Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abcb7ec0-5afa-34c4-a76f-3af78f6fb912.roa
File: abcb7ec0-5afa-34c4-a76f-3af78f6fb912.roa (raw, json)
Hash identifier: W3mwl1aJTjYWKxzqtziwtN83MrzbQ/ftTDCD1MkN03w=
Subject key identifier: 63:4F:EC:9E:FD:D5:B5:F1:32:18:20:7B:8F:23:19:94:AD:32:4E:8E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584A1F90542329CF56CF3651D480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abcb7ec0-5afa-34c4-a76f-3af78f6fb912.roa
Signing time: Sun 08 Jun 2025 13:01:01 +0000
ROA not before: Sun 08 Jun 2025 13:01:01 +0000
ROA not after: Sat 06 Sep 2025 13:01:01 +0000
asID: 396559
IP address blocks: 2001:501:8a29::30/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 10 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:1f:90:54:23:29:cf:56:cf:36:51:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 8 13:01:01 2025 GMT
Not After : Sep 6 13:01:01 2025 GMT
Subject: CN=407dd28b-cedf-41c4-9e74-43bc29c01364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:be:fc:1f:4d:e3:40:3b:7e:3c:3a:8b:b9:
3f:8f:c3:7d:45:70:de:ff:f4:4c:02:d0:5f:2c:53:
8c:a5:a3:d5:a2:81:2a:fc:e1:90:1b:d4:8c:32:5a:
6e:63:07:cd:36:8d:ac:20:c8:bd:0a:37:dc:2b:61:
21:73:57:1b:f7:fc:9c:63:36:d0:75:e2:7f:3b:af:
37:c0:1b:57:fe:23:b9:f4:ab:e6:df:8f:8c:6a:c9:
ee:cf:a1:49:5b:58:c6:e5:ab:59:17:2d:74:d4:25:
84:64:1f:6c:a1:82:84:ae:26:c0:72:43:3d:f5:f3:
0e:ff:32:11:14:e5:42:35:ee:f1:ce:fb:cc:fc:d4:
c4:65:8a:53:02:09:e5:5c:52:0b:a3:0a:52:4e:eb:
14:1b:85:45:6e:76:65:c6:b9:46:36:a4:75:75:4b:
b2:bd:2f:63:a5:98:b9:fe:6b:23:e7:f9:ab:16:df:
3b:d7:cb:f1:ee:8c:02:1b:81:b2:63:25:e4:87:bc:
62:2a:ba:4e:a3:39:fc:e6:93:46:71:27:ad:97:21:
41:51:d9:bb:1a:6d:b7:60:7d:06:1c:46:db:53:43:
65:9a:33:78:b6:7c:4c:69:25:4a:ed:5a:23:e5:20:
f3:c6:ba:fd:d0:38:d4:0b:d0:df:ae:29:88:11:3b:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4F:EC:9E:FD:D5:B5:F1:32:18:20:7B:8F:23:19:94:AD:32:4E:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abcb7ec0-5afa-34c4-a76f-3af78f6fb912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:501:8a29:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:12:bb:57:4f:20:d3:c3:48:4e:d9:09:0f:a5:cd:2b:45:65:
4c:26:1d:a4:15:fc:2d:99:ba:bd:30:64:5e:c8:79:2f:bb:5b:
da:11:0c:a3:ff:21:2f:80:3c:d9:02:7b:6c:f4:3b:41:c4:4b:
2a:cd:79:e7:d6:ad:f4:4c:46:e7:01:f8:ce:9f:48:f7:77:d6:
11:2f:68:e1:b7:b5:99:9e:e7:e0:8a:44:fe:1c:3c:1e:09:59:
67:69:74:e9:9e:43:00:1c:66:07:83:f1:e4:c2:5e:62:a1:2f:
7b:76:ea:44:5d:0e:0e:a6:d7:93:ce:c5:8d:5f:0b:ad:c9:84:
98:23:ca:d5:9a:7e:67:b8:a2:ca:9a:02:92:6e:49:3d:49:c0:
a8:f0:df:80:67:e2:6b:20:af:28:c3:55:6e:11:dd:5b:e8:7d:
17:cd:0c:62:e1:56:3a:92:f2:b4:65:20:a5:1d:0d:47:e0:96:
23:cf:5f:2e:e4:fc:e0:17:43:78:86:33:e0:21:a6:48:03:a7:
d9:e2:ba:8a:cc:65:19:0e:e6:8f:27:6f:cf:24:7d:36:d6:33:
3f:03:25:f7:b5:69:5e:9c:d1:93:29:65:fe:ae:da:8d:70:40:
0d:f7:42:a0:1e:3b:3e:d5:d6:9a:dc:f4:00:55:01:d8:85:04:
89:cb:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:56 2025 by rpki-client