Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef7e97b0-86b9-38ec-8dd0-3dbde1b51b69.roa
File: ef7e97b0-86b9-38ec-8dd0-3dbde1b51b69.roa (raw, json)
Hash identifier: nLvGobAlCrI/c3JX5lPYJ3nSILAKMRw+Kurua0jvbFc=
Subject key identifier: A8:E5:8F:04:3F:9B:13:09:72:F1:66:52:8B:56:68:6F:1C:33:03:F5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB440E4AD3AA9453761F5CD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef7e97b0-86b9-38ec-8dd0-3dbde1b51b69.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.188.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:40:e4:ad:3a:a9:45:37:61:f5:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=6397df20-a45f-4252-afac-769e5c266ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:61:30:a4:59:3b:00:c3:8d:f4:33:77:28:0c:
ec:6a:37:b9:59:55:72:e0:31:c9:ff:04:f8:fd:c9:
58:dd:21:56:ae:90:b1:e3:98:a8:ff:0d:33:88:da:
6d:f8:ca:8b:ca:eb:61:48:07:fe:2c:2d:ab:5f:c9:
10:1a:cb:40:af:56:a9:d7:d3:d9:75:06:8b:78:25:
6d:aa:ef:8b:ff:89:0d:00:f8:dc:68:98:1a:53:71:
9f:16:64:c0:c0:82:30:5c:6d:94:ec:60:ec:6e:83:
4e:5f:89:1f:33:7a:49:e4:98:17:49:7a:46:ea:25:
2a:34:71:bb:ab:a0:2f:c7:e2:b4:a8:87:6f:57:d1:
56:64:4b:11:74:8b:5d:08:d4:29:64:e4:25:5a:ae:
30:7f:65:88:70:dd:0b:71:08:02:1d:8a:60:dc:da:
15:49:5e:d5:4d:6b:fc:ac:69:8d:d0:55:46:fa:4c:
99:bb:a1:d3:0d:ae:b4:74:57:70:96:b5:fe:12:e7:
b2:f5:09:6f:bf:2a:7c:99:6b:97:50:4f:92:32:82:
00:6c:8c:f2:0b:ee:3f:83:db:14:27:36:bd:9c:87:
3b:d8:46:2d:16:41:71:d5:21:23:a5:40:af:c4:15:
9a:df:53:bd:37:49:bc:88:37:d6:c3:08:3b:73:57:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E5:8F:04:3F:9B:13:09:72:F1:66:52:8B:56:68:6F:1C:33:03:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef7e97b0-86b9-38ec-8dd0-3dbde1b51b69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:0b:c8:8b:a6:49:ca:53:b9:db:dd:dd:ba:56:23:28:dd:95:
33:ec:6c:cd:87:4a:bb:e3:60:78:3b:32:1a:1f:7b:78:d0:ca:
4f:0b:b9:60:89:38:bf:5a:85:4c:7f:95:e5:f1:3a:d9:71:a6:
f5:56:15:f5:23:65:64:52:2c:a0:73:ca:c5:d0:19:1b:00:cc:
65:dc:22:da:c6:ac:11:84:94:ed:be:ea:ad:87:4b:3b:2e:32:
7b:36:b5:a5:b2:ef:df:95:94:7d:86:2c:6d:79:17:b1:57:8e:
3f:1e:c5:eb:0b:51:4e:41:e4:5e:e6:13:ec:0c:37:e6:f5:3f:
fd:92:4e:ec:22:30:d9:35:fe:89:a6:05:e4:5b:21:20:00:20:
0d:7b:7f:4e:00:bf:e6:a3:74:7e:80:81:16:f7:fc:93:b8:fe:
dd:7f:71:93:d3:7d:cf:73:8d:be:61:d4:30:0a:0d:28:34:f2:
2d:ff:20:a1:08:4b:34:9e:24:43:cd:fc:c1:4c:37:29:3e:a3:
05:10:e5:f5:c0:5c:9b:fd:65:81:28:42:b2:27:a2:8c:c4:a6:
23:f9:48:ab:b8:74:71:03:17:74:af:2c:43:af:b2:2d:81:0c:
63:9c:d1:b5:8f:05:d8:3d:df:e6:78:dc:00:42:b9:d7:ed:2c:
65:5f:b0:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD20QOStOqlFN2H1zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDQyNTEyMDAwMFoXDTI4MDQxODA0MDAwMFowLzEtMCsGA1UEAxMk
NjM5N2RmMjAtYTQ1Zi00MjUyLWFmYWMtNzY5ZTVjMjY2ZWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWEwpFk7AMON9DN3KAzsaje5WVVy4DHJ/wT4
/clY3SFWrpCx45io/w0ziNpt+MqLyuthSAf+LC2rX8kQGstAr1ap19PZdQaLeCVt
qu+L/4kNAPjcaJgaU3GfFmTAwIIwXG2U7GDsboNOX4kfM3pJ5JgXSXpG6iUqNHG7
q6Avx+K0qIdvV9FWZEsRdItdCNQpZOQlWq4wf2WIcN0LcQgCHYpg3NoVSV7VTWv8
rGmN0FVG+kyZu6HTDa60dFdwlrX+Euey9Qlvvyp8mWuXUE+SMoIAbIzyC+4/g9sU
Jza9nIc72EYtFkFx1SEjpUCvxBWa31O9N0m8iDfWwwg7c1fWcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjljwQ/mxMJcvFmUotWaG8cMwP1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWY3ZTk3YjAtODZiOS0z
OGVjLThkZDAtM2RiZGUxYjUxYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbzUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJELyIumScpTudvd3bpWIyjdlTPsbM2HSrvjYHg7Mhofe3jQyk8LuWCJ
OL9ahUx/leXxOtlxpvVWFfUjZWRSLKBzysXQGRsAzGXcItrGrBGElO2+6q2HSzsu
Mns2taWy79+VlH2GLG15F7FXjj8exesLUU5B5F7mE+wMN+b1P/2STuwiMNk1/omm
BeRbISAAIA17f04Av+ajdH6AgRb3/JO4/t1/cZPTfc9zjb5h1DAKDSg08i3/IKEI
SzSeJEPN/MFMNyk+owUQ5fXAXJv9ZYEoQrInoozEpiP5SKu4dHEDF3SvLEOvsi2B
DGOc0bWPBdg93+Z43ABCudftLGVfsEE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:57 2025 by rpki-client