Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/567790c8-11e9-353b-bc54-8abdca3c4002.roa
File: 567790c8-11e9-353b-bc54-8abdca3c4002.roa (raw, json)
Hash identifier: FqkZAqM6dN3AM2CbGlO/2fWrw5fENeSFg7mP8I+uAEY=
Subject key identifier: F8:1E:8C:F9:8D:56:5C:53:6B:26:5A:F0:F0:65:E4:29:EB:88:13:5D
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F432858491F9686A29E3A77F661A29300
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/567790c8-11e9-353b-bc54-8abdca3c4002.roa
Signing time: Sat 08 Mar 2025 20:27:10 +0000
ROA not before: Sat 08 Mar 2025 20:27:10 +0000
ROA not after: Fri 06 Jun 2025 19:27:10 +0000
asID: 137409
IP address blocks: 2606:f180:18::/45 maxlen: 48
Validation: Failed, certificate revoked on Mon 31 Mar 2025 20:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1f:96:86:a2:9e:3a:77:f6:61:a2:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Mar 8 20:27:10 2025 GMT
Not After : Jun 6 19:27:10 2025 GMT
Subject: CN=3bee1325-851a-4044-9f47-7ba935a3163e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:d3:68:7d:a1:f7:a9:ff:dd:14:5d:22:a7:
10:18:83:11:4d:d4:82:ce:ee:cd:17:30:28:a3:de:
f1:c8:5d:69:5b:bb:29:1b:da:5b:1f:1f:09:98:90:
e8:44:68:c7:69:1d:60:78:89:bf:8a:4f:9b:72:63:
1e:06:4e:61:05:4a:d5:75:0e:9a:e4:32:7a:c2:23:
be:9f:e5:84:c5:9d:c1:ce:43:17:16:66:ca:b0:0c:
2f:30:0e:93:3c:73:4b:c4:ed:c6:ab:3a:12:9b:0b:
a6:b8:ff:27:58:80:b6:8e:f1:40:88:2f:72:cf:f1:
48:0b:6b:5e:06:6a:6e:11:ef:42:e4:6f:a2:51:1b:
2d:59:a8:bb:de:d7:2a:d0:36:07:0e:61:1b:58:42:
3c:03:9f:93:19:6d:f2:64:b7:4f:55:a3:5c:2f:43:
56:f7:c1:74:1d:51:9f:2b:79:ff:0e:0e:2b:60:cf:
8a:27:b0:b2:e6:6c:b5:87:0c:b0:da:4d:50:f4:43:
0e:08:88:e5:4f:6c:9f:43:64:08:35:00:dd:2a:be:
01:aa:2d:ed:fc:d1:96:09:28:e1:8f:b5:0f:03:db:
b3:58:8c:55:98:7d:13:db:61:2d:fe:49:3f:62:0c:
e2:64:37:f6:83:66:94:32:fd:3b:06:f8:87:e3:44:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:8C:F9:8D:56:5C:53:6B:26:5A:F0:F0:65:E4:29:EB:88:13:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/567790c8-11e9-353b-bc54-8abdca3c4002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f180:18::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:48:52:a4:17:3d:fe:50:2d:e5:e1:55:4d:e6:b5:f8:6a:59:
6f:1b:2f:e3:e4:13:0a:d3:bc:ec:08:2d:6b:10:9d:bf:93:b5:
1f:64:b3:53:47:e8:8a:cf:ea:c2:77:4e:05:85:20:46:d4:c8:
a2:bd:44:b0:3f:3f:3c:28:51:f4:d3:19:51:75:4d:34:78:54:
0e:14:ef:03:66:04:07:13:3e:61:51:c6:67:39:4b:b8:4a:0b:
6b:8f:8d:0e:8e:04:a2:6b:4b:91:cd:54:3c:21:4f:e6:2d:5f:
a0:5f:89:68:14:a0:75:ae:05:42:d6:d5:09:35:aa:c9:40:17:
94:7b:d7:79:12:d2:7b:80:85:0e:73:77:9a:18:5e:8c:80:9c:
51:13:41:59:72:96:f5:08:f3:3d:3f:af:91:03:ef:c6:8f:d8:
78:a8:58:28:d1:60:a7:0b:fc:34:58:2d:34:c6:49:bd:82:38:
b4:65:dc:8f:2e:6d:78:64:02:c8:2c:1f:53:1e:92:4a:a4:38:
1c:84:44:45:32:b0:a3:4a:90:7d:8b:c8:4a:c2:b1:43:e8:fc:
f4:18:6b:84:15:f7:9c:cc:d4:2e:16:3d:64:3c:c3:fe:3b:8b:
b2:d5:1c:75:4b:d0:14:5d:4c:eb:c8:d7:94:ec:be:ad:69:76:
57:f5:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:39 2025 by rpki-client