Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f37144f-0252-3707-b888-bc2d4dea0f97.roa
File: 7f37144f-0252-3707-b888-bc2d4dea0f97.roa (raw, json)
Hash identifier: 3iZUFF6X8ZTzal4LrC+XWaM9eD7K+0IkAwcYx6sRQ2Y=
Subject key identifier: BC:29:7F:A5:79:A4:4A:81:7C:BC:59:93:3F:2C:E5:AF:ED:9C:FF:A6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584A1F904E33A664C2AE3681EF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f37144f-0252-3707-b888-bc2d4dea0f97.roa
Signing time: Sun 08 Jun 2025 13:01:01 +0000
ROA not before: Sun 08 Jun 2025 13:01:01 +0000
ROA not after: Sat 06 Sep 2025 13:01:01 +0000
asID: 396557
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 10 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:1f:90:4e:33:a6:64:c2:ae:36:81:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 8 13:01:01 2025 GMT
Not After : Sep 6 13:01:01 2025 GMT
Subject: CN=fff72ad6-c5ca-4381-a61a-a2f659b659bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:d2:81:49:39:7d:2c:e6:d6:e4:8f:99:36:
94:dc:96:71:7f:0c:ea:73:90:40:40:56:99:3d:d1:
91:4e:20:8e:0c:be:2e:0d:8d:4d:8e:7d:83:e8:1d:
66:9f:54:68:12:cb:f5:d1:bc:30:36:d9:97:28:97:
3d:e4:72:f1:d0:e8:70:a3:b3:d1:9b:8f:c6:a5:bc:
39:80:92:ed:e1:22:40:f7:bf:0a:fd:49:36:98:07:
a1:06:9c:8d:93:f6:e6:6d:00:ca:30:38:6b:ab:f3:
0f:5a:7b:cc:e8:de:4f:7c:b4:54:01:3c:84:0e:ae:
b5:56:d5:8f:b8:20:07:cc:5a:ea:13:dd:36:5a:08:
41:d1:42:9a:e2:8a:21:d0:51:8c:88:b5:42:6b:76:
d6:cd:f0:f9:be:4b:ae:3d:23:40:5e:50:33:d7:55:
be:f1:2d:57:d8:17:fa:93:00:ec:4b:6b:be:4d:6e:
8d:d1:6f:5f:9f:29:70:99:f3:0c:bf:92:30:f7:e8:
d6:bb:d2:49:8a:11:af:36:66:82:0e:f8:7f:e7:07:
9f:97:c3:38:f2:6e:02:11:c7:3a:e4:11:6b:b1:a6:
9a:fc:76:cb:c5:e6:3b:13:86:1f:5e:89:b7:12:3a:
21:ef:1d:4a:c0:75:c9:0a:fa:bc:fb:07:01:6c:21:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:7F:A5:79:A4:4A:81:7C:BC:59:93:3F:2C:E5:AF:ED:9C:FF:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f37144f-0252-3707-b888-bc2d4dea0f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:63:56:82:9e:32:7a:d0:a0:8c:ab:e0:ed:06:48:be:be:10:
a7:3e:e2:f5:f8:30:c3:aa:68:55:53:bf:fc:a1:7f:c8:3f:fd:
84:93:79:48:af:46:0e:13:e5:ee:0b:a9:4a:9f:9c:82:7c:92:
b4:03:7f:ac:ac:2f:f3:46:ba:55:a3:e0:89:cb:47:0a:92:cf:
89:f3:fa:73:bb:16:b3:a7:fe:ac:6d:65:d6:94:65:34:32:f8:
d2:ed:7c:fc:0e:82:44:33:c2:e5:1d:ad:3c:d2:df:b3:82:19:
67:13:a1:a6:ab:ba:d6:0b:fc:44:84:9d:5c:82:d7:8a:ac:a1:
6d:74:d2:9a:7e:25:0c:05:a7:0c:1f:55:17:02:a6:b2:46:3b:
d9:39:33:92:58:ad:f9:0a:33:17:e2:6f:c9:46:80:cc:70:8b:
56:6a:49:c3:5b:51:26:17:62:20:5c:7b:ec:b1:6c:af:84:0a:
ab:5c:cd:41:c7:ba:4d:bd:2f:c2:ca:ce:03:e2:21:ad:fb:dc:
0e:74:a1:72:1a:65:ce:50:05:0c:d0:97:13:a6:3a:0a:e7:f5:
7d:9d:ae:cf:4f:1a:19:e2:4d:6b:f4:cb:11:43:9b:57:4c:25:
11:a7:e6:0e:c6:91:62:ec:69:e9:be:4e:ad:e9:05:59:c7:cf:
ea:7b:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:55:47 2025 by rpki-client