Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37313a3a2f34382d3438203d3e203136393039.roa
File: 323630323a663738613a37313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KKW/iqEInLTgoksQjBZUVeLHn1ocuL6XCurbpVN7t4w=
Subject key identifier: 68:48:C3:04:55:7A:46:D3:63:85:BB:0A:29:D3:FD:F5:BC:54:90:4C
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 446EE504252F893D840688DAE40D02B8AA0FABD7
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37313a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:57:57 +0000
ROA not before: Thu 19 Dec 2024 14:52:57 +0000
ROA not after: Thu 18 Dec 2025 14:57:57 +0000
asID: 16909
IP address blocks: 2602:f78a:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6e:e5:04:25:2f:89:3d:84:06:88:da:e4:0d:02:b8:aa:0f:ab:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:52:57 2024 GMT
Not After : Dec 18 14:57:57 2025 GMT
Subject: CN=6848C304557A46D36385BB0A29D3FDF5BC54904C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:ba:f4:2b:3c:f2:3e:7e:bf:92:94:f2:a1:
ad:e8:67:e1:8e:e9:65:6e:4b:96:99:81:ed:ab:d1:
e7:52:28:5c:c5:a7:1e:7b:cb:bf:0b:d1:62:86:7a:
6f:b1:bb:c3:7e:8b:40:71:e1:a7:e1:44:ae:fa:7f:
8d:e5:c9:32:67:85:7f:a6:e6:a9:1c:76:38:32:e6:
ad:5f:ac:35:10:ec:0b:58:4e:fd:50:3a:09:93:88:
cc:0a:53:11:ee:2d:0f:8c:bb:aa:87:b8:32:42:09:
9f:59:e7:bf:f1:d0:02:5b:6d:ca:a6:ed:5f:d5:20:
84:51:2c:8c:75:a0:82:dd:f3:21:dd:0e:ce:58:77:
b9:6d:09:51:b3:a6:95:a9:da:03:6b:14:ca:06:74:
ed:fd:75:f4:8f:ec:8e:50:39:7b:35:20:40:b4:e0:
1d:23:14:b9:39:ce:30:df:2b:a4:fa:b7:de:c4:f8:
71:9c:af:a7:d2:dc:97:18:9b:99:83:45:ef:d2:87:
6b:c0:eb:63:05:44:c9:ed:0f:df:2a:ea:6a:aa:5b:
28:7d:e9:e8:0d:c6:c9:54:bc:f8:8e:dc:6b:ea:4e:
fc:3e:a2:73:56:6b:0b:eb:75:ca:88:7b:f6:39:8e:
b6:c4:be:99:04:7a:86:34:19:96:7d:fe:b7:23:21:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:48:C3:04:55:7A:46:D3:63:85:BB:0A:29:D3:FD:F5:BC:54:90:4C
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a37313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:71::/48
Signature Algorithm: sha256WithRSAEncryption
55:62:8f:c7:08:8d:f5:c7:aa:8b:bf:db:97:4d:a2:9b:d9:30:
7f:a9:ae:94:2a:ca:44:8a:c7:8b:4c:70:e0:9d:e8:08:4e:8c:
08:ec:d7:9b:e7:74:3c:32:56:c3:24:51:f1:dd:c9:7b:0e:80:
d4:a8:8f:67:ba:a4:24:7d:c8:59:6f:46:1e:47:46:73:9d:12:
71:44:ac:84:6c:9f:e8:d2:8d:f0:d6:15:e1:1e:09:0d:a5:7d:
30:d0:c8:e6:30:a7:1d:3f:7c:ef:93:00:ee:b2:cd:d7:76:d0:
7e:8a:da:fc:1c:38:59:1e:bb:0f:1f:eb:2d:19:fb:3f:c1:46:
be:52:6f:32:40:c6:83:4a:da:bc:16:5f:b2:bb:8d:ff:ff:d1:
d7:fb:d1:ef:15:a9:ea:bb:1e:af:55:fb:a0:15:a6:1f:0a:b3:
21:2b:6e:b1:96:c2:85:e0:e8:96:72:a1:0a:0e:6e:a6:69:10:
8c:c1:2b:4d:fc:27:49:d4:56:20:41:fb:02:5c:30:5b:e4:22:
df:f3:4b:7a:cf:b8:51:14:22:0f:e0:22:66:6d:d2:bf:f0:8c:
ea:d9:8f:2f:53:79:ac:c4:c3:ca:b1:1e:48:dd:dd:10:bb:10:
df:dc:fb:87:62:b7:7c:a5:5e:4d:f9:af:fe:a8:08:45:de:d8:
5a:fa:dd:b5
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIURG7lBCUviT2EBoja5A0CuKoPq9cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQ1MjU3WhcNMjUxMjE4MTQ1NzU3
WjAzMTEwLwYDVQQDEyg2ODQ4QzMwNDU1N0E0NkQzNjM4NUJCMEEyOUQzRkRGNUJD
NTQ5MDRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfG69Cs88j5+
v5KU8qGt6GfhjullbkuWmYHtq9HnUihcxacee8u/C9FihnpvsbvDfotAceGn4USu
+n+N5ckyZ4V/puapHHY4MuatX6w1EOwLWE79UDoJk4jMClMR7i0PjLuqh7gyQgmf
Wee/8dACW23Kpu1f1SCEUSyMdaCC3fMh3Q7OWHe5bQlRs6aVqdoDaxTKBnTt/XX0
j+yOUDl7NSBAtOAdIxS5Oc4w3yuk+rfexPhxnK+n0tyXGJuZg0Xv0odrwOtjBUTJ
7Q/fKupqqlsofenoDcbJVLz4jtxr6k78PqJzVmsL63XKiHv2OY62xL6ZBHqGNBmW
ff63IyFk0QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGhIwwRVekbTY4W7CinT/fW8
VJBMMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzczMTNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAHEwDQYJKoZI
hvcNAQELBQADggEBAFVij8cIjfXHqou/25dNopvZMH+prpQqykSKx4tMcOCd6AhO
jAjs15vndDwyVsMkUfHdyXsOgNSoj2e6pCR9yFlvRh5HRnOdEnFErIRsn+jSjfDW
FeEeCQ2lfTDQyOYwpx0/fO+TAO6yzdd20H6K2vwcOFkeuw8f6y0Z+z/BRr5SbzJA
xoNK2rwWX7K7jf//0df70e8Vqeq7Hq9V+6AVph8KsyErbrGWwoXg6JZyoQoObqZp
EIzBK038J0nUViBB+wJcMFvkIt/zS3rPuFEUIg/gImZt0r/wjOrZjy9TeazEw8qx
Hkjd3RC7EN/c+4dit3ylXk35r/6oCEXe2Fr63bU=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:55:57 2025 by rpki-client