Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/247c2e61-e669-352e-bd8d-8f00844aef6a.roa
File: 247c2e61-e669-352e-bd8d-8f00844aef6a.roa (raw, json)
Hash identifier: FKztJ17eM/9dh/q6/PeVrVggLV2wznR8pjpjqV9JN2E=
Subject key identifier: 3E:B0:D9:8A:A5:81:38:EA:50:9C:A6:BD:45:0F:27:1A:62:BB:25:1C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584973ED6ADF0741814196225880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/247c2e61-e669-352e-bd8d-8f00844aef6a.roa
Signing time: Tue 08 Apr 2025 01:30:09 +0000
ROA not before: Tue 08 Apr 2025 01:30:09 +0000
ROA not after: Mon 07 Jul 2025 01:30:09 +0000
asID: 211448
IP address blocks: 2001:470:435::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:ed:6a:df:07:41:81:41:96:22:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 8 01:30:09 2025 GMT
Not After : Jul 7 01:30:09 2025 GMT
Subject: CN=030ba4b1-1b83-4ace-a210-0b15ffdb17cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:9c:24:7d:ab:96:c5:ae:2a:ca:3a:98:d4:
98:c2:af:45:79:4a:31:da:7d:6d:28:06:09:d5:f3:
73:dc:3c:f8:3e:40:aa:50:75:59:0a:21:f7:91:35:
0c:8e:3f:56:61:46:7c:de:ee:8a:a5:23:5c:fd:38:
85:06:52:93:f5:41:9e:37:0e:37:fe:e1:da:17:78:
87:ab:59:a6:90:93:f9:cd:c7:0c:e0:3f:a7:b0:b6:
76:7f:a4:21:39:2a:be:c1:6e:51:eb:20:c9:7c:ca:
84:44:72:74:09:a4:89:db:b1:bf:f2:a0:f1:7f:b2:
c2:85:9f:29:e4:91:47:1b:08:5d:42:7c:96:3c:62:
78:16:72:38:f9:09:9f:0a:e1:e9:72:aa:a3:8f:28:
e0:9b:0d:b5:b1:9e:21:cd:58:f8:42:2c:9a:e6:e9:
34:4c:84:26:bb:eb:6d:a0:cc:d3:94:58:d4:e2:68:
eb:ab:9a:88:68:7e:1e:5e:4e:bb:dc:c1:9c:93:cb:
17:d6:0d:4d:1f:a1:14:c7:cb:f3:da:a2:a6:b1:cc:
80:58:4b:51:24:42:d4:4f:93:97:e2:b3:2b:1e:08:
9b:0b:f5:38:2a:33:2d:aa:3d:ba:e6:15:d3:1c:4c:
92:a5:ab:df:06:a6:cd:bf:75:24:1e:43:31:24:49:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:D9:8A:A5:81:38:EA:50:9C:A6:BD:45:0F:27:1A:62:BB:25:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/247c2e61-e669-352e-bd8d-8f00844aef6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:435::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:fc:20:dc:17:5f:6c:18:8e:35:d0:15:ca:8f:d3:a7:83:06:
0d:31:42:83:47:0f:4e:6b:b8:44:cd:33:cc:f1:65:12:00:10:
4e:f8:67:34:3e:00:9e:4c:54:a1:54:a5:0c:97:12:8c:86:99:
c2:29:e2:1b:05:ca:21:49:a3:7b:d2:09:be:3e:62:be:ee:e5:
59:1e:51:69:62:19:e2:fd:a2:5d:8e:d0:26:bb:d4:32:b0:ab:
a7:74:d4:64:55:3e:7c:fa:0f:04:c1:96:a9:f7:15:a2:5c:7c:
f6:88:76:41:a8:f5:81:83:d7:06:1f:7a:3a:23:96:c3:52:eb:
63:1d:48:a8:4e:61:4e:7c:44:d8:8a:4c:f9:40:62:d0:c3:dd:
a4:a6:a5:aa:06:99:a6:8e:c0:07:04:10:1c:3f:9c:f9:89:15:
9d:b4:11:04:f2:c5:ab:18:9b:a6:42:b2:d6:15:4c:80:29:16:
31:84:ca:8c:c2:6f:d7:6f:54:c2:05:af:f6:86:a7:e1:de:c6:
12:38:61:3f:af:82:d2:f3:08:4c:ad:5f:5c:07:a8:8a:30:cf:
3e:bc:dd:cc:8c:51:77:27:56:a6:58:cd:32:c8:40:10:47:9e:
f4:cb:ff:68:4e:ff:ce:13:3c:b4:4a:34:93:34:c6:53:6d:56:
7a:2b:df:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElz7WrfB0GBQZYiWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDQwODAxMzAwOVoXDTI1MDcwNzAxMzAwOVowLzEtMCsGA1UEAxMk
MDMwYmE0YjEtMWI4My00YWNlLWEyMTAtMGIxNWZmZGIxN2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvecJH2rlsWuKso6mNSYwq9FeUox2n1tKAYJ
1fNz3Dz4PkCqUHVZCiH3kTUMjj9WYUZ83u6KpSNc/TiFBlKT9UGeNw43/uHaF3iH
q1mmkJP5zccM4D+nsLZ2f6QhOSq+wW5R6yDJfMqERHJ0CaSJ27G/8qDxf7LChZ8p
5JFHGwhdQnyWPGJ4FnI4+QmfCuHpcqqjjyjgmw21sZ4hzVj4Qiya5uk0TIQmu+tt
oMzTlFjU4mjrq5qIaH4eXk673MGck8sX1g1NH6EUx8vz2qKmscyAWEtRJELUT5OX
4rMrHgibC/U4KjMtqj265hXTHEySpavfBqbNv3UkHkMxJEksUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD6w2YqlgTjqUJymvUUPJxpiuyUcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjQ3YzJlNjEtZTY2OS0z
NTJlLWJkOGQtOGYwMDg0NGFlZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJn8INwXX2wYjjXQFcqP06eDBg0xQoNHD05ruETNM8zxZRIAEE74
ZzQ+AJ5MVKFUpQyXEoyGmcIp4hsFyiFJo3vSCb4+Yr7u5VkeUWliGeL9ol2O0Ca7
1DKwq6d01GRVPnz6DwTBlqn3FaJcfPaIdkGo9YGD1wYfejojlsNS62MdSKhOYU58
RNiKTPlAYtDD3aSmpaoGmaaOwAcEEBw/nPmJFZ20EQTyxasYm6ZCstYVTIApFjGE
yozCb9dvVMIFr/aGp+HexhI4YT+vgtLzCEytX1wHqIowzz683cyMUXcnVqZYzTLI
QBBHnvTL/2hO/84TPLRKNJM0xlNtVnor30I=
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:40 2025 by rpki-client