Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9aceb8c-e339-3902-a4ba-07c78d6bd930.roa
File: c9aceb8c-e339-3902-a4ba-07c78d6bd930.roa (raw, json)
Hash identifier: SLnPUQmbd/piyqVXUrM5SO9X8ubeWbbO5pLjfPWy9Ag=
Subject key identifier: D7:2B:71:B2:D7:84:D2:4C:DA:F4:CD:4C:75:87:22:2C:9C:5C:26:A6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D1AFD82070C187C669B42A480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9aceb8c-e339-3902-a4ba-07c78d6bd930.roa
Signing time: Wed 02 Mar 2022 05:00:00 +0000
ROA not before: Wed 02 Mar 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2028 05:00:00 +0000
asID: 7029
IP address blocks: 40.138.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1a:fd:82:07:0c:18:7c:66:9b:42:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 2 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2028 GMT
Subject: CN=bc4b9dd4-8c2b-4da7-a2db-4ecfe8107df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:66:80:b9:08:d0:8f:1b:81:c4:45:31:87:
a9:47:66:da:a4:66:5d:2f:b0:b2:95:ea:6d:d0:68:
b1:4f:02:9e:08:81:16:23:0f:c9:98:62:a6:e6:20:
7a:ee:1a:c0:b4:ac:2f:93:6e:4f:a6:33:e5:00:4f:
8b:c1:72:00:46:8c:9d:24:31:96:a4:e7:95:57:6c:
52:fd:83:08:0f:97:02:c2:9a:93:e5:4a:bb:4f:8b:
57:6b:d0:8a:89:f9:66:f3:72:5f:59:32:44:64:d8:
10:dd:e0:78:07:76:58:34:41:f6:1e:d3:b0:f7:e9:
e3:6d:66:ff:47:d7:7e:64:c1:68:2f:10:14:f6:c2:
e5:96:4d:e9:32:e3:d2:48:85:b5:ad:c9:3e:86:f1:
87:fa:a4:a3:4e:bb:b0:6b:6c:7d:9c:7e:73:5a:1d:
fd:c7:3e:27:21:23:8b:df:c0:e1:5c:94:09:a5:a0:
d5:0a:54:c6:1f:0b:0a:2a:a2:8b:4a:0c:5d:e4:f7:
fa:8e:2d:79:94:ef:da:5f:41:30:40:54:c8:b8:fe:
1f:9d:5e:fa:b5:1b:2a:11:ac:d7:83:e9:6f:22:29:
21:a3:cf:9c:ff:1b:3c:d3:fd:6c:9c:49:d3:cb:15:
24:74:1b:f7:75:ca:5a:78:99:d1:4c:60:3a:c2:e3:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2B:71:B2:D7:84:D2:4C:DA:F4:CD:4C:75:87:22:2C:9C:5C:26:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9aceb8c-e339-3902-a4ba-07c78d6bd930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.138.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:33:a1:31:b4:04:28:97:18:a9:de:d6:cc:df:45:a5:f3:6e:
cb:23:56:da:a6:46:12:67:a0:53:07:05:d6:38:6a:04:fe:e7:
3f:9e:41:3f:52:8f:69:1d:e2:35:c1:dc:78:c4:1c:ec:69:88:
01:4a:99:27:dc:19:31:4d:25:65:93:e0:24:e0:b1:ad:7d:a3:
b7:73:ba:24:06:89:7c:ee:5c:3a:4f:da:0a:b2:fc:06:02:0e:
73:69:d9:4a:d0:dc:b6:fd:b4:de:ed:76:f2:46:76:01:f6:30:
98:a8:a6:0a:4f:09:95:d8:14:3b:f6:53:7b:33:e1:9f:c5:8e:
78:df:0f:5b:a2:3a:f4:d1:40:2a:b3:02:96:19:eb:5f:20:92:
90:59:90:ed:3b:4f:eb:ac:5f:19:38:08:cd:86:1a:78:a3:53:
ca:30:32:7b:02:0b:72:f4:71:60:cd:c4:60:7b:4d:74:33:79:
8a:42:b8:96:9e:20:39:2c:55:0c:2d:61:eb:48:a2:78:0b:e8:
e8:b2:c9:f4:b8:1a:8a:d4:a2:06:a6:38:ca:ef:a2:00:df:4a:
7b:b2:7b:d2:fe:55:78:84:f2:18:b1:cc:3e:d5:91:11:ee:7d:
27:4f:70:ee:38:72:8e:f3:79:1c:b9:c2:2a:f4:78:db:d3:38:
6a:61:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:15 2025 by rpki-client