Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/0d75f0b0-5894-3456-b7b6-e8a1558bae29.roa
File: 0d75f0b0-5894-3456-b7b6-e8a1558bae29.roa (raw, json)
Hash identifier: FoLuAkQtmUdl3b2jZJEaAhukRfoKyG5hYHVdeeQ4ZlU=
Subject key identifier: E9:BB:E5:68:60:48:34:65:38:E1:2E:B8:96:EB:84:1F:23:E6:97:89
Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
Certificate serial: 010D0C9F432858488AE0A52BD3EA795FFDD49780
Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/0d75f0b0-5894-3456-b7b6-e8a1558bae29.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 23470
IP address blocks: 2602:faa1::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 22 Mar 2025 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a5:2b:d3:ea:79:5f:fd:d4:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=887ee03c-73eb-45c8-a43f-5cea682fe296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:54:db:ce:d2:ac:0d:25:ef:ca:d9:79:b3:
fb:9e:88:23:13:2c:67:f9:7f:5d:94:0a:c8:e7:4a:
22:e7:0f:14:b7:3d:d6:78:b4:0f:31:ec:49:6d:37:
46:28:ae:a3:d9:48:13:57:8b:98:2a:4d:4e:1c:a0:
8e:d8:a3:77:ff:c6:11:4a:e7:d8:e3:16:ac:f8:e6:
47:e3:55:cf:2d:2f:93:1b:5c:77:81:a4:56:d9:60:
3c:0e:6b:29:ad:cb:35:b3:b6:cd:94:e3:37:1d:06:
54:00:ce:a6:05:5e:72:de:eb:51:39:b1:54:db:b9:
f3:09:ff:09:f7:5e:87:64:e5:11:00:89:6e:0d:4d:
f3:e0:21:0d:29:02:63:2a:19:78:3d:63:47:3d:ce:
95:28:da:c6:d9:03:fe:0b:21:22:70:b1:81:f6:81:
25:ab:ea:d3:df:70:4c:f3:bf:98:f0:fe:3e:ad:ac:
59:c9:14:2c:bc:2b:4d:0d:e2:a9:a6:ab:fc:eb:8c:
b5:d3:ba:89:2f:a8:bc:c7:34:f0:1d:a6:d0:b0:26:
c7:79:e4:ab:91:61:ed:e0:a5:cc:e1:b2:9e:79:a3:
67:30:2e:d0:51:00:3f:e4:b0:41:79:39:f9:10:56:
d0:07:d6:f7:49:9f:f7:f3:e3:5a:c2:ca:5f:97:42:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:E5:68:60:48:34:65:38:E1:2E:B8:96:EB:84:1F:23:E6:97:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/0d75f0b0-5894-3456-b7b6-e8a1558bae29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl
X509v3 Authority Key Identifier:
keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:faa1::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:eb:0e:1d:6b:e4:e4:59:0b:a8:f6:b1:e2:fb:46:38:4a:63:
fb:44:4e:4e:a1:4c:65:2e:de:b5:83:04:8a:4c:29:fe:bd:01:
85:9a:e4:d5:bf:06:de:0d:ac:61:fd:06:67:4c:a3:e0:90:b5:
ea:04:8c:4c:48:98:90:0b:ad:e4:23:4c:9f:ce:ce:11:4f:4b:
97:08:e2:eb:4e:6c:5b:e8:82:15:3b:a4:c4:8c:94:3f:2e:4d:
b3:1e:a3:03:5e:57:e2:ba:65:ef:79:64:c2:79:3c:ed:76:2a:
79:df:29:d4:e7:9e:ec:ab:50:6e:75:30:12:b2:30:26:65:b6:
e4:81:a5:18:a9:2d:bd:81:f3:a4:d7:06:27:bf:60:2d:49:0f:
2b:02:5a:aa:13:34:a9:a2:7d:33:b5:e0:88:82:28:7c:a6:6a:
96:4e:0b:98:09:2a:47:18:e0:88:0b:70:00:0b:fe:a9:ab:62:
c1:92:c9:79:e3:a1:81:72:7e:48:52:cc:6d:62:2b:91:6a:21:
05:49:a2:a8:ce:ee:f8:42:7c:1f:42:12:9a:2d:71:17:f6:21:
5f:4f:d9:94:fb:95:8c:ca:de:a3:73:36:47:6a:b9:62:47:5c:
d3:5d:81:42:52:11:16:4b:09:2a:90:e3:c7:05:68:3b:eb:cd:
22:9c:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:16 2025 by rpki-client