Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f7bea47-5448-3d0d-b371-c8b92d7bbfc1.roa
File: 8f7bea47-5448-3d0d-b371-c8b92d7bbfc1.roa (raw, json)
Hash identifier: sWDPc/hkQunVGqJMQHKyxqG7xyXvSXQLWEeguu9dQew=
Subject key identifier: 8C:19:AE:2B:B6:45:C8:60:AF:10:41:40:EB:77:0A:5F:8B:F5:BC:59
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848EE0A65931586435F3C4FB040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f7bea47-5448-3d0d-b371-c8b92d7bbfc1.roa
Signing time: Wed 19 Feb 2025 02:30:13 +0000
ROA not before: Wed 19 Feb 2025 02:30:13 +0000
ROA not after: Tue 20 May 2025 01:30:13 +0000
asID: 13002
IP address blocks: 2001:470:3f7::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Mar 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ee:0a:65:93:15:86:43:5f:3c:4f:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 19 02:30:13 2025 GMT
Not After : May 20 01:30:13 2025 GMT
Subject: CN=384f091b-7a50-4ad5-a6bb-9d22f49d82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:a2:b6:e8:84:ee:46:6a:36:37:bf:73:99:
21:01:b8:da:51:9c:a6:40:85:5d:1d:50:4c:7c:25:
21:15:2c:f3:12:08:4a:f4:50:9a:97:a2:cd:9a:8e:
00:f6:dc:b9:91:5d:de:0a:bf:ed:c7:78:fc:2b:90:
0b:2f:8f:58:c3:6c:87:09:62:c6:96:32:b5:51:b7:
ce:4f:18:09:83:70:d6:03:2c:1c:4e:a3:83:35:22:
ab:7e:e9:89:86:62:34:f2:a2:98:94:a4:ec:86:30:
89:4b:12:c3:b2:42:f7:f6:33:72:4f:5c:e3:a5:2f:
f7:92:a0:95:e8:f2:86:4a:30:e7:11:e2:e1:08:38:
04:6d:46:09:30:44:2d:ca:f8:76:85:ed:78:0e:ff:
10:29:13:57:4d:4a:2b:3c:ad:14:24:e9:d6:d3:07:
42:28:55:83:32:fa:ed:77:7d:e2:7f:bf:6f:80:1f:
5d:57:2e:5a:91:e1:90:e2:be:46:69:83:c4:8e:ea:
44:e8:da:30:f7:e9:2d:59:86:c1:b5:65:e4:7e:14:
1c:14:3b:79:11:e7:5c:f6:b4:58:e9:20:ab:e0:53:
04:e0:f8:46:34:0b:27:25:bf:6d:7f:59:6f:73:27:
63:ec:cb:fe:ce:12:fe:44:b5:73:da:1d:02:6c:63:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:AE:2B:B6:45:C8:60:AF:10:41:40:EB:77:0A:5F:8B:F5:BC:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f7bea47-5448-3d0d-b371-c8b92d7bbfc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:64:cd:de:b0:b8:64:87:d9:bf:67:35:94:6d:5e:9b:d0:20:
ae:03:c4:8e:c8:0f:71:7b:b7:ca:5d:fc:5f:5f:59:c1:7b:5f:
41:19:2f:57:43:5a:be:d5:28:95:6b:70:d8:fe:c0:c4:e1:01:
84:4c:c5:75:e7:3c:cb:01:f3:1e:f8:37:84:3d:4a:9c:bd:81:
e4:2d:89:38:15:e0:da:34:b2:68:b1:46:13:94:c7:14:f9:90:
eb:d8:98:99:6d:dd:88:1b:4b:cd:04:b0:0d:59:34:32:13:46:
98:34:4c:b3:11:34:26:4c:c5:ef:44:43:e1:ca:f8:56:0a:e9:
bd:db:19:48:07:57:bc:b6:b5:39:14:99:79:51:30:6a:7e:af:
ae:b9:9a:01:a8:d1:3b:33:78:41:e8:6b:4f:53:5b:b1:56:46:
f8:f9:03:53:ee:3f:40:fc:7c:23:12:84:52:53:8b:eb:85:68:
c0:11:c0:0a:9c:70:dd:60:18:59:c6:bb:69:0c:39:7c:b8:16:
ad:30:bf:38:ac:27:c2:77:e4:28:4e:81:03:c5:0e:51:b1:94:
3a:56:1a:08:50:3d:1c:be:33:91:a1:1c:bd:5d:12:dd:a1:71:
2b:a2:0d:d0:db:b6:bc:7f:75:67:a8:2f:ea:91:8f:76:a3:29:
9e:f6:9e:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjuCmWTFYZDXzxPsEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIxOTAyMzAxM1oXDTI1MDUyMDAxMzAxM1owLzEtMCsGA1UEAxMk
Mzg0ZjA5MWItN2E1MC00YWQ1LWE2YmItOWQyMmY0OWQ4MmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwaituiE7kZqNje/c5khAbjaUZymQIVdHVBM
fCUhFSzzEghK9FCal6LNmo4A9ty5kV3eCr/tx3j8K5ALL49Yw2yHCWLGljK1UbfO
TxgJg3DWAywcTqODNSKrfumJhmI08qKYlKTshjCJSxLDskL39jNyT1zjpS/3kqCV
6PKGSjDnEeLhCDgEbUYJMEQtyvh2he14Dv8QKRNXTUorPK0UJOnW0wdCKFWDMvrt
d33if79vgB9dVy5akeGQ4r5GaYPEjupE6Now9+ktWYbBtWXkfhQcFDt5Eedc9rRY
6SCr4FME4PhGNAsnJb9tf1lvcydj7Mv+zhL+RLVz2h0CbGP0qwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIwZriu2RchgrxBBQOt3Cl+L9bxZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGY3YmVhNDctNTQ0OC0z
ZDBkLWIzNzEtYzhiOTJkN2JiZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEFkzd6wuGSH2b9nNZRtXpvQIK4DxI7ID3F7t8pd/F9fWcF7X0EZ
L1dDWr7VKJVrcNj+wMThAYRMxXXnPMsB8x74N4Q9Spy9geQtiTgV4No0smixRhOU
xxT5kOvYmJlt3YgbS80EsA1ZNDITRpg0TLMRNCZMxe9EQ+HK+FYK6b3bGUgHV7y2
tTkUmXlRMGp+r665mgGo0TszeEHoa09TW7FWRvj5A1PuP0D8fCMShFJTi+uFaMAR
wAqccN1gGFnGu2kMOXy4Fq0wvzisJ8J35ChOgQPFDlGxlDpWGghQPRy+M5GhHL1d
Et2hcSuiDdDbtrx/dWeoL+qRj3ajKZ72nqU=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:26:10 2025 by rpki-client