Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aabadf-b651-3d1e-9c3a-802723dfbe94.roa
File: d8aabadf-b651-3d1e-9c3a-802723dfbe94.roa (raw, json)
Hash identifier: 89tYDR9Tf0zLp4sW323qqoFmrJ0ptKYFFSN9DABdhK8=
Subject key identifier: 40:D8:F1:E5:4E:76:45:DB:62:CD:71:98:10:1D:67:FF:F8:45:0B:37
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661E7DB651B4F7EF45674B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aabadf-b651-3d1e-9c3a-802723dfbe94.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.23.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1e:7d:b6:51:b4:f7:ef:45:67:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=8641c699-068b-47e3-bed5-2c311e10c949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:d6:40:3e:ff:8c:e7:b3:a2:f9:b0:64:2e:
c6:36:f3:6b:3e:f5:4a:ca:9e:3f:12:aa:3b:41:93:
22:76:b4:69:76:28:19:0b:98:b3:a3:a7:0b:7f:32:
70:9c:46:76:5b:56:b8:5c:c3:d6:25:cb:04:7c:d5:
83:70:a0:8b:a1:78:5a:44:a7:50:8a:fa:21:8d:b6:
c4:f2:cb:3b:be:3a:22:e6:4f:96:d0:5a:5f:d5:df:
81:28:0b:46:da:ec:41:93:84:ce:78:40:4a:c6:1a:
70:9b:6e:d5:c5:01:89:89:a1:de:10:ab:6b:60:e8:
dc:fb:66:e4:97:fc:3f:fa:bf:31:87:1d:52:c0:d8:
d9:8f:c2:3c:95:55:0c:45:cf:c4:ff:46:86:0d:c2:
f9:1f:85:82:f5:7f:33:b2:a2:c6:b3:e7:c4:dc:ac:
6f:f3:60:2c:92:e0:9c:35:6c:59:57:34:1d:a7:1e:
0f:2b:50:57:58:1f:84:41:93:f8:03:e2:22:3e:ec:
1d:ae:31:46:7e:a3:e5:f8:be:c4:b8:92:a5:29:db:
c2:d3:28:63:71:e8:9b:ce:36:79:4d:ae:c9:a6:74:
aa:f5:23:02:6c:f6:ff:8e:5e:16:30:5c:9e:ba:2a:
3f:5d:6a:71:a5:b0:75:d7:ec:bc:f6:75:ca:24:e0:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:F1:E5:4E:76:45:DB:62:CD:71:98:10:1D:67:FF:F8:45:0B:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aabadf-b651-3d1e-9c3a-802723dfbe94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:3d:d5:ee:45:49:ba:59:0e:4b:8a:1f:55:46:d6:51:68:4d:
eb:22:3a:f5:03:30:05:17:be:d3:4a:e3:af:3c:12:de:b1:89:
73:8b:0b:0d:c4:b1:a4:c2:c0:d5:7e:7b:98:f5:d5:84:cd:86:
e6:a2:e3:46:5f:a9:c7:00:4d:cc:76:ad:56:3d:b6:e5:77:42:
6b:44:29:99:49:8d:c8:76:08:87:73:d3:43:47:9c:dc:25:2e:
d4:81:a3:ef:4a:48:4c:cd:f3:29:28:40:f8:a3:ce:a7:3b:38:
a2:84:fc:d6:75:cc:69:6c:25:7f:e0:f6:62:ca:f4:ab:db:d8:
3d:72:24:c7:92:1d:51:67:7e:a0:7d:02:d1:83:ea:ed:42:42:
ec:5a:ce:47:f9:50:7e:ff:e6:32:39:f4:15:e0:8c:e0:dc:5f:
8e:97:68:0b:c8:31:cf:0a:12:c7:4b:bf:9b:e5:17:5f:79:52:
e2:cd:70:bb:f1:6a:18:e0:44:2e:7c:34:73:0c:1c:92:08:b5:
34:4e:59:42:9b:5d:88:4f:72:f5:16:d6:09:83:cb:32:f9:b9:
ca:ee:71:09:05:a1:65:e2:e2:55:60:07:66:d0:b0:74:19:64:
01:ac:e7:ad:0f:62:e1:52:bd:34:ac:7c:a1:7a:27:21:f3:08:
94:5c:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:45 2025 by rpki-client