Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21329b8a-dc09-3f84-963e-b3ebb9c07b48.roa
File: 21329b8a-dc09-3f84-963e-b3ebb9c07b48.roa (raw, json)
Hash identifier: Vtm/re+Ey6cdxheEvH5fAkenzgMVhMSPMt2JSGvSoQg=
Subject key identifier: F7:B1:C1:79:1B:16:DF:44:BE:AB:DE:6A:04:16:D5:DF:BC:18:0B:FE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858416F5CEA4779A873A85F3CC240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21329b8a-dc09-3f84-963e-b3ebb9c07b48.roa
Signing time: Sun 02 Apr 2023 12:00:00 +0000
ROA not before: Sun 02 Apr 2023 12:00:00 +0000
ROA not after: Sat 05 Jul 2025 04:00:00 +0000
asID: 36040
IP address blocks: 2001:4860:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:6f:5c:ea:47:79:a8:73:a8:5f:3c:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 2 12:00:00 2023 GMT
Not After : Jul 5 04:00:00 2025 GMT
Subject: CN=4f8dabfa-a150-443d-89b5-16be45adb642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:8c:74:41:b7:e9:0e:66:63:ec:b3:5b:5f:
19:41:70:83:0b:86:9b:c1:01:d2:ea:a6:ba:ed:f1:
4a:ed:44:9e:bd:a0:a2:c4:44:a5:15:69:7e:8d:82:
2a:fa:d1:af:1d:3f:12:15:46:b6:05:2a:ee:5d:c7:
73:66:40:eb:ab:d5:cd:be:76:d4:06:3e:31:9f:04:
b9:3e:8e:3e:97:6d:00:4f:04:34:3b:d2:18:b6:4b:
32:53:ea:0b:9e:58:cb:d9:2f:46:53:d9:ed:33:99:
32:7c:be:e7:34:33:1b:3c:b6:9f:c1:0f:a9:2b:87:
55:5b:06:58:ff:42:c8:c2:a3:3b:e9:0a:42:a7:9c:
77:a9:7b:4a:8b:b9:5e:34:aa:55:08:12:82:fc:34:
7e:b4:d2:18:1d:3b:14:c6:31:6c:2c:81:cf:00:b4:
e2:b9:21:e4:d0:f9:03:a5:f0:56:1d:c8:9f:37:27:
0e:8e:58:c6:29:fa:b1:de:e6:70:db:bd:50:60:27:
8b:d3:40:a5:76:35:89:44:b2:99:46:5e:07:69:10:
82:e8:4d:64:be:0d:6b:35:f5:de:1e:52:a6:5a:10:
6a:d9:da:78:7c:69:f2:55:43:3d:78:21:1b:8f:a5:
d1:b1:47:1d:2e:f3:08:c2:cd:2f:1e:e6:a4:f7:0c:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B1:C1:79:1B:16:DF:44:BE:AB:DE:6A:04:16:D5:DF:BC:18:0B:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21329b8a-dc09-3f84-963e-b3ebb9c07b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:bd:02:1d:ce:b4:39:a4:49:ae:6b:21:79:29:d4:5f:46:ff:
1d:03:a3:07:02:04:33:97:50:5a:a1:72:6c:e3:4b:49:8f:0a:
c3:88:eb:39:4c:8a:63:f7:45:0a:9f:53:7a:b4:9a:c7:0d:3b:
2f:f9:9d:d2:6f:e5:e7:35:c8:6b:36:24:8e:8f:3b:8e:9f:d3:
de:60:66:54:62:f5:17:66:f3:11:17:bf:5f:5d:a6:f9:17:71:
1b:ed:56:45:9a:45:c8:f4:84:4d:6a:8e:05:b6:ab:80:74:67:
55:5f:34:17:ea:d5:be:53:19:37:16:e9:dc:0d:96:bb:e5:d2:
d8:a7:b7:8e:02:f7:9b:f3:be:6d:07:22:fb:da:93:a4:e2:c9:
16:33:82:35:62:16:e6:ef:ea:7b:57:5b:8d:70:23:15:0d:41:
41:b1:29:30:a7:cb:a2:99:3c:59:0d:df:f4:ee:d8:e4:c5:17:
14:65:8b:a2:97:8c:85:f9:8f:5e:c4:2d:5c:99:49:9b:f7:0b:
27:ce:25:bb:0e:08:4d:86:63:4b:b6:7d:18:81:86:15:67:0e:
e9:59:87:27:12:82:69:32:b9:17:85:82:0c:07:5e:18:e1:06:
4a:f2:b8:e5:3f:af:a6:27:1e:96:a8:18:9b:b4:f4:7f:2b:46:
51:b3:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:05:00 2025 by rpki-client