Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5d278be-8584-38bd-a611-cbf94e4a50c3.roa
File: c5d278be-8584-38bd-a611-cbf94e4a50c3.roa (raw, json)
Hash identifier: YA/xkZuCJtjcXJRJKirEcb6LNSKm9W7MF0gDgU6QS+I=
Subject key identifier: 18:1C:95:6C:8D:1E:DE:A9:EF:A8:F9:FD:76:2B:4D:53:C5:C1:4F:A6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661AD664960A1B0AE50FEA40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5d278be-8584-38bd-a611-cbf94e4a50c3.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 75.88.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1a:d6:64:96:0a:1b:0a:e5:0f:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=9088611a-0b35-4870-a384-f5a138511008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:3f:99:0d:3c:b4:13:60:50:4a:d8:4a:f9:
be:c5:83:51:74:28:f0:e5:18:56:73:05:04:5f:8c:
68:4e:c8:6e:0d:b6:fd:90:f3:63:f7:27:6c:1b:29:
90:e9:26:dc:56:a7:19:10:c2:d2:a6:c1:64:98:fb:
a9:e3:e1:62:cd:30:90:93:9b:a0:2e:52:1d:8e:c1:
a0:96:f0:09:43:1e:a7:68:ac:48:94:f3:8e:06:4e:
40:da:1d:cd:99:cf:13:39:0d:37:57:4a:ff:3b:0e:
8a:e8:6f:75:4b:a8:63:b4:58:68:69:0c:72:4f:ed:
77:1f:f2:ff:b8:01:ea:61:bc:1f:67:f2:79:4b:9d:
45:e5:91:58:cb:ea:6e:0f:4c:78:66:df:98:0c:af:
59:1e:2a:2a:47:d7:1a:6d:38:59:c9:2b:f6:e8:8c:
a7:54:f8:b6:be:8d:32:c7:77:6c:1f:e8:69:07:10:
2c:07:0f:2f:57:97:97:8a:21:60:8a:b8:47:86:1d:
d2:84:c1:75:e9:da:3b:1f:b6:18:c4:c6:f3:a7:81:
01:3a:15:21:47:89:67:31:47:71:6c:27:12:49:24:
9b:dd:96:08:c2:81:57:26:b8:b6:32:2d:e0:44:ad:
98:ee:19:09:0e:97:92:ac:d9:40:e6:a1:d5:2a:06:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:95:6C:8D:1E:DE:A9:EF:A8:F9:FD:76:2B:4D:53:C5:C1:4F:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5d278be-8584-38bd-a611-cbf94e4a50c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:cf:de:a2:b2:33:d3:a8:72:6a:39:84:21:d2:02:33:e6:b9:
ad:f3:fd:c2:21:94:2a:8c:19:6c:a5:53:2f:11:c3:ab:66:55:
1d:73:fd:48:5c:27:c6:3f:65:f7:70:68:59:94:26:86:31:ae:
2b:6a:f3:17:8f:e1:b0:b8:a4:3d:a1:8b:e6:04:27:28:7b:62:
f7:4b:31:09:21:d2:42:16:ec:0c:c4:7e:97:a7:1e:08:a6:f1:
ae:de:84:05:a9:c7:85:0c:ac:79:2f:9a:6d:cf:76:97:c3:fc:
46:35:72:0c:f3:2c:b8:fb:8d:92:25:4d:4f:dd:a5:fa:a5:d2:
da:bb:ab:7a:40:be:09:2b:ac:51:26:0e:57:00:01:b7:40:8f:
10:e8:84:ae:03:96:1b:0e:3a:c8:a0:69:67:67:cc:b4:6e:c9:
f3:70:9f:05:cc:d1:71:9d:41:02:ae:7e:8f:1a:6e:c0:b2:c6:
b5:39:7b:3a:49:3d:89:5c:54:43:43:22:f5:3c:94:2a:7c:72:
d5:a8:c5:9e:39:f4:6d:03:63:39:13:2e:e9:fb:8f:f3:07:07:
33:df:d4:0f:a3:f0:e6:c5:b9:35:a9:f1:1c:e5:f2:f7:9c:b7:
27:3f:52:d8:85:00:b4:01:8b:26:dc:f4:c2:c4:45:34:65:b1:
4b:d1:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:50 2025 by rpki-client