Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/ff56c872-3f58-3c63-8000-362e8d979529.roa
File: ff56c872-3f58-3c63-8000-362e8d979529.roa (raw, json)
Hash identifier: RjOAAp5F3l0JCx/Bf1+yoTolioFHZQi6P8MKUWjDxsM=
Subject key identifier: 2C:23:08:00:BF:27:43:1A:02:0C:BC:98:C1:7E:F3:98:83:6C:5A:B8
Certificate issuer: /CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
Certificate serial: 010D0C9F432858486747FC5C8BEB2B5787DBC480
Authority key identifier: BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/ff56c872-3f58-3c63-8000-362e8d979529.roa
Signing time: Wed 01 Jan 2025 20:00:11 +0000
ROA not before: Wed 01 Jan 2025 20:00:11 +0000
ROA not after: Tue 01 Apr 2025 19:00:11 +0000
asID: 212516
IP address blocks: 2607:f2d0::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Jan 2025 21:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:47:fc:5c:8b:eb:2b:57:87:db:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
Validity
Not Before: Jan 1 20:00:11 2025 GMT
Not After : Apr 1 19:00:11 2025 GMT
Subject: CN=120af99e-7972-4c55-a285-7ad57622d8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:f0:0e:cf:84:85:c7:a1:cd:22:27:4d:ea:
e0:a2:2d:2d:22:90:59:9a:52:3b:7b:f6:f1:24:bd:
d5:15:05:79:b1:6e:c7:41:d6:51:c8:a1:53:17:2e:
4c:3c:74:14:6b:81:a6:5d:a5:22:72:e0:ee:72:75:
05:28:2f:be:9b:55:3f:ba:9e:b5:c8:a5:a8:0c:7a:
1b:42:12:bb:40:0c:6f:0a:08:c5:36:a8:a7:c2:41:
e0:ed:27:5c:f8:81:8f:e1:47:64:c8:1e:08:85:7e:
47:f7:56:26:cc:32:42:57:b9:35:25:37:f9:cf:5f:
ae:41:f8:d4:3d:02:2d:a0:eb:29:c6:79:82:dc:bb:
82:08:ee:ce:75:83:85:63:11:e3:c6:36:63:88:65:
bb:5c:04:ff:16:e6:28:e5:59:e0:e9:b7:70:17:6b:
6a:44:cd:2a:60:c5:b2:2c:12:56:4d:1a:77:db:eb:
5b:44:38:b8:c4:6c:cf:fc:31:30:63:87:ed:4f:32:
fa:20:0f:5f:a9:57:65:40:65:b0:53:f1:eb:0f:4c:
d1:da:2a:0d:91:c5:91:2b:56:cc:25:2e:8a:76:b7:
b7:02:30:52:13:83:9e:3e:77:73:5b:4b:cd:84:7c:
45:60:93:08:fb:3f:49:c2:4d:da:96:bd:49:22:95:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:23:08:00:BF:27:43:1A:02:0C:BC:98:C1:7E:F3:98:83:6C:5A:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/ff56c872-3f58-3c63-8000-362e8d979529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl
X509v3 Authority Key Identifier:
keyid:BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f2d0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:96:e5:ce:64:a3:08:83:f2:9f:43:04:0f:84:de:e3:37:de:
52:c6:a5:95:d3:8e:f2:57:be:11:1f:54:ea:04:a8:57:39:0c:
