Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/841fe67c-9a4b-39ea-b1ff-c1a5893ed526.roa
File: 841fe67c-9a4b-39ea-b1ff-c1a5893ed526.roa (raw, json)
Hash identifier: fPyrbvZ0uAeFy3h52u9N5W+9mcQISWg19IaCDUu6P9k=
Subject key identifier: 07:97:21:28:D1:11:A8:DE:7B:1A:59:2E:03:B3:83:FF:7E:CA:D6:33
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849019534EC953CDCBCCB7CEE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/841fe67c-9a4b-39ea-b1ff-c1a5893ed526.roa
Signing time: Wed 26 Feb 2025 02:30:16 +0000
ROA not before: Wed 26 Feb 2025 02:30:16 +0000
ROA not after: Tue 27 May 2025 01:30:16 +0000
asID: 329239
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Mar 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:01:95:34:ec:95:3c:dc:bc:cb:7c:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 26 02:30:16 2025 GMT
Not After : May 27 01:30:16 2025 GMT
Subject: CN=9d1e3999-96c5-4122-8885-05435b2109f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:e4:b7:6d:1c:8a:b9:d2:1a:94:3f:d3:8b:
37:0c:f4:ea:1a:d5:1e:b3:60:bf:12:dd:ae:e1:16:
a8:c5:3e:1c:85:c9:d3:5d:d5:c1:09:7b:28:f2:34:
0c:3f:2b:a6:ff:9b:18:e8:a9:e4:32:57:fb:2d:64:
d4:d1:fe:07:17:7d:37:58:ca:33:2e:e9:9b:0f:f6:
69:63:76:ff:36:40:4b:ca:fc:54:3e:3c:b2:7b:b5:
d4:ec:12:b5:6b:3f:d5:89:2b:ce:97:7f:f7:83:a2:
39:c5:b7:03:e3:dc:30:54:8e:81:72:81:46:d0:0d:
97:6e:e9:d5:f0:6b:85:01:84:ee:f7:01:f7:1d:cc:
01:a4:a6:83:e6:43:d7:4d:dc:56:2b:fb:47:5d:be:
cf:f1:de:36:bd:13:9f:84:49:fc:f5:c7:e4:c4:e7:
e5:80:c3:86:0f:4c:9e:df:10:00:6b:64:01:3a:96:
dc:09:89:63:aa:5e:68:d5:52:36:71:f2:7a:e4:6f:
e9:fc:f0:4b:2e:5c:0f:36:7e:86:7e:9c:af:5f:e2:
70:5a:d5:09:d8:b4:bd:0a:8b:c3:b6:30:8f:0e:1c:
6b:38:1a:f4:e3:98:cd:bb:de:3a:d1:bc:d6:12:04:
4b:a9:c6:0b:9f:a9:d8:7d:6c:b4:6c:18:b2:72:0b:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:97:21:28:D1:11:A8:DE:7B:1A:59:2E:03:B3:83:FF:7E:CA:D6:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/841fe67c-9a4b-39ea-b1ff-c1a5893ed526.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f1:d8:3e:90:33:95:e2:c5:4d:22:02:16:09:71:97:37:1e:
c0:94:66:8c:a0:7b:e8:ca:22:a7:26:d7:c2:db:a4:43:7e:24:
d9:de:b9:8c:ce:87:e9:8f:f3:09:40:7f:6d:20:45:68:09:6d:
c2:06:63:de:90:97:0a:31:78:24:10:6c:9c:4a:2c:6a:73:2a:
ae:56:a6:ce:f3:f5:42:2b:91:3e:30:74:73:d7:a9:db:55:c5:
14:67:5f:80:17:5d:d4:a4:2a:35:49:fe:49:b7:de:cc:d9:6d:
7c:28:fd:c4:31:38:5e:92:f4:58:fc:df:f5:bf:af:ad:d6:b4:
77:b8:4a:9f:6a:49:9e:86:d6:43:03:bc:49:9d:86:6e:a3:63:
02:74:9e:b2:cd:e4:9c:81:34:94:b5:3d:ec:48:c3:3b:e3:82:
87:4b:0d:57:a8:53:7d:a3:6c:39:ff:27:c7:93:d6:a8:7b:00:
e9:23:2d:b1:13:88:6b:ce:78:39:7b:bf:20:75:df:f2:5f:76:
7b:d9:d5:be:15:1c:50:a1:2e:3d:59:4d:96:bb:78:6b:ca:7d:
a4:5f:61:94:e1:34:23:63:7c:d9:2e:b2:27:7e:a9:36:3c:e0:
b2:88:68:fa:43:e6:c6:00:11:42:2f:54:cf:37:13:43:6a:ad:
ac:7d:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:27:56 2025 by rpki-client