Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5659c68-6279-3031-99c3-269d1cb57689.roa
File: c5659c68-6279-3031-99c3-269d1cb57689.roa (raw, json)
Hash identifier: 6xQs+amdksnWKRFRgBkUvSacSiYFxNYl+Bcpn6HM0Dc=
Subject key identifier: 9B:28:92:AA:04:EF:CB:83:EB:74:2D:4F:9D:38:C8:B0:05:44:86:A4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F20A45CAE8BF74F74940
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5659c68-6279-3031-99c3-269d1cb57689.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.19.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 20 Feb 2025 15:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f2:0a:45:ca:e8:bf:74:f7:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=6a325a7e-c29b-4d8e-acb1-27a096c61349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:98:46:39:fc:35:af:47:36:32:5d:b5:a5:
fa:9a:e4:63:9d:49:b5:ea:84:01:31:8b:12:42:ea:
cd:d0:be:d9:8c:81:34:fe:44:0b:11:eb:a0:ec:16:
3e:b2:c7:33:a1:24:36:77:4d:9d:e0:de:60:b1:33:
c1:c0:c7:f7:79:ac:67:2b:82:0f:43:19:60:83:97:
05:63:34:5b:a6:09:71:9f:cb:d5:87:fd:c4:67:9f:
d2:bf:ed:52:38:ab:5f:80:23:0b:82:f1:b3:8e:3d:
e8:3c:2e:4e:af:07:25:6b:73:c7:c2:67:c4:50:76:
08:a4:55:f8:88:bc:9b:83:03:d2:89:14:90:54:8c:
66:7c:83:00:0c:e0:6b:c1:7c:7b:27:20:4f:a7:32:
3f:65:75:34:9f:49:c5:8e:4a:67:3f:3b:de:84:ef:
38:ba:58:03:9e:78:51:cc:d8:35:30:2a:48:a4:07:
fb:d8:6e:44:13:6d:8a:5d:a6:ae:b5:32:c3:d3:02:
ee:3b:7f:db:84:ca:0e:d3:77:e1:1f:6b:b3:2e:01:
9e:5e:56:02:e9:03:58:ca:14:f2:8f:5e:da:f3:15:
0c:58:5c:0e:04:63:a5:6e:4b:2e:5a:14:2d:11:2e:
94:3c:bc:de:25:43:c6:fc:af:03:da:68:8d:52:2f:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:28:92:AA:04:EF:CB:83:EB:74:2D:4F:9D:38:C8:B0:05:44:86:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5659c68-6279-3031-99c3-269d1cb57689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:74:29:47:f4:57:b7:50:f8:59:4b:02:45:d3:a5:6e:8d:51:
45:4c:60:a7:47:da:27:23:29:50:7f:61:68:a4:c5:fd:5f:c3:
2e:35:e8:81:dc:29:3e:64:fb:5f:90:e7:9b:b1:48:37:79:0d:
7c:ce:3f:fa:05:3f:27:30:f4:9e:9c:49:d6:90:ea:e7:ae:6a:
30:f2:5a:33:11:a6:15:5e:2a:d9:c8:65:53:39:59:ad:a0:a1:
f4:5c:fb:1c:00:7c:23:6e:b6:b0:d7:6e:1a:90:5e:08:80:f6:
e0:b4:f9:21:d6:04:90:98:99:d2:76:6c:9e:8a:65:ef:e1:e9:
26:58:f4:c3:45:12:66:10:f6:10:18:72:6f:65:5c:10:84:31:
54:14:71:43:01:ab:ae:0c:6c:62:4d:9b:26:8d:34:2a:a1:28:
3d:37:67:77:8c:e0:9b:85:da:66:6c:da:02:03:92:bc:4f:72:
2c:37:2d:22:10:d6:b5:bb:ca:84:97:78:32:2e:0b:fb:7a:99:
fd:e2:e9:c2:5d:21:b3:72:1b:8d:0e:fb:2f:f1:4c:f4:82:c4:
36:90:72:67:e9:73:d4:39:4f:63:ed:38:6f:2d:3c:df:36:dd:
6f:f7:85:33:86:6f:55:3a:7b:eb:1c:13:af:21:e5:8e:4b:29:
f5:35:db:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:35:43 2025 by rpki-client