91:37:56:53:0f:cb:e7:b1:75:9b:81:bb:b7:75:2e:f3:06:ff:
05:95:d9:24:12:68:16:7d:c8:01:f8:30:03:4a:bf:65:ba:4e:
a1:11:83:59:4d:4f:59:b1:c6:ea:25:e2:59:08:97:da:0a:15:
45:2c:72:43:36:ed:ce:61:8f:2d:15:9c:37:3b:65:8f:6a:d5:
36:86:8b:5d:9a:44:d1:eb:7e:0c:bc:7f:52:b4:a4:2e:6d:d4:
34:d3:15:af:a7:b1:56:8a:72:20:fb:83:50:5e:bb:c6:5d:87:
49:da:0b:52:c2:f1:83:db:e3:e3:61:c1:9c:51:5e:23:ec:25:
28:34:73:0d:1b:ba:47:b9:bf:01:39:d3:d9:30:f0:e5:35:5c:
56:1b:e8:c8:1f:8a:26:54:82:0e:fb:e4:4e:e5:b4:02:c8:68:
82:5c:23:cb:5e:0b:81:ec:fd:a8:87:b3:92:71:61:a0:e2:6d:
fd:b0:4a:d1:15:4b:50:c5:df:2c:96:d6:42:89:d6:d4:e7:5e:
0b:52:4d:dc:42:18:11:83:7e:f2:42:5d:db:65:a5:fe:a7:32:
c2:79:58:5e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhnR/xci+srV4fbxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQxYWI2N2YtMzVhNy00NDg5LWFkM2QtZmY1YjczYWIw
NDQ3MB4XDTI1MDEwMTIwMDAxMVoXDTI1MDQwMTE5MDAxMVowLzEtMCsGA1UEAxMk
MTIwYWY5OWUtNzk3Mi00YzU1LWEyODUtN2FkNTc2MjJkOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iPwDs+EhcehzSInTergoi0tIpBZmlI7e/bx
JL3VFQV5sW7HQdZRyKFTFy5MPHQUa4GmXaUicuDucnUFKC++m1U/up61yKWoDHob
QhK7QAxvCgjFNqinwkHg7Sdc+IGP4UdkyB4IhX5H91YmzDJCV7k1JTf5z1+uQfjU
PQItoOspxnmC3LuCCO7OdYOFYxHjxjZjiGW7XAT/FuYo5Vng6bdwF2tqRM0qYMWy
LBJWTRp32+tbRDi4xGzP/DEwY4ftTzL6IA9fqVdlQGWwU/HrD0zR2ioNkcWRK1bM
JS6Kdre3AjBSE4OePndzW0vNhHxFYJMI+z9Jwk3alr1JIpV6dwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCwjCAC/J0MaAgy8mMF+85iDbFq4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNDFh
YjY3Zi0zNWE3LTQ0ODktYWQzZC1mZjViNzNhYjA0NDcvZmY1NmM4NzItM2Y1OC0z
YzYzLTgwMDAtMzYyZThkOTc5NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDQxYWI2N2YtMzVhNy00NDg5LWFk
M2QtZmY1YjczYWIwNDQ3L2Q0MWFiNjdmLTM1YTctNDQ4OS1hZDNkLWZmNWI3M2Fi
MDQ0Ny5jcmwwHwYDVR0jBBgwFoAUvfoqVkNKfJIRitSOopfVwr+UNWcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kNDFhYjY3Zi0zNWE3LTQ0ODktYWQzZC1mZjVi
NzNhYjA0NDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfy0DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA8luXOZKMIg/KfQwQPhN7jN95SxqWV047yV74RH1TqBKhXOQyRN1ZT
D8vnsXWbgbu3dS7zBv8FldkkEmgWfcgB+DADSr9luk6hEYNZTU9ZscbqJeJZCJfa
ChVFLHJDNu3OYY8tFZw3O2WPatU2hotdmkTR634MvH9StKQubdQ00xWvp7FWinIg
+4NQXrvGXYdJ2gtSwvGD2+PjYcGcUV4j7CUoNHMNG7pHub8BOdPZMPDlNVxWG+jI
H4omVIIO++RO5bQCyGiCXCPLXguB7P2oh7OScWGg4m39sErRFUtQxd8sltZCidbU
514LUk3cQhgRg37yQl3bZaX+pzLCeVhe
-----END CERTIFICATE-----
Generated at Wed Feb 5 17:05:03 2025 by rpki-client