Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce248a90-6662-311f-8175-1188a2e57e29.roa
File: ce248a90-6662-311f-8175-1188a2e57e29.roa (raw, json)
Hash identifier: NRi43ZzRFErnAhuvW9Pyz/fCtu5eCV3CtYx6qmryXnA=
Subject key identifier: B1:4E:EE:91:73:2D:81:29:F2:35:54:0E:0A:7D:A2:F8:4E:E5:77:EB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551DD185B5E9444C0B361A40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce248a90-6662-311f-8175-1188a2e57e29.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 199.195.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1d:d1:85:b5:e9:44:4c:0b:36:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=81b06f90-f222-485e-9ee9-4506305934fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:8a:77:cc:ae:89:62:86:77:cd:4d:e7:3d:
20:00:1d:28:6c:48:eb:ee:9e:55:ed:7f:7f:39:c8:
33:5e:9d:7e:50:c1:e6:54:66:9a:91:34:62:a4:1f:
9c:21:73:bc:60:56:3f:bf:93:6c:60:fb:51:77:8e:
66:39:d7:2f:58:11:8b:bb:33:0b:ab:8b:57:df:e6:
0f:ba:31:7f:31:58:04:55:80:39:f3:07:81:d0:1e:
da:95:ad:ad:a6:7e:3a:d5:c6:5a:6a:91:1a:e3:e2:
2b:96:7b:84:13:57:dc:23:26:20:eb:3a:4d:f8:b4:
68:3a:8b:95:37:d9:cd:e9:9a:ef:7a:11:b8:04:9f:
54:bf:74:01:65:fd:ae:26:da:e1:5b:fb:43:f5:8e:
d2:9a:58:84:77:b6:58:b7:c5:36:77:da:94:86:13:
b5:02:99:90:cd:40:6e:9d:24:04:56:89:35:24:04:
bb:1d:fe:cb:cf:9d:64:c7:c6:29:67:15:b1:e9:bd:
d4:9e:55:d6:ae:bc:52:0f:bf:39:ed:8f:8e:2b:74:
c7:be:a5:30:4f:37:13:ad:32:5b:a1:8a:c4:92:a2:
a0:ee:86:db:f9:0b:3f:e3:16:9d:63:a1:d7:1a:40:
f9:7b:84:46:be:3f:a1:88:51:fc:9e:80:03:b1:17:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:EE:91:73:2D:81:29:F2:35:54:0E:0A:7D:A2:F8:4E:E5:77:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce248a90-6662-311f-8175-1188a2e57e29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.195.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:bc:25:0b:e8:14:19:10:d3:fa:a0:b7:49:78:b2:4e:16:f0:
14:1f:81:ee:15:bc:95:6e:42:c3:72:4c:9b:59:32:ad:98:c4:
d6:ce:65:06:5a:1c:1a:3e:09:5b:09:1c:9d:92:8b:63:57:ab:
8f:3d:1d:25:a4:0c:b8:03:e4:05:9b:d1:2a:f3:55:c3:21:da:
ba:88:77:bd:46:7a:1b:bc:6f:2c:15:3c:54:fb:dd:a5:d9:9d:
c4:0b:4b:b0:78:4b:6f:a1:bf:82:f6:c7:f2:89:bc:97:f1:42:
c9:03:3b:a3:d4:9d:6c:80:34:c0:2f:05:79:0a:e1:5c:36:96:
e1:0e:be:bd:b5:75:6c:76:9c:1b:c4:17:dc:40:17:b7:88:d3:
7c:b5:64:64:c5:41:e7:22:bd:51:8d:82:93:09:62:6b:6e:2e:
3e:80:f1:42:a9:46:0d:5a:46:7f:47:c4:b2:9a:81:e4:0c:e0:
a6:71:79:46:20:5b:1b:61:cd:46:f8:39:70:19:df:3a:94:f4:
5d:1d:94:5d:98:fd:70:34:d9:ad:25:87:54:4b:4b:53:f0:c4:
d6:18:24:1e:1d:be:7f:5e:82:f5:3f:2b:a2:8c:2e:76:5e:ff:
9c:57:f1:5e:bd:c0:e0:8f:6e:45:04:d6:54:51:b1:ab:2c:94:
5d:07:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:52 2025 by rpki-client