Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa
File: 8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa (raw, json)
Hash identifier: t3FdGJO1Vm8Ju+GX2saeeQg6IW6XmZUw7UJhRZfh69s=
Subject key identifier: 2A:C6:BE:10:F5:6B:2A:3D:C4:22:86:42:EF:09:15:2D:EA:B9:9A:7D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584996C4840BCAD88F6D7D990E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa
Signing time: Sun 20 Apr 2025 13:01:01 +0000
ROA not before: Sun 20 Apr 2025 13:01:01 +0000
ROA not after: Sat 19 Jul 2025 13:01:01 +0000
asID: 400111
IP address blocks: 2001:470:407::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Jul 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:96:c4:84:0b:ca:d8:8f:6d:7d:99:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 20 13:01:01 2025 GMT
Not After : Jul 19 13:01:01 2025 GMT
Subject: CN=29ad720d-acf5-45f6-9b98-5c972a989179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:c1:f5:18:28:65:90:7f:88:e8:2e:26:32:
b3:0e:f5:71:12:62:23:87:40:07:6a:42:71:67:cc:
2f:c4:02:83:2a:e6:cc:3e:54:32:3b:ba:88:e4:f8:
4d:b1:df:cc:55:c8:74:15:95:10:93:2c:53:a3:c3:
03:f2:77:1d:a4:d9:45:9e:68:e1:9b:c2:7d:99:98:
c7:e9:23:0d:dc:fb:44:85:f1:54:71:bc:b9:d5:91:
4b:f1:8b:2c:16:96:4d:2c:34:8c:a1:c8:c1:9d:87:
d9:9a:3e:d5:30:31:ac:a6:15:f2:b8:09:7b:8b:e8:
21:3e:5c:27:67:05:b0:8d:d9:fb:d9:81:f0:dd:26:
8b:9e:81:c0:53:c1:95:51:f2:94:6c:6d:6d:94:63:
0a:78:10:4e:57:21:6a:18:da:a9:81:94:9a:b2:39:
d5:58:53:4e:df:a2:12:cc:17:64:99:0f:de:ca:e8:
31:1b:73:53:ce:68:04:86:6e:e3:e5:56:85:24:c5:
d1:89:63:9a:5c:fe:1c:cc:5d:bf:95:fe:cc:0a:c8:
2e:ce:5c:97:43:b9:0f:d4:77:62:f7:94:43:cc:ec:
15:91:41:67:15:ef:81:93:d6:39:68:f4:c8:31:95:
c7:a8:72:be:b4:6e:c3:d5:5f:70:f9:ae:55:88:d1:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C6:BE:10:F5:6B:2A:3D:C4:22:86:42:EF:09:15:2D:EA:B9:9A:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:407::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:6f:8e:c7:62:e8:d9:39:53:08:32:a8:40:b9:2c:ac:86:b1:
fa:dd:6f:cf:38:dc:1e:9f:f0:65:57:54:ab:20:d4:c3:eb:9d:
75:76:59:c0:96:0f:d2:31:3c:8a:df:86:5e:7b:7b:5a:e8:1a:
b5:1f:3f:89:9b:eb:9c:92:42:da:cf:36:0f:5b:bd:7b:b3:32:
3c:e8:eb:58:31:e3:1b:b2:20:da:2c:30:8f:ad:83:b5:18:0f:
3b:96:f7:b2:00:93:51:b4:0c:b9:fa:f9:31:76:1c:26:ef:3a:
21:23:e2:43:35:4d:90:fb:f3:be:71:d1:e2:b8:fc:d1:7a:d4:
81:41:5d:46:fe:3a:f5:b0:03:96:24:06:45:8c:c3:af:79:bd:
f3:5a:8b:3b:89:50:64:aa:0c:f2:fe:e5:90:33:48:92:d2:1d:
ec:63:83:35:32:d5:65:4f:a0:b3:4a:7b:72:da:ea:ea:43:0d:
8f:dd:2a:bf:d6:10:dc:39:e6:d6:76:37:86:5e:30:8e:95:7b:
e3:d0:ca:df:93:bb:e6:07:69:07:e5:20:ea:94:4c:d3:ec:b3:
4c:31:ff:dc:dc:b6:72:19:53:62:17:a1:60:99:dd:21:78:1e:
d5:f0:62:ea:a8:e5:d0:6c:d7:34:65:42:64:15:3e:c4:8d:11:
e5:a8:d7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 17:42:31 2025 by rpki-client