Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef702d5a-7859-33c8-98c8-fa3ab833b6ac.roa
File: ef702d5a-7859-33c8-98c8-fa3ab833b6ac.roa (raw, json)
Hash identifier: smWfWGzMKzRziyUE5941huwdMFj8ivPpzE8UKHaTv0Y=
Subject key identifier: C3:01:16:1C:9A:02:94:E9:A9:4B:75:5D:88:E4:CB:39:3A:4B:C5:74
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB5B85EE135077C184213C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef702d5a-7859-33c8-98c8-fa3ab833b6ac.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 14822
IP address blocks: 40.129.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 06:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b5:b8:5e:e1:35:07:7c:18:42:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=4d5e4348-36dc-4922-8926-bbdb853c5eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:f0:6c:05:00:ee:df:33:a4:a5:42:8e:7b:
2f:8a:88:78:f4:8b:f5:70:b5:b4:a3:76:a6:7c:d6:
85:42:5f:51:60:87:05:86:57:1d:1f:20:3b:9a:88:
6a:a6:0e:34:8f:2a:c2:fc:01:ca:93:3a:c2:62:7b:
6c:7c:99:07:7e:22:38:44:cc:e6:c0:e7:45:7d:32:
1e:1b:c4:6b:8e:5b:de:90:ab:e3:e3:97:70:98:40:
70:4a:29:26:b6:ef:3f:98:db:ee:fa:26:d5:28:bc:
14:e2:22:34:56:c0:7c:c6:c0:5c:bf:07:cf:25:40:
ff:45:ba:80:2d:72:d3:32:b3:b6:71:82:93:9c:50:
9c:2e:42:52:25:88:10:65:78:7b:b1:55:8f:45:a0:
ce:1c:c3:77:23:52:10:a9:91:c4:4a:7b:f0:be:26:
52:17:59:34:46:9a:ee:37:73:01:96:6a:4a:46:31:
a0:50:e8:a5:c8:9e:40:2f:a4:5b:d4:e1:06:16:20:
42:d9:f6:7d:99:ca:6f:2c:86:c4:68:11:09:76:71:
93:45:d7:9c:ac:93:a8:32:6d:06:9e:7f:51:0f:3a:
b8:73:ae:40:cc:57:9d:39:bc:cb:ed:60:e0:57:04:
84:c9:cd:f6:dd:60:f5:d2:6b:09:54:b1:c9:16:0e:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:01:16:1C:9A:02:94:E9:A9:4B:75:5D:88:E4:CB:39:3A:4B:C5:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef702d5a-7859-33c8-98c8-fa3ab833b6ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.129.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:bd:d6:49:ea:30:44:ac:96:dc:1e:aa:a7:36:66:3e:6f:28:
c9:7a:8e:cb:a0:6e:01:4d:2d:6a:5c:b8:c1:3e:0d:92:6a:1e:
fd:05:f4:ac:00:5d:d4:13:55:a9:7f:1e:30:67:19:01:d5:9d:
cf:c5:b4:50:81:13:b9:8e:fb:4e:31:c4:8e:a5:26:b5:a1:3d:
e6:0a:d2:e8:13:2f:4a:a1:2e:4c:0b:7c:3f:06:81:22:d1:c9:
99:66:7b:9f:7e:e3:ec:1a:c6:f9:db:db:8f:88:47:6c:00:80:
84:e5:76:82:55:e0:8b:80:34:1e:52:3c:e7:10:39:90:32:c0:
c7:98:91:6a:82:89:50:35:43:e8:16:25:a9:d5:99:ae:b4:51:
a4:f2:f8:f7:67:f4:b0:8a:7d:a0:6d:8b:12:aa:27:cc:24:eb:
dd:4f:e1:54:1c:58:dd:bf:d9:cc:82:a2:24:75:fd:7d:00:b6:
e0:6b:33:6f:df:6a:22:15:71:c8:46:8f:09:ec:69:f2:8f:0c:
47:5e:21:67:2e:7e:21:30:c6:96:00:ae:e3:af:fa:ad:f5:98:
77:e0:cd:14:50:77:26:68:55:50:d2:61:23:9a:32:03:d6:41:
76:13:45:8e:eb:c1:48:d1:a8:b6:69:ba:23:e6:d8:97:b4:6b:
f4:ba:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:05 2025 by rpki-client