Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a6c4072-90c2-35f2-98c2-4f7388584724.roa
File: 0a6c4072-90c2-35f2-98c2-4f7388584724.roa (raw, json)
Hash identifier: Mzh4CGAJS3mgZJgk3hT0tbMafM3rhzkYDNltv3hdZBk=
Subject key identifier: BD:CC:34:03:EC:FA:DE:65:CF:0D:71:64:2B:34:6D:15:CF:83:4C:3A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B99D7CA9F945CD9DBC6990A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a6c4072-90c2-35f2-98c2-4f7388584724.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 19364
IP address blocks: 2001:470:33::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Oct 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:ca:9f:94:5c:d9:db:c6:99:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=77203b7f-feaa-422c-a9cf-134de4bc2166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:a9:dc:3c:7a:b8:57:4f:9b:2a:9b:8e:ea:
85:d5:23:05:50:85:42:84:48:f3:f9:d1:5e:c7:1b:
33:f8:ec:38:48:81:e5:b1:4e:05:39:db:bf:ac:f2:
12:ba:dc:1e:bf:d7:57:4a:e9:fc:45:02:81:9a:c8:
b9:ce:65:09:91:39:9e:05:b6:a5:1c:1c:48:20:f4:
63:da:f6:f3:da:8c:3b:7a:99:40:cc:d8:fa:e9:ee:
63:0a:9d:0e:0c:e9:c2:2f:5e:99:05:c9:b3:ab:7f:
fc:98:9e:2d:f0:ad:92:a9:e1:af:21:50:8f:2a:b8:
ef:2a:2b:7c:8c:9c:a0:fb:95:0f:1b:71:9a:39:3d:
cf:64:e0:df:de:a9:49:ca:c5:12:2f:bd:89:cf:ab:
56:4b:0d:2d:86:36:3d:8f:70:7a:06:09:8d:6a:7d:
5c:5a:94:68:53:26:f1:d1:10:0a:de:9c:08:88:72:
77:a5:a4:be:57:b8:0b:05:19:b9:10:f5:99:31:14:
e6:4d:98:72:5d:e0:1a:88:d4:8e:cb:7f:ec:c0:64:
7c:d7:b9:d9:32:75:0c:39:d9:58:f5:17:7c:1c:72:
28:35:8d:47:dc:6c:a7:9e:fe:e8:e1:9a:ef:02:d6:
0f:bb:60:5a:00:6a:c7:28:0e:52:39:a9:45:1e:6f:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CC:34:03:EC:FA:DE:65:CF:0D:71:64:2B:34:6D:15:CF:83:4C:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a6c4072-90c2-35f2-98c2-4f7388584724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:33::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:cb:d4:b2:f6:2c:e8:65:a7:7c:a9:02:02:a9:b0:e7:cf:0e:
21:a8:14:64:ac:9d:ab:57:d0:49:ea:fe:c6:1a:ef:f6:79:5d:
b1:07:f7:40:74:c8:eb:39:f5:93:74:c2:08:9b:7d:e5:0b:9b:
17:37:93:80:84:c7:e5:65:52:1c:13:6d:f4:5a:19:f3:b7:8f:
05:a5:30:ab:ef:c1:76:a6:68:83:71:e7:85:47:22:76:73:f8:
e4:61:56:5b:0d:ca:8e:47:c0:3a:69:2b:f9:c7:9e:52:2d:8a:
2e:b7:fc:f1:6d:48:e6:06:b7:a5:63:43:c1:f2:6e:df:c6:31:
7d:86:3a:77:de:1e:34:2b:f3:77:d7:09:c3:6a:f4:aa:de:3c:
16:01:c0:3e:3c:09:b1:26:e2:bd:c1:2c:9c:49:10:73:a5:93:
79:ba:48:92:30:6f:3a:80:9c:e7:61:d8:d6:58:3d:5e:20:c9:
19:02:7e:82:0f:1b:f7:cc:09:05:92:38:87:15:c2:86:86:07:
49:e6:6a:5d:51:8b:a4:c9:3f:57:62:10:66:24:73:06:1f:3f:
58:03:8b:fe:ac:e2:a3:08:ee:72:5a:9c:81:ad:a9:b2:91:73:
6b:3f:1a:6f:0e:05:00:5e:88:77:5b:38:a7:f0:51:08:11:15:
80:e8:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 22:47:53 2025 by rpki-client