Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/388454ee-6aa0-36e6-93a5-1e993db70ef1.roa
File: 388454ee-6aa0-36e6-93a5-1e993db70ef1.roa (raw, json)
Hash identifier: 7gGZ5MWIPkE6MJz4GZhcj4XcGEoz44a3+b/KirotJF4=
Subject key identifier: 3D:4D:30:3A:97:E4:E1:BA:DF:74:26:0F:B6:16:90:54:B6:82:BA:2B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848B36A09AA51B50007322E0940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/388454ee-6aa0-36e6-93a5-1e993db70ef1.roa
Signing time: Wed 29 Jan 2025 02:30:14 +0000
ROA not before: Wed 29 Jan 2025 02:30:14 +0000
ROA not after: Tue 29 Apr 2025 01:30:14 +0000
asID: 59790
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Feb 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:6a:09:aa:51:b5:00:07:32:2e:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 29 02:30:14 2025 GMT
Not After : Apr 29 01:30:14 2025 GMT
Subject: CN=b7e925c1-1abd-4cea-85d6-bcf5c1b95471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:26:04:da:6b:b3:f8:f1:93:9b:56:4f:2b:
af:18:19:ed:b7:22:b7:a8:b5:28:a0:ef:ad:8e:4b:
e3:a6:77:9a:e7:e0:23:ec:8b:2c:bd:61:58:57:18:
9d:39:04:45:56:de:f4:9d:dc:cc:79:4c:d6:a2:98:
92:0c:6d:dc:1d:f8:ad:6f:7b:07:c7:9c:2c:e1:00:
5e:21:b8:5a:2b:76:f0:3a:a8:96:d3:e1:72:5b:b1:
31:03:a1:63:87:ed:d7:df:e9:96:f1:b6:67:8c:30:
c1:61:e9:6a:fc:bd:3e:77:4d:5d:cc:74:0f:fa:50:
28:50:fd:51:34:79:62:60:f1:98:fc:d7:a2:65:6c:
03:97:ed:e4:d0:66:69:60:9d:41:b4:d1:90:f2:ea:
7e:72:ee:0e:5e:47:0b:46:db:f6:46:64:84:98:ba:
61:77:40:94:02:2d:28:2d:02:06:a4:cd:a5:89:e3:
26:41:7c:97:4c:89:a0:11:8f:d1:d6:4b:3b:6d:47:
20:c6:a4:6d:c9:da:43:3b:d3:ae:b5:86:4c:2e:b6:
4b:db:b2:52:a6:a4:7f:e1:25:ea:f5:e5:44:12:4f:
22:7a:e3:54:2f:f8:6e:26:23:66:24:73:e2:bc:29:
10:c4:d4:4d:46:ba:d5:58:3d:85:bc:fc:f5:e8:47:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:30:3A:97:E4:E1:BA:DF:74:26:0F:B6:16:90:54:B6:82:BA:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/388454ee-6aa0-36e6-93a5-1e993db70ef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:98:2c:5f:5f:24:f2:9d:9b:5a:a8:7a:a2:73:9f:81:b8:92:
92:6f:05:b9:70:52:40:a4:35:f7:b7:10:08:ab:c3:7c:78:df:
dd:14:a9:66:67:b4:31:fd:af:92:bb:a6:5c:53:8e:38:df:1d:
ed:2d:e5:67:15:a9:b8:6d:3c:22:fd:61:5c:74:47:0e:e1:bd:
2a:8d:84:9a:f2:56:bb:da:89:98:67:72:8c:2f:2b:43:8f:44:
d1:8d:ba:66:c9:d5:ae:8d:15:47:d0:a4:5d:7e:e3:35:5e:a9:
0f:7f:9c:7c:be:71:b2:38:29:19:6b:3b:87:16:fb:40:3d:f3:
50:d7:a9:44:e2:df:1b:a5:5a:27:58:99:f8:d1:27:14:2b:f2:
7d:bb:b3:7e:78:d7:76:40:49:a9:32:b6:42:75:86:ee:ae:96:
99:fb:d8:4f:0b:03:cc:50:96:14:16:a6:2f:f2:a2:d9:7e:d6:
54:34:50:50:38:53:c8:3a:e3:40:be:fc:df:a9:98:64:9f:ec:
e8:b7:b7:0a:e0:38:9d:f2:39:9c:38:d1:1b:68:2b:40:9f:7a:
91:f0:ae:54:dd:52:ab:2e:1f:21:76:35:4c:05:3f:ce:1f:45:
15:61:c0:4c:2d:e4:41:83:a7:ef:ad:1e:57:d8:3c:ad:23:dd:
bb:e2:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:14 2025 by rpki-client