Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ffab89b2-522a-3362-a078-d0723d2cec56.roa
File: ffab89b2-522a-3362-a078-d0723d2cec56.roa (raw, json)
Hash identifier: ivjC0bpo279LeR7PxXmDSbscv9WjP80qMAu088KgCe0=
Subject key identifier: 3D:CF:20:19:12:B9:4D:AE:D2:4F:69:A8:04:5C:45:55:B1:21:58:46
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F356F5F23352859528EDE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ffab89b2-522a-3362-a078-d0723d2cec56.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 66.19.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 05 Jan 2024 03:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:35:6f:5f:23:35:28:59:52:8e:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=76e3b8a1-63d7-48e3-95dc-e83071dc325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:4f:cc:c3:42:ca:70:8b:fb:e1:34:b5:f4:
92:0b:53:2c:bb:c1:52:0d:44:b7:7d:f2:c4:f0:57:
8e:38:5e:93:e1:dd:44:d9:13:9d:50:0b:cc:c2:0d:
aa:c0:ae:48:70:b8:91:3d:29:5d:81:a0:41:58:fc:
b2:ba:e1:0d:9c:33:c0:51:2b:66:71:c1:5a:6b:ac:
b3:a8:22:1e:f5:dc:87:fd:14:9f:67:ed:00:5d:12:
19:f9:7a:68:dd:63:bd:18:cd:46:83:42:3a:77:20:
ee:46:6e:96:9f:eb:c8:68:e7:f7:58:8b:1d:f3:f2:
43:36:4a:be:7c:43:a5:33:cc:e0:30:71:d1:f9:29:
37:36:ba:78:bb:0e:fa:10:f9:a4:79:3e:da:b0:bc:
fb:5f:a8:d6:cb:c3:6c:2f:ec:74:3a:9b:b7:11:05:
c8:cb:27:45:f1:68:f1:2f:f9:cc:3d:d7:c4:1b:1f:
31:77:9b:d9:29:9a:84:59:c4:59:68:5d:94:4a:1a:
d6:3a:90:33:a2:1f:98:7c:cc:11:e4:4f:87:d0:60:
75:6e:af:06:3c:5f:61:40:54:93:a4:62:e2:4a:2a:
90:4e:cb:e3:32:4e:84:c4:7c:c9:3d:ad:7f:fc:80:
47:84:ce:7c:d5:bd:7b:84:7b:8f:2b:6a:27:63:29:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:20:19:12:B9:4D:AE:D2:4F:69:A8:04:5C:45:55:B1:21:58:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ffab89b2-522a-3362-a078-d0723d2cec56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.19.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:f2:b3:d3:01:63:da:21:06:c8:6c:99:d4:4c:fa:50:2c:01:
6d:f0:f1:84:66:00:09:19:dd:a8:05:a9:81:61:5c:2a:41:c4:
dc:b0:69:f6:f8:11:fc:12:40:f6:f6:75:3a:87:5b:f3:f8:a6:
8e:85:a4:17:66:b4:c0:90:d0:10:29:04:6f:44:34:49:cc:fd:
89:ea:91:e6:a2:0f:c8:c8:b5:14:3a:d5:82:c6:42:3c:3c:d7:
d5:a3:dd:9f:65:50:b5:a1:de:af:cf:67:a8:c0:b1:cc:c6:21:
19:f5:d1:67:46:d7:59:a9:f9:6c:88:1f:02:8d:3a:20:ad:ad:
ae:08:33:7d:69:b9:89:a3:89:b9:b4:8a:65:a6:72:29:1c:b8:
01:2b:74:d2:77:da:1d:92:6f:06:e8:dc:cc:54:71:98:03:1e:
ff:90:58:66:63:4d:9a:9f:7f:87:5f:b6:23:9f:56:b5:50:61:
1e:c8:b8:83:42:c6:a5:69:25:ce:3c:e5:c6:59:d8:67:e4:35:
ba:3f:72:32:a7:72:bf:c2:b6:a6:a6:e0:bd:c6:3d:36:42:21:
cf:55:29:7c:82:ed:7a:d9:67:ee:66:d9:7d:54:a5:6e:ed:00:
f4:13:c0:f1:ff:2a:c8:f8:a4:cc:f4:54:dc:94:17:0c:7c:be:
68:8b:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:50 2025 by rpki-client