Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/18223b1e-48fd-39b5-b848-2ef584eef428.roa
File: 18223b1e-48fd-39b5-b848-2ef584eef428.roa (raw, json)
Hash identifier: M7K0bvpZZIcmwJKMz3AsA8A+czGWG4vtxU9kWtARYXs=
Subject key identifier: 19:55:16:3D:66:3D:88:65:98:3B:81:C8:EB:96:E6:90:F6:27:B2:68
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F432858489075F352D8C7ED5BC1854E80
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/18223b1e-48fd-39b5-b848-2ef584eef428.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 19551
IP address blocks: 2620:4e:a000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Mar 2025 18:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f3:52:d8:c7:ed:5b:c1:85:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=6a92f8ca-683f-48e9-9eed-52d9442a65a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:bb:e2:df:c2:b8:fe:e8:20:bc:23:21:f5:
5d:14:8d:6f:3f:14:d1:af:53:fc:95:44:d4:2c:f9:
f5:97:14:b9:d2:6c:0d:47:29:b8:88:ff:06:7e:dd:
dc:28:ba:b5:f2:f0:34:46:72:da:af:c9:0e:3a:3a:
5a:3a:b3:f0:70:a3:47:77:54:60:6c:98:38:48:61:
1f:92:dc:e7:c7:70:dd:98:1e:7e:83:28:63:d3:87:
75:da:00:3e:dc:f6:06:3d:80:02:da:32:57:bd:ac:
a1:0a:4c:17:2d:db:4c:48:81:88:33:5d:17:8c:76:
e1:fe:9f:b9:43:42:6b:36:50:50:e2:b9:12:84:a0:
c9:6b:b4:08:ad:97:ff:31:83:9b:b8:21:cc:cd:dd:
ab:4c:dc:7a:05:bb:0e:c7:54:fb:60:aa:09:5b:28:
d1:5b:86:93:2b:70:71:4c:46:59:26:a5:d3:9e:71:
f1:6e:c9:27:e7:44:e9:fd:aa:af:e5:f0:43:f2:93:
86:d8:a3:e6:4b:24:51:d4:24:02:d4:99:f7:8d:8b:
6e:3a:63:71:e2:c8:df:6d:9a:aa:4d:2c:2f:f3:66:
db:b6:b8:d9:71:af:0c:bd:b3:4d:36:a9:cc:d0:d1:
76:5c:ad:4c:7d:2e:19:31:be:c2:41:86:84:8f:e0:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:16:3D:66:3D:88:65:98:3B:81:C8:EB:96:E6:90:F6:27:B2:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/18223b1e-48fd-39b5-b848-2ef584eef428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:4e:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:92:8d:f1:6b:f1:c2:db:bb:b7:d5:d2:1c:44:4e:de:29:18:
e2:b2:25:91:c9:44:f1:6f:74:f7:ee:1d:65:69:f5:79:20:07:
e6:7b:4c:bf:75:a0:9c:c3:ed:40:c7:bf:92:16:cc:d1:a2:fd:
09:48:08:7d:d9:e1:55:bd:ce:44:23:70:58:c9:ae:27:fb:90:
5b:d7:dc:1e:b2:0f:b6:b1:82:62:f1:0a:1f:1d:19:a8:83:a8:
83:98:d1:86:b7:fd:25:65:0f:79:f9:01:ea:80:ab:5c:45:4c:
b3:a9:2b:65:fb:97:e6:14:fd:bc:54:67:18:be:ed:4d:2d:b2:
59:ff:cf:e7:d0:5e:b0:3e:e8:c6:90:4f:50:37:c9:80:1b:6e:
0e:55:23:af:91:5d:d8:e9:f9:d9:d2:62:b8:10:f9:d0:f8:ba:
2f:34:e2:a7:72:11:7b:05:a8:1a:08:89:ed:37:33:7a:e7:80:
5b:51:92:e6:27:ef:4d:5c:82:1a:5f:2f:87:3f:b0:b9:cb:37:
dd:40:46:8a:74:fb:d3:b3:d5:c5:8c:fb:61:35:9a:93:5a:13:
35:9f:e7:31:b7:c4:a9:89:c6:44:4c:5a:84:e2:61:e0:be:52:
6f:98:94:2c:2d:03:d7:1e:a7:ff:55:f2:f5:78:49:7f:0c:c9:
45:fb:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:29:10 2025 by rpki-client