0:4a:0e:ca:a4:22:a6:29:4c:2d:a8:d6:fe:42:b0:bc:74:
c4:20:8f:a1:d3:38:6c:4c:40:64:c2:40:7c:0b:67:32:ff:3d:
58:3a:c2:86:ed:f5:79:90:8a:59:81:82:dd:7f:9d:ee:03:ce:
ad:e9:81:13:7a:e9:86:01:79:6d:01:09:26:3a:59:c4:1e:14:
62:42:b7:da:76:89:5a:1e:9f:36:9e:ce:58:be:b3:65:40:75:
7c:bf:53:0f:3e:e6:9e:b3:0f:91:d5:00:1d:ec:dd:29:9e:70:
56:57:07:b5:4c:c5:93:64:9c:02:68:61:f2:3c:0e:4b:1e:41:
79:55:0a:ec:54:1f:2d:a1:da:1b:c0:bb:4a:0f:63:ff:32:d5:
4d:e6:88:6c:a1:fb:c7:5f:d4:b6:42:d0:6b:18:a1:54:25:5f:
48:6e:33:a7:93:2c:f8:9e:5c:11:8d:ac:fd:6e:15:c0:ad:69:
b8:90:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:13:39 2025 by rpki-client