Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe42d3ff-59f2-3fa8-b84b-22978d643a6a.roa
File: fe42d3ff-59f2-3fa8-b84b-22978d643a6a.roa (raw, json)
Hash identifier: jue/SSoIqIDdElg7XIwcNBafsw9neL5Ru4GHOEk12gY=
Subject key identifier: 4B:A9:83:5C:09:63:C6:1D:36:8D:EF:B8:6A:00:60:70:6D:E6:D0:89
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DDB5058082E124C41D9C80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe42d3ff-59f2-3fa8-b84b-22978d643a6a.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 2001:4860:482c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:b5:05:80:82:e1:24:c4:1d:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=c2dc62e0-5ad1-47f0-8b1b-9475d85c7c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:08:9d:5c:25:17:44:8f:e0:6f:51:28:01:
f6:11:c1:83:ce:33:c8:56:fb:3a:a5:68:e9:6a:35:
03:b8:5d:b1:53:9a:89:e5:c3:89:64:53:d5:73:bc:
e5:cb:2b:19:ed:64:89:87:46:9e:57:0a:d7:13:55:
7d:04:cc:62:bb:66:8f:13:be:69:8f:e1:35:60:bb:
12:8f:ef:da:68:19:64:bb:fc:aa:91:91:90:f0:d7:
49:db:98:69:9f:cd:12:d0:6f:be:35:22:96:2e:ed:
5d:47:11:f5:ce:94:8b:b4:f3:ab:8f:d6:ed:88:69:
35:f0:39:a7:d4:f1:21:9f:6d:d1:2f:f9:d1:b5:f3:
7b:b9:b3:ce:54:84:47:3a:76:d0:57:d7:60:dd:d1:
4e:cd:07:88:a3:76:3b:a4:5e:16:a2:1a:bf:83:b1:
c6:6a:d0:dd:4b:0c:90:c0:c8:1b:53:c8:7a:dd:c9:
fe:74:29:04:b2:80:50:d4:33:ea:f1:00:66:28:c0:
88:e5:81:38:9a:f4:b7:e4:c1:be:93:a2:61:95:79:
4e:22:09:67:9c:90:57:f5:63:3f:b8:c8:19:9e:97:
f1:4e:56:09:d9:c9:0a:b1:57:8f:ee:1b:61:5f:50:
ff:6b:82:14:43:57:78:20:c9:d0:d0:09:3e:85:10:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:83:5C:09:63:C6:1D:36:8D:EF:B8:6A:00:60:70:6D:E6:D0:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe42d3ff-59f2-3fa8-b84b-22978d643a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:482c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:ab:12:60:34:98:1a:ff:4b:dc:99:7b:93:01:db:69:a1:50:
8e:03:43:f3:99:71:26:e3:37:2a:6a:aa:de:f5:44:df:22:0c:
d5:f7:ca:28:d7:63:cc:d2:e3:8f:64:3e:14:57:bc:47:75:2d:
56:07:f6:62:71:03:f7:c8:d3:ea:fd:77:a3:bb:87:1b:76:28:
04:da:ac:a0:4a:0a:2a:19:db:01:2c:60:fe:f3:12:60:90:ee:
4f:19:fc:2a:0b:2b:d0:3a:69:d2:86:2b:77:25:f5:2d:ff:6a:
24:2b:dc:e1:d7:a2:13:2a:54:61:1f:c1:c5:55:bf:e8:f5:fc:
c2:a3:f5:70:ef:2c:32:01:d2:ea:83:c8:d9:19:ff:76:44:ab:
26:9f:95:f8:5a:a5:02:13:dd:17:75:9f:00:60:cb:20:22:c6:
1c:d9:0b:70:e8:d1:35:81:d6:0e:b6:a7:ef:b1:ac:d2:a5:f8:
6a:a3:62:ca:de:b4:c5:93:69:ec:f4:1f:9e:40:c7:ac:16:fe:
ec:c9:6e:a8:a7:7d:04:12:e5:ae:18:3c:9c:f2:a6:bb:e1:48:
cf:02:a6:aa:c3:07:2b:52:f5:68:ac:e1:4d:39:a3:68:0d:ce:
c4:f9:7d:a8:76:fd:3d:e7:7b:42:f3:22:e6:46:9f:d3:0f:fd:
9c:d5:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:02:51 2025 by rpki-client