Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/0dde2ef4-aae0-3d4c-af76-c6455d18e737.roa
File: 0dde2ef4-aae0-3d4c-af76-c6455d18e737.roa (raw, json)
Hash identifier: ZNEZ1YxK9j6k8VLNP3qHDq6nl/BIiMUGTEKu3ifFa1U=
Subject key identifier: B2:A6:1B:0F:1B:6A:E5:72:2F:2F:84:FD:7A:AD:CA:0C:BB:F7:D1:AE
Certificate issuer: /CN=195aa559-2ee4-466a-993d-e35043b7752b
Certificate serial: 010D0C9F43285848B01EF7D7C9FB1E999C0FB880
Authority key identifier: C8:74:0E:F2:1B:CC:D0:36:65:A9:AE:02:D3:6A:A3:E5:B7:BD:97:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/0dde2ef4-aae0-3d4c-af76-c6455d18e737.roa
Signing time: Mon 27 Jan 2025 22:11:33 +0000
ROA not before: Mon 27 Jan 2025 22:11:33 +0000
ROA not after: Sun 27 Apr 2025 21:11:33 +0000
asID: 0
IP address blocks: 2620:10f:f000::/46 maxlen: 46
Validation: Failed, certificate revoked on Tue 28 Jan 2025 00:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:1e:f7:d7:c9:fb:1e:99:9c:0f:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195aa559-2ee4-466a-993d-e35043b7752b
Validity
Not Before: Jan 27 22:11:33 2025 GMT
Not After : Apr 27 21:11:33 2025 GMT
Subject: CN=fc91f410-d4e7-4b9a-88a3-ba6b50727264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:a5:f9:25:5d:81:0d:a9:7b:c4:41:bf:25:
d0:70:62:47:82:ab:31:8a:37:be:98:97:81:70:f9:
81:30:fa:be:c3:87:17:fc:bf:95:66:d7:2a:13:1d:
e5:8c:b6:9d:0b:98:43:34:e3:57:2e:2e:f6:9a:fe:
52:8b:9d:d5:12:55:37:34:22:f9:63:f6:ad:50:37:
9a:d0:5f:d2:95:c5:c9:6e:10:2a:cd:c7:38:52:48:
6b:b3:cb:a4:d4:f8:c2:81:16:41:83:29:a9:b0:9f:
38:ca:28:1a:e1:f8:0f:4a:06:e6:f2:88:2d:85:1a:
8c:6c:45:fc:4f:81:f1:e5:51:80:e9:f5:25:41:c8:
19:e1:30:10:4a:b5:e0:6a:7e:86:57:2f:ba:67:c2:
76:fb:db:5d:93:9f:1a:fa:40:1a:2c:40:1c:87:32:
6c:f3:b2:77:94:45:33:76:0d:64:24:1c:71:3a:d7:
e6:0f:41:66:48:31:2b:38:04:c8:10:8d:65:68:f2:
d4:c5:04:5f:91:ad:bb:ea:01:99:26:f3:ea:da:33:
aa:bc:8c:6f:f6:05:8c:5f:e5:d5:5b:6d:be:e8:3b:
07:6d:ef:59:d7:34:a9:80:77:7d:84:e9:a1:52:aa:
02:47:49:3a:bd:d0:d9:7a:1d:e4:8f:8a:f0:5a:41:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:1B:0F:1B:6A:E5:72:2F:2F:84:FD:7A:AD:CA:0C:BB:F7:D1:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/0dde2ef4-aae0-3d4c-af76-c6455d18e737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/195aa559-2ee4-466a-993d-e35043b7752b.crl
X509v3 Authority Key Identifier:
keyid:C8:74:0E:F2:1B:CC:D0:36:65:A9:AE:02:D3:6A:A3:E5:B7:BD:97:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:f000::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:9d:65:33:9d:cc:42:bd:85:18:10:e2:3f:ce:bd:59:fa:c0:
e2:d0:f7:98:52:56:a1:08:53:50:33:b4:7f:fe:8c:e7:a4:d3:
bd:78:90:c5:09:a5:20:73:e4:2c:d1:32:ea:8c:7e:53:dd:be:
ff:35:fa:8c:11:2e:8e:9f:6b:36:59:34:0d:c8:4e:79:84:05:
06:6c:9b:77:9b:58:ce:ce:f7:71:a7:df:96:ab:4c:00:2e:dd:
fc:ac:90:7a:cb:01:9b:3b:ae:87:5d:f1:29:cf:75:6c:3c:f9:
c9:4b:50:e1:5e:5e:a2:f0:9f:2d:e0:d8:0e:4d:97:a3:56:25:
b2:75:97:88:98:50:38:17:d2:fe:8d:60:ed:28:93:b5:68:bf:
90:88:55:6f:f6:d8:82:bf:f3:72:2c:e7:3b:04:89:b4:96:97:
37:95:ca:01:eb:93:c8:f8:d4:66:38:a8:33:c4:c9:85:fa:b2:
18:e4:88:3a:03:7d:5d:b4:7a:e1:85:52:cc:f5:c2:9c:1f:35:
a5:c8:bc:96:91:16:f6:a1:d0:7c:1b:e7:20:57:0d:4e:29:b2:
5a:49:7a:ab:c7:7f:90:1a:db:14:69:38:b3:a8:07:f0:19:30:
90:3c:54:ad:95:b3:72:a0:a3:99:b5:43:cf:86:6f:22:9c:17:
82:1b:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:32:39 2025 by rpki-client