Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/91ddbed8-3323-3156-868d-6113f4bcdc86.roa
File: 91ddbed8-3323-3156-868d-6113f4bcdc86.roa (raw, json)
Hash identifier: qejMlYDQyUTbK+bLmJn+FtUvWv2pr+9SB+EwLbLraEc=
Subject key identifier: 89:8F:6F:8F:B4:8E:CF:35:34:78:89:92:DE:07:57:3C:70:DE:FE:DC
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285848C5489F890506FB22DA0FD8C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/91ddbed8-3323-3156-868d-6113f4bcdc86.roa
Signing time: Tue 04 Feb 2025 12:07:28 +0000
ROA not before: Tue 04 Feb 2025 12:07:28 +0000
ROA not after: Mon 05 May 2025 11:07:28 +0000
asID: 212238
IP address blocks: 2601:2000::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 28 Feb 2025 15:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:48:9f:89:05:06:fb:22:da:0f:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Feb 4 12:07:28 2025 GMT
Not After : May 5 11:07:28 2025 GMT
Subject: CN=0bdcb604-f11d-4c4a-b514-2e2b3a15846f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:83:cb:33:2d:4b:27:c2:96:57:1f:74:d8:
9b:e1:78:5c:31:71:6d:89:d7:c7:5b:c9:e0:b4:24:
11:a2:9c:c5:43:f8:8c:88:42:62:69:69:fe:ef:bc:
c7:ac:c3:41:10:51:5d:0f:e4:3b:31:cc:72:33:de:
33:f3:96:2a:42:92:58:61:8a:0b:5c:b6:ca:01:6e:
34:bb:d0:b4:60:4d:84:d6:70:10:bd:e1:d0:a6:87:
68:25:dd:05:ea:c9:01:f7:72:92:74:55:2d:77:7c:
65:2d:a4:00:7a:28:7f:cf:f0:0a:30:d4:49:43:9a:
6e:21:7c:54:84:f7:8a:da:ad:b5:2b:24:57:03:91:
aa:2b:0c:69:c4:04:f0:68:bf:4a:43:85:18:7c:21:
97:4f:de:f0:4b:57:43:40:d9:77:ef:71:19:84:e9:
3e:1c:0b:69:76:34:ba:98:64:f9:0d:bd:9b:4a:f5:
34:f3:6f:e6:51:eb:dd:95:50:6f:c7:fb:6f:85:bd:
ad:bd:a7:89:7f:32:cf:6c:a7:0f:ca:0a:07:9f:f9:
f2:2e:cf:36:4f:d4:d4:60:91:f9:9b:11:18:2b:11:
b5:48:1c:9f:af:95:ae:4a:cc:af:a7:67:0b:f5:46:
c4:a9:b2:55:65:c9:8b:63:ef:78:ec:b3:8b:ae:be:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:6F:8F:B4:8E:CF:35:34:78:89:92:DE:07:57:3C:70:DE:FE:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/91ddbed8-3323-3156-868d-6113f4bcdc86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:2000::/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:18:bf:78:1f:bc:d8:84:10:41:aa:26:fa:1c:f8:6d:e5:7c:
5f:0c:7d:e0:22:a7:24:90:93:b8:06:d9:86:b6:d1:64:9c:3d:
d6:7c:0c:4f:bd:74:9b:96:f5:bf:d3:53:2d:fe:c4:3e:13:4d:
b6:08:af:8d:0e:6a:6f:be:bd:20:0a:1c:f6:39:24:82:49:57:
e5:73:40:b8:db:49:56:aa:91:ce:1f:c9:27:f1:2b:4b:41:75:
24:86:86:e9:fa:1a:f1:4c:88:af:04:38:3e:44:87:18:5d:b3:
85:65:e6:26:ec:8c:47:70:6f:bf:99:09:46:20:60:e3:ac:5c:
3c:55:5d:31:1d:56:44:3e:0e:fa:49:5b:5a:66:62:69:03:18:
e2:ac:09:e9:28:ee:4e:5e:db:cb:82:11:3f:d6:bf:8f:72:0c:
4d:85:aa:40:cb:99:cc:eb:8d:80:4e:a8:44:3c:41:0b:cb:6e:
1c:5e:5c:e5:eb:62:20:fe:3a:a3:cc:5e:b8:d2:12:38:06:fe:
57:d6:11:d8:f1:f3:94:9c:c8:13:00:f8:7e:28:0d:1b:28:c4:
7f:92:cc:72:3f:b0:c7:6e:1b:f5:d6:93:a6:e3:32:ad:67:ac:
82:7f:14:ab:a6:3b:a8:ee:8d:a2:37:e1:ea:17:dc:95:9c:db:
41:5b:d4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:38 2025 by rpki-client