Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/fa869eba-e217-36a8-9f05-cdc46f93a0e8.roa
File: fa869eba-e217-36a8-9f05-cdc46f93a0e8.roa (raw, json)
Hash identifier: bumwu6SKD7/DUinG9w8PB+oHH8mGm0D6D0FMU4Gd7B8=
Subject key identifier: 87:C0:55:69:35:D3:77:BB:75:29:C4:D2:39:DE:6E:DB:9D:AA:3A:29
Certificate issuer: /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial: 010D0C9F4328584919D7E57CF7213EE0C5C5A640
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/fa869eba-e217-36a8-9f05-cdc46f93a0e8.roa
Signing time: Thu 06 Mar 2025 19:04:02 +0000
ROA not before: Thu 06 Mar 2025 19:04:02 +0000
ROA not after: Wed 04 Jun 2025 18:04:02 +0000
asID: 16509
IP address blocks: 2607:b740:123::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 13:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:d7:e5:7c:f7:21:3e:e0:c5:c5:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Validity
Not Before: Mar 6 19:04:02 2025 GMT
Not After : Jun 4 18:04:02 2025 GMT
Subject: CN=432614de-3126-4575-971b-1b152c1de905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:3f:80:56:d0:ed:4c:df:b1:27:c7:fe:c3:
d2:10:2b:08:a5:71:a3:f7:ca:89:fd:03:7b:d1:82:
84:b1:a1:97:ea:1a:8f:3c:0c:33:f3:0b:50:47:ac:
0a:ef:10:6b:51:59:58:f5:47:82:32:89:ce:51:25:
4d:8a:1a:b4:69:1b:f5:46:6d:15:f2:4e:5f:8a:65:
f1:73:b5:c6:0b:66:81:12:97:12:79:e8:65:8f:17:
f6:4d:ef:62:41:9a:52:05:b8:0a:a3:4a:0f:20:0b:
31:c0:e2:5c:50:41:ec:5a:c4:60:a8:62:ce:8b:87:
6d:38:1b:94:c7:ff:47:ab:6f:72:90:d6:f7:bd:21:
08:0f:67:2b:19:a8:eb:d6:24:c0:8a:69:a7:34:1a:
44:0e:f6:99:6a:06:2e:cb:84:6e:b0:26:57:11:9a:
38:84:1c:b4:77:2f:cf:de:45:2b:d0:15:04:a4:45:
a8:61:15:97:10:40:4e:35:de:7c:55:83:7c:bd:f1:
9a:dd:e3:7c:a4:93:ee:6b:a0:82:b9:dc:93:bf:e5:
f3:3a:83:c4:e5:30:7e:36:56:55:36:6a:73:8e:c1:
b0:1c:28:ab:9d:14:31:0a:81:f3:cb:c1:3d:24:a0:
ed:b1:ea:36:6c:1f:11:d0:32:ae:89:eb:14:69:db:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C0:55:69:35:D3:77:BB:75:29:C4:D2:39:DE:6E:DB:9D:AA:3A:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/fa869eba-e217-36a8-9f05-cdc46f93a0e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
X509v3 Authority Key Identifier:
keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b740:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e6:ed:01:6b:e0:de:d3:34:15:21:1b:9d:a1:73:c9:96:c3:
eb:cf:3b:cd:93:8b:93:3d:d1:0f:e2:66:2e:ca:b6:1b:19:ea:
12:9b:a3:6a:31:b4:a3:62:76:e6:bc:91:d5:b0:0f:25:5a:30:
87:ae:2b:f0:49:a4:b9:1d:c7:ed:5f:ec:ba:71:81:dd:19:27:
bc:d1:db:05:2f:b4:f1:87:40:83:45:77:2a:e7:26:44:27:d7:
d8:d3:70:c6:de:78:b2:a2:b4:e1:6f:4a:2a:d2:2b:f8:db:89:
ac:fc:f1:7b:8a:58:6b:c9:72:f7:c1:ba:37:f7:e3:2a:40:27:
2e:05:b0:74:82:4e:a1:4e:a4:3b:3a:63:47:7f:94:62:61:dc:
8d:20:6b:00:18:0d:fb:20:da:cb:0d:85:be:ec:1b:11:61:3a:
3c:48:54:23:1d:61:95:e1:fd:a4:eb:c3:d0:2a:9f:1e:a3:12:
d4:57:6d:07:2a:d8:cc:15:6d:66:0c:08:b8:dc:91:a0:35:20:
41:53:ef:b4:54:8b:c9:1a:01:6f:fa:11:91:86:d7:c3:b7:1f:
06:3b:37:85:87:10:21:35:37:20:f6:27:ae:23:b5:fc:0a:6f:
17:69:52:64:23:a9:bd:d7:96:89:49:af:a1:9e:c5:18:62:e4:
87:29:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:40:45 2025 by rpki-client