Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ae7bea2-7c9c-34e9-88c0-f41de70b595a.roa
File: 2ae7bea2-7c9c-34e9-88c0-f41de70b595a.roa (raw, json)
Hash identifier: +jYhs9ED4MKqb0vylxWGQHeXa30qKRYlqIJKsPF1+VU=
Subject key identifier: AE:03:A8:E8:7C:6D:1C:81:7E:3A:40:6F:F5:BC:FF:EC:BA:AF:13:17
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848C264E9BB850D28BADE279C40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ae7bea2-7c9c-34e9-88c0-f41de70b595a.roa
Signing time: Mon 03 Feb 2025 11:17:02 +0000
ROA not before: Mon 03 Feb 2025 11:17:02 +0000
ROA not after: Sun 04 May 2025 10:17:02 +0000
asID: 30036
IP address blocks: 2604:2e8b:b400::/38 maxlen: 38
Validation: Failed, certificate revoked on Wed 26 Feb 2025 09:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:64:e9:bb:85:0d:28:ba:de:27:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 3 11:17:02 2025 GMT
Not After : May 4 10:17:02 2025 GMT
Subject: CN=36ff711d-a911-4131-a10b-fcb15ac4cae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:6b:09:3a:ff:6c:89:37:56:d2:21:c0:d4:
cb:3a:80:d2:3d:0b:46:90:35:ea:b8:e2:f0:04:67:
bb:e7:5d:27:e0:e6:f1:e8:b0:0b:1f:53:8b:7f:38:
38:bb:73:fd:e1:48:97:da:8c:4f:3f:30:b8:99:5f:
a7:ce:02:d7:c5:04:92:13:fe:cc:7b:8b:6f:ed:20:
cf:9b:f1:6a:f1:aa:15:a3:ac:7c:12:06:b2:2f:30:
26:67:04:af:3a:bd:99:49:9c:2a:0e:59:30:86:8f:
25:d2:44:38:fb:df:04:d5:2b:63:10:0d:ec:05:cb:
dc:bc:7f:de:32:ec:2f:44:86:b0:6a:8c:c9:15:f1:
b4:77:59:d6:6b:33:dc:54:22:51:ad:01:e0:93:a5:
08:e6:d4:05:9d:4d:f2:3a:dc:68:41:0f:cd:12:4e:
0a:13:f8:81:44:22:4c:70:a1:48:17:e4:be:98:1e:
b1:92:5e:1a:9d:f8:f2:59:c8:bf:09:02:59:3a:37:
e5:05:28:5f:13:73:f3:46:7e:24:c2:d6:6a:dc:85:
36:f9:30:4a:89:c2:44:59:4f:05:b3:d5:07:3d:be:
9d:d5:d5:ca:4b:fa:e5:0f:58:e1:68:77:c1:66:ed:
51:3f:bb:4e:17:24:56:7f:0c:6a:66:3f:ee:c8:9a:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:A8:E8:7C:6D:1C:81:7E:3A:40:6F:F5:BC:FF:EC:BA:AF:13:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ae7bea2-7c9c-34e9-88c0-f41de70b595a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:b400::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:9a:33:d0:f1:ad:02:a2:ed:ba:d0:a9:e9:76:e2:d1:0f:c7:
88:e7:45:ee:71:eb:27:19:01:2c:09:5d:c5:f5:ae:0a:d9:f8:
22:0f:fe:6e:e3:12:bf:03:0b:54:a6:94:07:f2:f4:c8:d8:2f:
9e:4c:7c:be:2d:53:47:ad:cf:50:c6:be:66:13:9c:97:95:04:
f9:c0:b5:10:af:ad:70:43:44:3b:db:e0:49:88:84:f9:34:60:
5d:d4:97:45:36:60:89:86:e2:9e:fb:a3:ca:a2:3a:5f:e3:26:
ad:96:70:af:21:60:ac:92:2a:f5:9b:d7:9b:35:79:0d:c1:f8:
12:a3:e9:1b:86:f6:de:48:bf:e9:03:82:b8:54:a9:7e:78:fd:
92:41:68:d3:b3:a4:19:2c:16:25:b1:3b:b0:1e:98:f2:b3:3c:
c1:3a:44:c4:8a:f5:c3:c9:6f:b7:f1:ad:36:c0:66:23:6c:39:
ef:99:0b:70:c6:32:f9:e6:94:08:7c:73:28:df:6e:da:0d:6c:
0d:0f:34:9b:67:5c:49:99:46:8a:d7:71:55:3e:22:78:50:14:
78:fe:4e:6a:0e:94:9b:e6:74:f0:6a:f1:70:2a:a5:85:d2:0b:
13:ab:8d:82:cb:9b:ca:6f:64:18:f6:65:bf:5a:9a:7e:18:ab:
83:49:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:47:03 2025 by rpki-client