Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/920f9a3e-4ab6-3c80-a2c9-a1cd423baf5a.roa
File: 920f9a3e-4ab6-3c80-a2c9-a1cd423baf5a.roa (raw, json)
Hash identifier: w/tS226fJOjo5VrzPMDYCFJq9nCY4NM/vulIRkmPpMY=
Subject key identifier: 13:BD:21:09:5F:0C:1F:7C:4D:61:5F:8C:27:87:B2:9A:F3:CB:10:4B
Certificate issuer: /CN=6e6596be-a739-48b9-bc79-15a6015e7193
Certificate serial: 010D0C9F43285848F2BD8159CAE88C96A1439F00
Authority key identifier: 0E:05:D7:81:67:C8:70:3C:DA:03:16:71:B9:F3:AA:8C:F1:F0:50:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/920f9a3e-4ab6-3c80-a2c9-a1cd423baf5a.roa
Signing time: Thu 20 Feb 2025 18:54:20 +0000
ROA not before: Thu 20 Feb 2025 18:54:20 +0000
ROA not after: Wed 21 May 2025 17:54:20 +0000
asID: 54523
IP address blocks: 2606:bb80::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Mar 2025 18:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:bd:81:59:ca:e8:8c:96:a1:43:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6596be-a739-48b9-bc79-15a6015e7193
Validity
Not Before: Feb 20 18:54:20 2025 GMT
Not After : May 21 17:54:20 2025 GMT
Subject: CN=a5d0a7d2-065b-4717-ba55-9df091fee68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:4b:c0:c7:4d:6f:d2:a5:ce:09:5f:af:3c:
a7:b9:81:65:0d:35:63:9c:74:b9:ee:14:cb:ec:3b:
2d:a3:43:27:37:e1:03:cf:13:da:c3:ef:f3:8b:9e:
69:18:e1:5d:36:bf:65:e3:67:a8:d9:92:5d:68:6e:
39:ed:8a:2c:a0:48:ea:c5:d6:02:3f:02:75:04:b9:
a9:6e:0d:7e:8f:93:64:26:53:ae:e0:e3:b6:07:ba:
7c:63:50:70:44:a0:b8:b5:40:fd:03:98:6e:ce:7b:
19:5b:bf:51:ff:3a:e1:1e:f1:5c:a4:dd:02:4f:69:
cb:18:4a:5d:d9:ad:c2:de:34:62:d1:4a:a3:29:8b:
46:01:bb:77:63:00:51:80:82:6d:36:49:1a:1e:3a:
f5:e2:7a:58:48:03:d8:ec:a0:fd:65:d1:2f:96:54:
2a:cc:3c:83:85:a4:21:19:9c:9c:51:14:ab:65:73:
2c:d5:5c:22:a6:40:4b:cd:eb:84:b7:2e:b0:ed:f1:
d3:43:1e:e0:f6:77:78:9a:1f:7d:2c:77:ca:ad:b6:
ca:f9:cf:86:23:ef:c0:eb:40:19:cc:5a:e6:83:23:
34:d3:29:70:4d:e5:0e:d1:44:86:e7:f1:68:3a:67:
43:1d:00:d9:a2:cc:fe:1c:5a:3d:41:72:79:6f:5f:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BD:21:09:5F:0C:1F:7C:4D:61:5F:8C:27:87:B2:9A:F3:CB:10:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/920f9a3e-4ab6-3c80-a2c9-a1cd423baf5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/6e6596be-a739-48b9-bc79-15a6015e7193.crl
X509v3 Authority Key Identifier:
keyid:0E:05:D7:81:67:C8:70:3C:DA:03:16:71:B9:F3:AA:8C:F1:F0:50:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bb80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:9e:24:a0:a2:35:85:12:15:ab:b0:4a:3b:e3:b0:1b:10:50:
74:a6:f7:86:84:52:79:0f:c7:93:3a:8b:d1:18:e2:3a:dd:c8:
97:67:47:b7:86:97:65:01:23:dd:06:22:4d:bc:80:4b:0f:f5:
80:bb:e9:68:a3:f1:93:0f:f4:f3:b4:a8:e6:ff:ee:bb:89:7c:
4c:b1:78:a2:7a:55:03:bf:39:29:96:05:70:0d:29:8f:b9:df:
91:4e:57:4b:66:55:a1:bd:0a:fb:9c:a0:e8:63:62:f4:35:f2:
8e:d5:ff:9f:9f:5a:c0:d1:39:cf:49:c3:02:84:4e:5e:7a:5b:
29:e0:cb:49:04:b8:a7:d3:66:6d:6e:24:cb:ca:03:4b:3c:3b:
71:ea:a4:3d:ce:44:18:ad:38:64:49:71:8a:9e:67:42:86:ed:
96:f0:45:bf:69:c2:e6:7c:a6:7a:33:f5:66:a0:de:07:98:81:
af:a6:39:4a:ae:59:28:cd:e6:1d:3f:6d:a4:43:85:a3:02:bc:
72:de:c8:8d:5b:a6:06:d7:b2:2a:3b:43:98:fc:f1:ef:31:f4:
9d:1a:f9:a6:59:6a:cf:c4:10:09:3b:cd:f7:d6:d6:c1:84:6c:
15:44:cf:22:b9:18:fa:fa:3c:d0:55:40:54:58:da:93:37:68:
ba:14:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:55:36 2025 by rpki-client