Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa
File: 0e476da5-17c2-3908-b3b1-ded8f4368450.roa (raw, json)
Hash identifier: tlBtdSlPcjB64jwnSyGNxboGL7TGSvdBoGtSdjKcfYE=
Subject key identifier: 1A:EF:BF:B0:A6:E5:8B:30:1B:75:B0:C8:B5:73:6B:A2:AC:76:51:F9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584A23C020AB73106674B6CB0800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa
Signing time: Tue 10 Jun 2025 01:00:50 +0000
ROA not before: Tue 10 Jun 2025 01:00:50 +0000
ROA not after: Mon 08 Sep 2025 01:00:50 +0000
asID: 59953
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Jul 2025 19:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:23:c0:20:ab:73:10:66:74:b6:cb:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 10 01:00:50 2025 GMT
Not After : Sep 8 01:00:50 2025 GMT
Subject: CN=672f1fa0-f944-4612-ac76-5b23b14d9150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:d3:c7:41:fc:8b:6c:a1:f4:a2:44:5b:c1:
60:f9:1e:b4:67:90:9f:79:2e:77:73:90:fe:9e:86:
1c:9e:73:3d:9e:72:15:fd:e0:92:1a:f9:c8:bf:34:
2c:bb:2f:82:c1:22:90:c8:0c:ac:2f:52:cc:5c:8c:
85:f5:db:b7:57:dc:c1:03:4e:a6:a4:b1:da:d5:f2:
33:cf:c2:60:73:87:38:19:f9:a6:78:97:7c:7f:e4:
9f:7d:2d:91:d7:48:2b:62:86:4f:52:d6:16:e5:0e:
eb:11:5f:65:4c:f2:db:ef:6d:64:e0:f1:ad:90:c5:
e3:3e:03:12:6c:01:1c:09:24:95:1f:fe:b6:15:01:
3f:77:c1:a5:9f:7e:a1:ca:64:3c:ab:1e:aa:14:71:
ed:e5:f8:18:d0:cb:fa:5e:79:39:a4:f3:36:6f:53:
be:48:23:4f:00:8c:15:6c:12:f3:c3:6e:77:a7:23:
d9:96:00:46:49:08:69:9d:c7:e4:ca:d4:81:33:93:
7e:33:a8:9f:f9:33:7d:78:0d:54:f4:1d:01:86:cf:
1f:3e:ba:30:2e:70:62:32:56:71:b4:2b:66:6a:a8:
5d:e8:ba:b8:39:0a:14:23:53:db:4f:e9:69:a2:9b:
a8:53:36:4f:d9:da:47:1e:24:37:ef:11:21:93:f4:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EF:BF:B0:A6:E5:8B:30:1B:75:B0:C8:B5:73:6B:A2:AC:76:51:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:5a:04:1c:cc:9b:92:4e:8d:0d:02:b5:39:7f:12:93:ae:7f:
8f:79:36:ec:56:e9:15:bc:4c:4b:10:19:7e:1d:44:71:68:b4:
a1:0b:08:01:d5:96:0e:d0:1b:44:c6:a5:47:a8:57:09:d5:77:
34:a0:5d:da:c8:80:9e:e0:08:21:61:be:02:8c:84:67:e9:6e:
c5:71:73:21:33:e0:cf:28:5c:96:da:bd:40:3d:bf:84:80:e8:
90:36:ef:4f:e9:16:e6:e1:56:3a:d7:dd:e8:12:27:25:8b:7c:
29:0a:6f:01:fe:61:59:2c:f8:75:04:2b:7b:78:58:fd:90:41:
39:b4:5f:d0:04:07:48:94:3d:23:ec:52:c8:9f:e6:20:b3:c3:
70:54:5b:8d:f6:66:cc:55:27:a6:b7:ab:3a:27:a7:e2:2d:40:
5b:8e:d5:9c:74:42:83:c0:1a:71:9f:29:9f:a7:42:61:c3:7b:
41:bc:87:ef:fd:01:15:60:b1:46:37:d7:d4:13:46:f3:68:3d:
6f:25:21:52:97:ba:91:30:28:8f:8c:80:4d:71:9f:64:99:43:
0b:e6:0f:b1:d3:50:46:73:79:3d:da:6a:6d:02:a1:d3:f4:12:
4d:0f:a1:07:18:3c:7f:76:6d:09:54:0d:28:6d:60:9b:28:bf:
0d:52:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:23:11 2025 by rpki-client