Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
File: 90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa (raw, json)
Hash identifier: fV96CobACP+HRSJP12uag8k1mTinZa4pDCbKm+MJ3ws=
Subject key identifier: 8E:B8:6C:45:E1:43:C2:C3:79:07:BA:AC:4E:5F:3C:F4:F7:8D:67:2E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849D85FCCAFFE6698A48EE91460
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
Signing time: Wed 14 May 2025 01:00:47 +0000
ROA not before: Wed 14 May 2025 01:00:47 +0000
ROA not after: Tue 12 Aug 2025 01:00:47 +0000
asID: 36902
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:5f:cc:af:fe:66:98:a4:8e:e9:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 14 01:00:47 2025 GMT
Not After : Aug 12 01:00:47 2025 GMT
Subject: CN=c5b2618f-4d8b-4375-8cd8-1c3b7ff23cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:c8:0c:cd:75:34:c2:d9:0b:ed:bf:05:53:
f9:93:83:5f:0d:e8:c3:90:e2:e7:4c:e7:54:81:66:
7c:df:ea:23:bc:f7:8b:f7:e0:f8:c9:64:e0:e8:58:
ba:84:59:76:54:b1:3b:e4:b2:bc:bd:48:59:6f:ca:
88:38:06:1a:e9:9f:1e:e4:95:9b:6b:fd:bd:52:39:
05:6f:b0:66:70:bf:c7:98:ed:17:6d:63:ad:67:a9:
d1:af:d9:a2:2e:2b:09:64:39:0a:8a:69:47:57:93:
09:a1:16:07:66:38:5f:92:af:81:ea:70:fd:ea:24:
19:56:ec:2c:92:9e:4e:da:bc:61:52:42:1d:36:7f:
b7:25:6b:9f:c0:82:00:a7:a2:5f:ca:04:e1:d1:72:
95:06:ea:37:1b:5a:38:88:ad:0d:4d:31:fc:66:50:
89:98:52:ba:c9:dc:f0:d2:ed:86:d3:f8:05:4e:5f:
4e:75:4e:0e:71:e0:5d:88:e7:c9:07:24:78:3e:ce:
b8:9a:e8:40:ba:b7:8c:6a:e8:b3:2d:c8:ce:be:72:
d1:37:01:f1:05:cc:d1:97:8d:a3:27:c2:9f:d3:7a:
64:a2:13:6b:b4:4e:d8:56:c4:7b:e7:65:6b:d9:24:
34:6b:c7:fb:71:ea:4a:8d:3d:c1:10:a5:43:ad:f7:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:6C:45:E1:43:C2:C3:79:07:BA:AC:4E:5F:3C:F4:F7:8D:67:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90a432ae-47f2-36e2-a62a-ed337abdaa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:36:df:da:2b:b6:17:fc:25:96:68:8b:54:2f:ca:30:9d:ab:
ac:4b:d7:e7:55:4a:0b:3e:c3:e0:61:a6:06:60:1f:7c:c9:48:
87:5e:db:63:a5:1f:1a:a2:2e:b8:d7:63:38:b8:92:3f:df:10:
f6:b4:17:1f:9c:3e:61:a1:e3:66:9d:2e:d1:71:61:f5:e7:42:
a9:e2:42:09:a8:b2:a0:6f:ae:e8:07:d8:73:a3:a9:51:97:5b:
03:2f:69:cd:a0:df:35:36:6b:08:96:a1:73:c5:df:00:61:fb:
1a:d3:1e:c0:50:24:48:11:61:f4:a8:21:0c:d2:5f:bf:71:4f:
64:ea:25:d1:5b:3c:db:fb:fe:9d:32:f3:1c:f0:98:10:53:45:
88:ed:aa:d6:91:b6:a3:e4:92:1f:df:da:53:1e:cc:87:f9:c0:
d7:ea:fd:13:26:6b:f0:33:88:cc:e8:78:1b:4e:0a:9b:bf:f5:
dd:52:2b:a3:63:95:c4:83:85:34:97:8f:84:4a:ed:6d:33:36:
97:eb:d0:4e:56:0c:a9:fc:e1:5d:14:47:73:ea:fb:d0:5b:29:
e0:30:2f:8f:e0:41:1f:f5:4d:f5:1f:82:74:df:d8:75:07:80:
da:66:fc:96:81:6d:0b:08:bb:9d:bd:19:a7:01:01:10:f8:57:
af:d2:38:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8yv/maYpI7pFGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YzViMjYxOGYtNGQ4Yi00Mzc1LThjZDgtMWMzYjdmZjIzY2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqarIDM11NMLZC+2/BVP5k4NfDejDkOLnTOdU
gWZ83+ojvPeL9+D4yWTg6Fi6hFl2VLE75LK8vUhZb8qIOAYa6Z8e5JWba/29UjkF
b7BmcL/HmO0XbWOtZ6nRr9miLisJZDkKimlHV5MJoRYHZjhfkq+B6nD96iQZVuws
kp5O2rxhUkIdNn+3JWufwIIAp6JfygTh0XKVBuo3G1o4iK0NTTH8ZlCJmFK6ydzw
0u2G0/gFTl9OdU4OceBdiOfJByR4Ps64muhAureMauizLcjOvnLRNwHxBczRl42j
J8Kf03pkohNrtE7YVsR752Vr2SQ0a8f7cepKjT3BEKVDrfclwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI64bEXhQ8LDeQe6rE5fPPT3jWcuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTBhNDMyYWUtNDdmMi0z
NmUyLWE2MmEtZWQzMzdhYmRhYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALg239orthf8JZZoi1QvyjCdq6xL1+dVSgs+w+BhpgZgH3zJSIde
22OlHxqiLrjXYzi4kj/fEPa0Fx+cPmGh42adLtFxYfXnQqniQgmosqBvrugH2HOj
qVGXWwMvac2g3zU2awiWoXPF3wBh+xrTHsBQJEgRYfSoIQzSX79xT2TqJdFbPNv7
/p0y8xzwmBBTRYjtqtaRtqPkkh/f2lMezIf5wNfq/RMma/AziMzoeBtOCpu/9d1S
K6NjlcSDhTSXj4RK7W0zNpfr0E5WDKn84V0UR3Pq+9BbKeAwL4/gQR/1TfUfgnTf
2HUHgNpm/JaBbQsIu529GacBARD4V6/SONo=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:21 2025 by rpki-client