Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb23197d-a187-3a6f-94be-78e06eae76c6.roa
File: fb23197d-a187-3a6f-94be-78e06eae76c6.roa (raw, json)
Hash identifier: AwI6DJAvAlJ3lb+kVDWrku06rcWFe+tk8+mt1UFirmQ=
Subject key identifier: CD:B4:75:59:55:E1:F4:CE:4A:EC:F7:1D:08:E5:1B:5A:69:DE:1A:7E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661DEBEDE672F42251FCE480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb23197d-a187-3a6f-94be-78e06eae76c6.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.21.40.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:eb:ed:e6:72:f4:22:51:fc:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=57b5ce7a-b7c0-402c-be18-249e7cd4b3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:d0:97:53:85:e1:39:5a:91:1a:44:19:c4:
9c:14:17:29:12:53:b6:97:3f:3c:7f:51:70:83:84:
7c:26:29:a8:5a:d7:b0:a5:14:10:cb:19:81:f6:bd:
a7:47:bb:9c:93:75:8a:b7:68:db:05:98:67:91:48:
2d:94:24:76:53:2b:d5:c9:53:93:72:c4:83:76:22:
75:ea:3d:db:8c:76:d5:57:0d:16:c7:e1:e0:35:ea:
08:de:d3:d8:0c:6d:dd:46:a4:76:d4:78:56:49:48:
20:22:ed:d1:0e:49:1a:53:21:66:da:f4:b7:d6:41:
2e:b8:d7:f0:80:f4:7f:10:7a:fa:53:c3:d7:16:2a:
31:b8:c8:ea:f2:e5:a2:c6:c2:8f:6a:99:25:e5:74:
cc:02:71:92:ea:d7:ab:37:11:b1:96:0a:7c:9c:e8:
1d:02:3b:15:6a:05:dd:00:99:56:71:74:93:18:69:
3f:77:66:32:0a:c2:16:f9:69:5c:5a:12:0f:3a:51:
8e:b2:bf:06:94:35:a0:10:ee:ef:b5:1a:32:13:79:
ed:70:a2:fa:79:32:a9:c3:00:96:86:91:9c:ad:85:
c7:e9:a0:e2:28:fb:06:f7:b3:27:d3:a2:78:64:ce:
9a:b2:44:fa:00:30:ad:f3:61:f3:dc:48:f7:8f:ed:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:75:59:55:E1:F4:CE:4A:EC:F7:1D:08:E5:1B:5A:69:DE:1A:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb23197d-a187-3a6f-94be-78e06eae76c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:f9:f9:2f:61:8c:96:bb:f7:a8:06:10:7a:08:93:9b:ab:10:
86:18:25:db:5d:a1:4e:ac:d4:62:88:ff:f2:ee:66:f2:24:2d:
9e:ca:ef:5a:7e:ad:60:2f:3c:ec:71:e6:e0:8d:c3:58:dd:64:
04:71:35:c6:cf:7e:e4:cb:1b:cc:cf:98:c8:06:57:9a:c3:7d:
be:ac:4d:6a:32:d7:05:83:05:2b:94:59:e9:53:29:91:16:d5:
31:17:80:fd:98:38:ad:1d:1c:35:7c:49:d5:30:1c:b7:84:12:
01:eb:2d:03:5a:fd:f7:32:72:06:48:cc:de:d5:81:3d:20:5a:
f7:13:90:d5:76:66:6a:51:72:35:a7:ce:a1:a4:f4:6f:67:eb:
a6:e2:de:b8:2e:55:89:cc:6a:32:95:0c:a7:88:eb:fa:5c:2c:
0e:56:77:cd:81:bc:ed:4c:37:6d:c7:42:f5:09:19:eb:64:2b:
89:2b:5b:67:f3:fb:29:ef:17:84:f5:66:82:ab:54:89:a0:c5:
91:d7:48:7f:9f:99:e8:bc:e1:17:9a:21:62:79:fd:00:30:b8:
1e:08:29:17:d8:c8:b3:58:fa:d8:87:75:b2:02:9d:62:69:ba:
7c:b8:33:71:f9:c0:c5:1a:80:c1:8c:bb:61:d6:12:35:a3:bc:
e8:b1:63:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHevt5nL0IlH85IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTdiNWNlN2EtYjdjMC00MDJjLWJlMTgtMjQ5ZTdjZDRiM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyebQl1OF4TlakRpEGcScFBcpElO2lz88f1Fw
g4R8JimoWtewpRQQyxmB9r2nR7uck3WKt2jbBZhnkUgtlCR2UyvVyVOTcsSDdiJ1
6j3bjHbVVw0Wx+HgNeoI3tPYDG3dRqR21HhWSUggIu3RDkkaUyFm2vS31kEuuNfw
gPR/EHr6U8PXFioxuMjq8uWixsKPapkl5XTMAnGS6terNxGxlgp8nOgdAjsVagXd
AJlWcXSTGGk/d2YyCsIW+WlcWhIPOlGOsr8GlDWgEO7vtRoyE3ntcKL6eTKpwwCW
hpGcrYXH6aDiKPsG97Mn06J4ZM6askT6ADCt82Hz3Ej3j+3mEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM20dVlV4fTOSuz3HQjlG1pp3hp+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmIyMzE5N2QtYTE4Ny0z
YTZmLTk0YmUtNzhlMDZlYWU3NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJD5+S9hjJa796gGEHoIk5urEIYYJdtdoU6s1GKI//LuZvIkLZ7K71p+
rWAvPOxx5uCNw1jdZARxNcbPfuTLG8zPmMgGV5rDfb6sTWoy1wWDBSuUWelTKZEW
1TEXgP2YOK0dHDV8SdUwHLeEEgHrLQNa/fcycgZIzN7VgT0gWvcTkNV2ZmpRcjWn
zqGk9G9n66bi3rguVYnMajKVDKeI6/pcLA5Wd82BvO1MN23HQvUJGetkK4krW2fz
+ynvF4T1ZoKrVImgxZHXSH+fmei84ReaIWJ5/QAwuB4IKRfYyLNY+tiHdbICnWJp
uny4M3H5wMUagMGMu2HWEjWjvOixY+Q=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:27 2025 by rpki-client