Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f582c54e-da4b-3046-a7f6-c50b302dd3db.roa
File: f582c54e-da4b-3046-a7f6-c50b302dd3db.roa (raw, json)
Hash identifier: 944ZfYjJUnVqzBpW5dkjQKcqNFXBfP3MJh88KVdPjWU=
Subject key identifier: F3:AD:76:96:EB:1E:3F:78:F1:49:CA:44:1C:64:7A:59:18:FC:8A:D9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB4412AACEBB89B7FB22AD800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f582c54e-da4b-3046-a7f6-c50b302dd3db.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.20.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:41:2a:ac:eb:b8:9b:7f:b2:2a:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=6a4e394d-feff-4412-9164-b559e82d2ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:a3:cd:d8:cf:1d:17:34:74:5f:a2:ee:b9:
d8:c4:c8:72:1f:53:94:8a:aa:2b:40:4a:3b:c7:e7:
3b:3d:92:a9:e9:f6:2b:39:af:ad:f8:81:3d:86:72:
40:ad:04:8e:3a:db:34:83:44:74:41:a4:38:dd:df:
a5:aa:88:4f:04:d0:cd:11:35:0c:a5:35:0a:ec:24:
79:a5:8b:33:b9:b3:63:1e:17:8b:c5:02:27:68:2a:
c3:54:db:06:a3:04:95:cd:62:12:8f:9a:e7:2d:17:
eb:c5:e3:11:d8:5c:e1:ec:e4:53:f8:c3:32:6b:3c:
7a:ea:d4:55:91:37:c5:9d:32:43:e4:94:ff:a2:57:
ce:84:e3:51:e9:4c:99:26:96:b7:8e:41:28:cd:c7:
3f:b6:77:e8:23:83:8c:6d:a3:00:64:6f:bd:48:25:
c5:2a:84:4c:4d:3a:07:00:b3:c2:05:b8:08:c2:73:
38:8e:d1:91:36:14:64:1c:1e:ef:b5:e4:2a:33:16:
ef:3c:77:f7:2f:55:28:e8:8a:4e:31:c2:d1:ff:f6:
41:85:a2:15:ae:be:0c:11:d1:96:c2:41:0d:50:b0:
9d:8d:d5:31:da:53:c2:b4:82:da:60:be:47:18:8f:
54:dd:b8:5c:1e:36:2a:ce:9c:67:c0:4b:aa:a7:5d:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:76:96:EB:1E:3F:78:F1:49:CA:44:1C:64:7A:59:18:FC:8A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f582c54e-da4b-3046-a7f6-c50b302dd3db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:7c:d7:61:98:12:d5:ff:bc:75:dd:00:49:6a:5c:21:0f:b7:
4f:a1:be:14:c9:48:94:39:a1:7d:18:fc:78:b7:67:32:8a:67:
3c:d4:59:f5:a0:4e:d8:92:79:2a:a1:a0:a6:49:f2:c7:71:6d:
7a:c0:98:98:e6:4d:bf:48:80:4b:55:49:92:f2:f3:ae:79:6a:
81:a7:3b:cd:0f:68:6c:03:d0:c6:58:61:bf:87:eb:9a:52:0d:
76:07:bd:a9:27:58:30:4a:0c:04:92:de:ab:0b:93:9d:e3:a9:
5b:f7:9d:57:39:27:5c:bc:df:0a:df:88:b5:2f:b0:77:cf:71:
80:f9:96:e1:9f:c7:9d:b5:2d:37:a1:7a:b3:51:14:3c:ed:ae:
bd:8d:96:eb:2f:3d:21:35:a2:6d:f4:f7:ff:e0:bb:d3:88:a0:
c4:21:b7:0d:6e:d8:b7:07:ae:c2:ca:0e:28:65:ea:78:a6:fc:
66:e3:69:76:6c:5a:81:4c:b5:e7:b1:06:8e:f1:c5:ef:2e:ea:
17:93:79:cb:32:ac:e3:98:6a:f7:b2:e8:53:d3:25:93:96:22:
43:e2:54:3d:cb:a9:6b:8d:b9:8a:9d:34:df:f7:43:69:84:77:
ed:66:d7:d1:4d:eb:78:72:ee:ea:9b:1a:d7:d1:be:e8:d6:6c:
00:78:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:29 2025 by rpki-client