Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96cb2909-77de-3c36-a1c6-c54cf3f9a49d.roa
File: 96cb2909-77de-3c36-a1c6-c54cf3f9a49d.roa (raw, json)
Hash identifier: O6B+F3qsiBBo6zAxuDHR3M2TB0yjLiunYSkMQcrNvMA=
Subject key identifier: 35:98:69:9B:88:5C:F8:62:BF:AE:84:02:85:5E:FB:54:2E:C0:EE:0C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584925C24AB3CC3268F363EEC600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96cb2909-77de-3c36-a1c6-c54cf3f9a49d.roa
Signing time: Tue 11 Mar 2025 01:30:12 +0000
ROA not before: Tue 11 Mar 2025 01:30:12 +0000
ROA not after: Mon 09 Jun 2025 01:30:12 +0000
asID: 13002
IP address blocks: 2001:470:422::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Mar 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:c2:4a:b3:cc:32:68:f3:63:ee:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 11 01:30:12 2025 GMT
Not After : Jun 9 01:30:12 2025 GMT
Subject: CN=f29526e5-3009-44f7-bde3-be64af7e099b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:ad:3c:21:95:2b:8b:e5:ef:6b:ad:c8:0d:
6c:c2:a4:23:5c:b7:98:0b:b5:b5:2f:75:39:f9:04:
74:ee:e0:a8:d7:f8:72:e3:74:02:83:43:56:89:9d:
5a:b8:88:a5:e3:92:d3:d5:1e:e0:b0:3c:4c:24:42:
ef:32:a6:03:e6:6c:41:dd:47:a5:29:23:30:3c:97:
e9:65:a8:5c:40:82:2c:f0:78:7b:d7:54:ca:a7:a7:
df:e6:7b:3c:cf:cc:8a:1b:b3:3b:9b:30:5b:a8:b6:
eb:21:3d:c4:54:20:09:14:fa:f2:a5:07:71:be:de:
9f:ca:a6:14:a2:cb:cc:2d:60:c2:80:9f:db:eb:95:
65:be:9b:55:43:aa:f9:8e:16:10:59:d6:1f:52:bc:
ac:2c:97:c9:e2:f4:79:f1:a8:6b:71:d9:c0:d9:c2:
57:ea:56:09:f6:59:bb:20:07:dd:8e:58:37:b3:7f:
3d:09:e1:57:5a:cf:2e:a7:d0:6e:5d:f4:2f:1b:2f:
26:f0:d3:d2:01:42:6d:a3:de:3b:f8:16:c0:21:b2:
e9:52:49:ff:96:cc:c7:79:7c:36:e9:e4:e5:2f:f1:
ff:b7:60:43:7e:26:1b:0e:7a:17:c0:ab:3d:95:d5:
00:57:be:16:fc:bf:73:f1:79:fd:9a:c7:3b:39:9e:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:69:9B:88:5C:F8:62:BF:AE:84:02:85:5E:FB:54:2E:C0:EE:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96cb2909-77de-3c36-a1c6-c54cf3f9a49d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:422::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:43:3f:1b:0b:96:08:3c:84:76:bd:13:54:dd:75:69:ec:aa:
f8:e8:23:13:1e:10:91:db:b7:ff:42:d0:62:d3:f5:33:a0:65:
5e:c4:33:e3:09:22:2d:b6:84:0c:e6:bb:67:e6:8d:ee:a5:76:
47:45:ee:bb:66:92:23:98:00:2e:16:02:d7:65:6a:27:f5:cc:
96:04:d4:f5:93:e0:1b:4f:a9:d8:da:18:26:7f:b1:9e:c0:a8:
59:fb:7d:15:3c:ad:8c:0c:9a:53:c0:c5:83:66:4d:da:26:62:
e4:ac:6f:14:75:9e:7c:cf:04:ef:42:a7:01:3d:57:c3:e1:55:
a6:b4:3e:f3:b4:ae:cd:96:6d:5a:ec:9f:6a:f1:01:d3:b0:64:
8e:f7:7b:43:83:1d:2b:ee:a5:54:20:83:30:c8:e7:6e:f4:7c:
07:17:69:54:5d:7d:92:99:33:68:32:e7:8b:60:2a:39:e6:96:
17:37:63:5d:2d:b9:f6:19:6c:4f:25:80:2f:52:06:e2:2c:ac:
b5:12:13:bb:58:1d:b0:3e:0c:40:c3:26:50:39:34:c1:6c:de:
62:0d:50:a7:3b:31:8e:e4:40:1a:19:fe:6d:ca:82:a6:89:28:
b9:34:6f:6e:48:5b:c8:f2:cc:e0:8c:fd:ad:f5:49:2a:17:4a:
d1:16:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:22:56 2025 by rpki-client