Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c38d51-4b3c-3f54-a882-e9b239cfa29d.roa
File: d6c38d51-4b3c-3f54-a882-e9b239cfa29d.roa (raw, json)
Hash identifier: IkK2Bj+/qPqxr4LE/bw7KQ1Ff8d6pVNKA86dQRWUe5A=
Subject key identifier: FA:81:39:06:32:05:C4:01:4D:1E:1E:66:C0:2B:E7:9D:23:C1:CE:BA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661B88AE3DD214E4E0797D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c38d51-4b3c-3f54-a882-e9b239cfa29d.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 75.91.80.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1b:88:ae:3d:d2:14:e4:e0:79:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=71b38898-19b4-4667-9813-de576eb55cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:8f:f8:2a:92:65:d1:36:40:02:c7:bd:fb:
24:f7:9d:52:51:ab:54:a8:19:ef:e0:ae:cd:9e:58:
ab:1d:24:0b:c7:33:3b:09:61:0e:b4:be:06:d1:c7:
0d:3e:5a:8b:62:ca:c6:38:5a:36:bb:b4:98:12:43:
aa:7b:3d:84:53:9b:7b:03:92:7c:10:df:c3:cc:90:
d0:88:3b:c9:d3:dc:f2:79:88:a4:4c:50:a7:56:98:
53:18:52:81:ff:4d:cc:2d:b6:a7:50:57:c6:51:dd:
11:58:46:05:e0:20:1f:ff:5b:6a:e9:0a:09:ff:6b:
e8:57:d8:9a:e9:79:da:55:43:0e:6b:23:d0:75:01:
6c:7a:71:ed:5a:63:8c:30:f2:46:46:07:5c:8e:c6:
8f:94:2c:0c:04:7c:d5:60:d0:58:2b:27:ef:6b:df:
b9:b6:00:73:c0:fe:23:be:11:53:cc:12:c7:72:2f:
1f:54:60:bb:9b:4b:25:df:07:6e:56:df:89:b4:e9:
c8:21:d0:36:08:10:94:2e:8a:07:1c:b0:60:34:fa:
be:aa:c9:4b:79:11:fa:78:81:39:d7:58:6e:bf:34:
0f:aa:b3:01:f3:d3:6e:87:26:00:43:79:83:3e:b4:
5b:87:19:bc:36:16:bb:21:4b:d0:eb:cb:45:e4:d7:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:39:06:32:05:C4:01:4D:1E:1E:66:C0:2B:E7:9D:23:C1:CE:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c38d51-4b3c-3f54-a882-e9b239cfa29d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.91.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:9e:8f:7d:73:41:2d:c6:cf:76:9d:db:82:3f:d4:ca:39:19:
51:1e:c8:42:c3:33:68:7d:e0:ad:75:55:ba:35:18:23:a1:fb:
8f:4e:a0:4d:a2:34:72:02:c0:46:5b:ad:c2:aa:07:cf:6f:ae:
d3:53:d8:99:68:83:c5:b7:fb:8d:3f:7e:67:23:4d:2e:3e:23:
a5:7c:1c:12:50:59:36:eb:b5:be:d9:86:41:8f:2b:54:2b:16:
ed:85:24:fb:f8:a3:1b:97:5b:b1:90:27:a0:e9:ba:cf:d8:e2:
d7:f9:df:ba:48:86:af:f1:90:70:12:5b:27:3e:90:35:e8:8d:
79:54:63:71:63:11:bb:71:5a:e5:68:54:04:2e:a2:4c:f9:3b:
89:80:ce:1a:0c:e8:5a:25:d2:3c:87:3b:57:a7:b7:6d:e2:55:
f5:f3:8a:3e:35:83:56:d3:42:d8:23:ca:9d:8a:43:ab:51:d3:
02:35:b2:70:db:4d:de:61:30:7a:6d:d6:0d:60:05:5b:db:12:
14:50:c6:93:3c:66:65:15:8b:42:10:6d:91:92:86:d6:5d:89:
5f:11:3e:c0:1f:34:ac:fe:61:d1:35:ef:aa:84:53:4a:c0:f9:
11:00:a8:ca:e3:4a:61:f8:5a:62:b1:9d:6c:50:5a:87:37:2f:
98:29:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:39:22 2025 by rpki-client