Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2a2d16bd-6e31-3bde-a46b-5b6918be3da0.roa
File: 2a2d16bd-6e31-3bde-a46b-5b6918be3da0.roa (raw, json)
Hash identifier: zhExPt/q8kr4ymLOSw7ijhc23nJSbnNMgGmZ5INfq0Q=
Subject key identifier: CE:CE:51:8C:CE:C5:5E:E3:AA:76:41:EB:84:3D:E9:B5:8B:FF:33:E7
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328576D51CC73C042CFC16DBE49A75D
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2a2d16bd-6e31-3bde-a46b-5b6918be3da0.roa
Signing time: Sat 12 Oct 2019 04:46:01 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 16625
IP address blocks: 2001:418:1456:600::/56 maxlen: 64
2001:418:1456:c00::/56 maxlen: 64
2001:418:1456:1300::/56 maxlen: 64
2001:418:1456:1700::/56 maxlen: 64
2001:418:1456:1900::/56 maxlen: 64
Validation: Failed, certificate revoked on Fri 25 Feb 2022 22:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:be:49:a7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=7ca813d2-bd69-4915-a74b-29d3c3f47862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:d8:30:4f:f5:18:33:8b:05:19:64:c3:93:
6f:62:d8:89:cf:4e:a4:1f:12:32:66:9e:e1:e0:ea:
bd:f2:97:b6:f7:9a:39:d1:b5:b0:64:ff:a1:c5:4e:
66:ab:f7:d4:9f:40:fd:af:8c:86:70:b7:ae:4a:db:
36:63:2e:87:91:13:37:4d:0f:1e:c5:d5:ea:db:29:
e1:71:bb:06:f2:44:7d:8d:b6:5b:65:07:2a:34:0d:
10:81:74:22:37:49:84:db:1a:9e:f2:61:2f:bf:40:
ea:af:bb:64:a8:aa:fb:a6:11:cf:ab:34:4c:fd:0d:
10:38:da:79:5a:e7:29:c8:ef:cc:27:b2:c5:91:14:
e6:8a:96:1a:63:a7:9e:78:0c:47:87:95:f9:6b:42:
83:ce:d2:8c:d7:e3:73:53:38:9e:14:08:f5:41:d2:
15:bc:02:93:c7:12:e3:b1:34:a7:08:20:9b:a5:83:
2e:ab:91:27:d1:00:c9:5a:20:a7:b9:69:19:a5:f1:
ea:85:85:e6:74:f8:7f:89:2a:f3:b2:13:4c:35:ee:
e4:62:0d:e9:8d:18:50:de:68:ba:f9:de:73:84:4c:
a4:10:79:93:39:05:61:dd:22:2f:09:fa:c5:13:2f:
98:7c:02:e2:41:86:a9:ab:2d:bc:56:15:38:39:2e:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:51:8C:CE:C5:5E:E3:AA:76:41:EB:84:3D:E9:B5:8B:FF:33:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2a2d16bd-6e31-3bde-a46b-5b6918be3da0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1456:600::/56
2001:418:1456:c00::/56
2001:418:1456:1300::/56
2001:418:1456:1700::/56
2001:418:1456:1900::/56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:d5:15:98:ff:8d:78:a9:81:cb:66:85:df:df:82:9d:05:e3:
17:a8:a8:78:10:4a:2d:18:24:44:bd:a7:57:1b:e1:7b:50:f4:
9e:28:6c:13:5b:20:ae:8e:54:99:ae:2f:8a:a4:04:e3:e3:8a:
20:5e:ca:e0:3f:da:a2:f2:62:d6:e6:75:0f:e3:66:42:bf:73:
99:20:34:87:21:fe:a0:ab:75:22:8f:0d:f4:93:7b:f5:48:83:
4a:b6:d6:43:92:ae:3c:86:8c:eb:8c:b6:9d:ab:e4:e3:23:87:
e2:5f:49:cf:25:78:91:43:a1:00:d2:ce:ca:4a:26:e8:3f:32:
4a:b8:c4:0d:70:5f:9b:09:e9:d6:e3:27:7f:0c:95:39:3d:45:
1c:dc:7d:fc:03:be:a5:1f:f3:cc:3d:a5:9f:f3:3f:43:3a:d9:
b1:3b:e0:91:2e:ca:09:93:62:3f:2e:78:dd:4c:fd:80:16:87:
ea:26:e5:1f:09:10:0f:26:a3:93:75:d0:cd:f3:06:2c:f8:db:
16:13:5c:d8:15:ed:ab:8e:60:81:f5:99:04:a3:f9:64:02:3e:
13:cd:47:0c:69:11:99:d1:de:1a:a6:20:f3:2c:ea:01:18:8c:
41:15:a4:b3:7f:d8:1a:d1:c1:1b:8f:ed:9c:2e:7c:93:58:8e:
14:55:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:35:28 2025 by rpki-client