Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66dc2586-2644-323f-8de9-c1769383275f.roa
File: 66dc2586-2644-323f-8de9-c1769383275f.roa (raw, json)
Hash identifier: WfF/lYT6PL2u1IKNBCeq3TH+bjwMp5qVe/NnY00X2Uc=
Subject key identifier: 41:2D:91:71:DD:45:2F:0C:6C:32:57:A6:CC:F6:D9:9D:38:67:65:5C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848B8FF5DFF285894644C9B6F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66dc2586-2644-323f-8de9-c1769383275f.roa
Signing time: Fri 31 Jan 2025 02:30:09 +0000
ROA not before: Fri 31 Jan 2025 02:30:09 +0000
ROA not after: Thu 01 May 2025 01:30:09 +0000
asID: 201789
IP address blocks: 2001:470:408::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Mar 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:ff:5d:ff:28:58:94:64:4c:9b:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 31 02:30:09 2025 GMT
Not After : May 1 01:30:09 2025 GMT
Subject: CN=b9232367-1eb8-48f9-9eb0-58fbc0d834ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:6c:4a:50:4d:8f:d9:7d:53:8f:51:0d:1c:
df:30:2d:b4:6a:fa:92:73:7a:f2:d6:d5:83:50:e4:
4d:7b:96:6a:59:ef:22:96:5f:0f:b7:2e:34:96:63:
98:02:28:72:5f:38:e6:06:e0:46:b8:0f:d1:94:2d:
11:6e:5b:05:2c:2c:e9:f4:bf:0c:4a:3f:c5:9d:93:
c6:f6:a5:0a:51:f6:2c:26:f9:a3:76:d7:3b:e3:43:
79:dd:83:e2:27:08:99:9d:13:cc:a1:f3:e0:55:34:
18:69:c6:2f:25:14:51:fd:96:49:64:5f:03:ce:87:
3a:15:1f:0f:c1:d3:a8:41:da:cf:0f:26:dc:98:5b:
d8:8b:70:0d:6a:a1:ed:02:24:d0:3e:15:c5:71:76:
28:3f:a4:18:7a:e4:06:c4:33:61:71:ed:22:ec:88:
fd:51:06:21:ed:ce:61:dd:25:6c:43:5c:c6:d9:a7:
d3:d3:b0:ba:e2:d5:39:6d:c1:a4:87:ba:0a:45:8a:
14:57:57:5e:a7:37:a1:9b:81:6e:00:74:2c:26:0f:
4f:5f:74:c2:bf:0a:12:ed:21:48:41:74:7e:0f:7a:
0e:bd:76:63:a1:c9:93:30:a1:b3:ff:18:61:79:c2:
49:49:54:a2:68:07:b1:f1:29:d1:a8:72:cd:10:2b:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:91:71:DD:45:2F:0C:6C:32:57:A6:CC:F6:D9:9D:38:67:65:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66dc2586-2644-323f-8de9-c1769383275f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:408::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:24:2c:42:02:5c:51:99:3d:32:0e:a0:0d:c0:59:a2:eb:b1:
69:79:d2:85:b3:e9:76:99:5f:88:c3:7b:b1:b8:f5:9c:d9:2f:
c3:da:ba:85:60:57:31:2f:e5:70:17:1f:03:a0:e4:3a:b9:48:
85:62:bb:1d:b7:4b:ef:6d:c1:2e:0f:25:58:df:ae:45:45:0d:
d5:f4:71:ca:3f:0c:89:ce:b5:b7:f7:1c:c9:dd:01:59:90:64:
de:52:09:f6:8f:db:00:f2:47:d0:0a:75:04:c3:41:43:b9:60:
85:ac:3b:36:b1:00:f5:16:93:3b:13:11:c8:a5:d6:2d:a1:81:
9b:f7:5e:bd:97:55:1c:12:48:e5:56:5e:0a:ad:88:eb:b7:9a:
40:c6:fc:5c:8a:a5:ad:d9:6f:4d:26:ae:be:d8:0b:be:90:11:
e5:b9:97:60:e1:fc:07:f7:25:42:c0:2e:c7:91:05:b0:07:81:
35:c7:3b:60:e7:67:b0:b8:17:2a:0b:be:83:d1:b6:bb:70:02:
25:ff:0a:59:d5:a9:21:67:85:62:90:04:f1:88:20:66:05:ef:
11:1e:1a:33:2b:a9:2c:0c:2d:1b:7d:2f:21:28:30:9c:e2:f7:
f3:19:3b:49:8d:ae:55:61:5d:81:34:d6:d4:24:57:00:a6:45:
0c:11:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:22 2025 by rpki-client