Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/e30ae80c-fd77-31fe-b586-5936a9da1e3f.roa
File: e30ae80c-fd77-31fe-b586-5936a9da1e3f.roa (raw, json)
Hash identifier: J9tS9w6ootBbH4KqEorlRRBGgXEDxbUc6z9ETuUswyU=
Subject key identifier: 70:79:B3:F5:53:4E:C0:D3:DB:AF:6A:23:2C:4A:FD:0B:F4:5E:40:CA
Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial: 010D0C9F4328584A265F097B2619743975139FE4
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/e30ae80c-fd77-31fe-b586-5936a9da1e3f.roa
Signing time: Tue 10 Jun 2025 23:32:58 +0000
ROA not before: Tue 10 Jun 2025 23:32:58 +0000
ROA not after: Mon 08 Sep 2025 23:32:58 +0000
asID: 65132
IP address blocks: 2610:20:6b00::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 11 Jun 2025 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:26:5f:09:7b:26:19:74:39:75:13:9f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Validity
Not Before: Jun 10 23:32:58 2025 GMT
Not After : Sep 8 23:32:58 2025 GMT
Subject: CN=ba15dabb-4127-4770-86bc-f9f0181d4da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:59:31:62:b5:6e:15:d8:bb:44:41:ed:bb:
34:47:b8:34:2c:2d:8f:32:d7:b9:36:65:e7:ff:4d:
27:d2:f3:49:ec:49:1a:c2:4c:04:d8:4a:2b:da:7f:
dd:d8:fa:8b:67:2f:be:ce:0f:78:79:27:50:7b:06:
bf:ff:fd:b6:87:94:2f:e5:50:80:72:24:ac:5f:ad:
44:57:f0:6a:2d:f4:fd:fb:8c:2d:bf:88:04:a7:6d:
93:6f:58:b0:4c:32:53:b6:30:05:62:e6:31:55:90:
0e:e3:09:b4:57:13:06:68:aa:e3:15:ca:bc:53:f6:
c3:20:5c:b6:79:c8:8b:7e:63:e6:82:94:a5:cc:ff:
13:f4:9c:2d:58:c2:34:3f:37:d9:40:59:68:aa:1e:
d8:13:48:a4:01:4f:31:9f:ec:f8:ae:07:65:34:71:
e0:5f:ec:7c:3c:f6:a7:24:35:e2:dd:56:72:48:3f:
bd:df:0a:d1:bf:9e:ff:b9:7d:d0:62:6f:0b:83:9e:
b4:cb:40:07:03:af:78:64:bd:5e:af:40:98:ec:fb:
a0:20:9e:d5:ac:5b:77:50:0a:2d:59:a5:de:57:26:
22:af:d2:87:29:85:b8:08:7a:09:78:72:c0:17:9a:
9d:68:11:71:ee:d2:85:77:99:93:03:3f:e9:fc:f9:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:79:B3:F5:53:4E:C0:D3:DB:AF:6A:23:2C:4A:FD:0B:F4:5E:40:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/e30ae80c-fd77-31fe-b586-5936a9da1e3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
X509v3 Authority Key Identifier:
keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:6b00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:8d:c4:ad:85:5f:44:bb:54:79:33:ae:52:26:d1:36:8c:f9:
e9:44:b4:36:83:90:ee:a0:2a:8d:53:d2:d2:73:7d:4a:f2:df:
a5:00:9a:39:d4:94:0b:70:82:92:09:54:19:27:ce:92:57:0e:
a3:bd:d2:c2:86:c2:09:16:a5:9a:43:c5:3a:f7:64:1d:8e:a6:
80:a8:48:80:93:5b:4c:33:6a:1f:67:ca:09:a4:25:00:52:b3:
f2:7b:87:2f:04:66:a2:f7:80:27:70:c8:10:36:15:d9:88:9a:
01:3e:db:1a:9c:83:24:ee:e5:56:8f:22:5b:9f:48:21:37:98:
cf:46:32:98:0d:1b:e5:5b:b3:33:15:14:39:05:66:f3:41:f1:
0b:05:c6:a6:36:30:a0:c0:7b:52:0d:00:91:4d:1b:3c:d7:58:
cb:df:45:3e:01:13:e3:aa:fd:20:78:cb:2a:7f:2e:35:d6:7e:
b5:af:bd:d2:1d:bb:a2:02:85:c2:ce:9d:9d:2d:99:e6:e4:06:
7e:88:c1:eb:b0:f8:da:5c:3b:d7:4c:b6:92:df:7b:10:0a:63:
66:1f:c2:a5:cf:bd:fa:2c:5b:f4:59:29:da:88:eb:f9:ba:91:
d8:15:4f:74:1e:f9:41:d0:44:47:60:2e:18:e6:64:e0:69:27:
44:a8:dc:ea
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEomXwl7Jhl0OXUTn+QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh
N2U5MB4XDTI1MDYxMDIzMzI1OFoXDTI1MDkwODIzMzI1OFowLzEtMCsGA1UEAxMk
YmExNWRhYmItNDEyNy00NzcwLTg2YmMtZjlmMDE4MWQ0ZGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wNZMWK1bhXYu0RB7bs0R7g0LC2PMte5NmXn
/00n0vNJ7EkawkwE2Eor2n/d2PqLZy++zg94eSdQewa///22h5Qv5VCAciSsX61E
V/BqLfT9+4wtv4gEp22Tb1iwTDJTtjAFYuYxVZAO4wm0VxMGaKrjFcq8U/bDIFy2
eciLfmPmgpSlzP8T9JwtWMI0PzfZQFloqh7YE0ikAU8xn+z4rgdlNHHgX+x8PPan
JDXi3VZySD+93wrRv57/uX3QYm8Lg560y0AHA694ZL1er0CY7PugIJ7VrFt3UAot
WaXeVyYir9KHKYW4CHoJeHLAF5qdaBFx7tKFd5mTAz/p/PkfhwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHB5s/VTTsDT269qIyxK/Qv0XkDKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx
YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvZTMwYWU4MGMtZmQ3Ny0z
MWZlLWI1ODYtNTkzNmE5ZGExZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4
Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx
YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh
YmMxMWE3ZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAIGsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPo3ErYVfRLtUeTOuUibRNoz56US0NoOQ7qAqjVPS0nN9SvLfpQCa
OdSUC3CCkglUGSfOklcOo73SwobCCRalmkPFOvdkHY6mgKhIgJNbTDNqH2fKCaQl
AFKz8nuHLwRmoveAJ3DIEDYV2YiaAT7bGpyDJO7lVo8iW59IITeYz0YymA0b5Vuz
MxUUOQVm80HxCwXGpjYwoMB7Ug0AkU0bPNdYy99FPgET46r9IHjLKn8uNdZ+ta+9
0h27ogKFws6dnS2Z5uQGfojB67D42lw710y2kt97EApjZh/Cpc+9+ixb9Fkp2ojr
+bqR2BVPdB75QdBER2AuGOZk4GknRKjc6g==
-----END CERTIFICATE-----
Generated at Tue Jul 8 23:19:39 2025 by rpki-client