Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56d35a9-0849-30a3-a1d7-f111857dab80.roa
File: f56d35a9-0849-30a3-a1d7-f111857dab80.roa (raw, json)
Hash identifier: L85ystmwJ6M+hLdIA42jB49PbbA+zfmj/9UQm5qu5gY=
Subject key identifier: 11:EE:9B:D3:76:DD:4B:E9:9D:19:3E:F6:E1:E7:41:8C:92:3E:EB:5C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D662172D9FAFD73254DAAA480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56d35a9-0849-30a3-a1d7-f111857dab80.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 207.155.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:21:72:d9:fa:fd:73:25:4d:aa:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=a6bd52fb-5aa2-44cf-8f0a-06fe89afb703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:65:23:f1:cf:33:14:10:50:31:3c:43:7c:
17:6a:6b:77:8c:3e:18:41:5d:2b:28:f5:67:69:ac:
bb:74:65:b0:cd:ba:c5:77:33:0b:0a:45:83:5d:ad:
ac:b2:a4:d9:72:35:b8:09:5f:2f:48:95:7e:31:86:
f1:80:62:8d:6b:91:e7:69:b0:28:55:1b:c5:3c:43:
4c:8e:2c:ed:04:f2:3e:23:df:03:27:a1:15:fe:b2:
b2:6a:83:6b:2e:01:0d:b2:0c:95:16:7b:20:f6:a3:
34:5d:f6:89:31:dc:e2:32:e5:f3:09:9f:73:1b:56:
65:9d:a5:c9:42:f3:8b:59:fb:f8:4f:dc:e3:2e:dd:
63:b4:f4:8e:94:92:c6:6f:78:1c:52:b7:2b:ab:20:
2b:94:42:0c:c2:37:12:0d:40:2e:67:53:58:c5:26:
5d:df:1b:d0:03:cc:ca:7a:85:bc:00:23:dd:e4:21:
33:84:52:62:5f:a4:96:28:0f:f9:2e:ca:71:95:74:
ae:1d:f7:72:89:c6:22:90:a3:f7:f5:f7:73:42:5e:
0c:d3:90:9e:25:37:82:a7:c3:fc:b5:b2:9d:3f:cb:
0d:c5:3f:64:83:e1:79:17:a2:f5:c6:35:dc:04:3a:
81:3f:4b:f4:03:ec:a8:87:eb:25:43:c0:ce:f2:20:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:9B:D3:76:DD:4B:E9:9D:19:3E:F6:E1:E7:41:8C:92:3E:EB:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56d35a9-0849-30a3-a1d7-f111857dab80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.155.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:24:d6:db:49:2d:ea:bd:e4:0c:48:9e:1a:0c:59:71:30:8c:
bb:e7:71:54:f8:a7:42:5d:c1:a3:ae:36:5d:5b:1d:55:53:18:
21:7b:72:49:b7:d9:45:7a:4c:e1:aa:75:b5:90:a7:fe:29:32:
ce:63:07:48:5e:a3:6d:38:4c:0b:fc:96:1f:1b:b9:68:76:ee:
32:d4:65:c3:cc:10:a9:0f:1b:c0:41:05:3e:0b:b7:04:fa:e5:
29:09:e2:64:da:b1:78:6e:52:a0:7a:08:2e:41:81:19:be:d7:
9c:90:e2:75:7f:50:00:cd:9d:8f:a9:f1:97:da:15:52:3e:c5:
bf:6c:08:fc:00:20:72:c9:37:db:80:89:df:5b:31:fe:d0:ca:
2a:67:e8:a0:fd:d3:11:6b:a2:57:b3:88:7f:b9:00:7a:d1:0c:
c9:cc:40:cd:d7:26:e2:d8:6d:25:a4:0b:0b:70:97:34:f4:df:
1d:9b:24:e2:fc:37:f6:ff:ab:c5:f8:3c:22:31:7a:19:59:ee:
68:5f:ed:c5:b2:ea:77:b4:d9:b8:dd:6e:5d:6e:10:8e:95:7e:
ca:0d:f2:81:f2:39:38:42:9e:4f:58:fd:9b:df:06:a8:91:f6:
36:5f:ae:44:d9:39:05:85:36:dd:03:e8:0c:c9:29:f9:bc:8a:
2e:f9:0b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:22:36 2025 by rpki-client