Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa
File: a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa (raw, json)
Hash identifier: DAUmTY2vyRRGlAFzStPQM/IejdBSGeF+9ahbsiOf1b4=
Subject key identifier: 72:AF:C8:D8:BD:8D:0B:0F:3A:02:CF:6F:3B:9D:56:77:02:ED:38:60
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584AF0F151054EC055B10A6C6220
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa
Signing time: Fri 22 Aug 2025 13:00:41 +0000
ROA not before: Fri 22 Aug 2025 13:00:41 +0000
ROA not after: Thu 20 Nov 2025 14:00:41 +0000
asID: 48006
IP address blocks: 2001:470:427::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Nov 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f0:f1:51:05:4e:c0:55:b1:0a:6c:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 22 13:00:41 2025 GMT
Not After : Nov 20 14:00:41 2025 GMT
Subject: CN=3a10219f-549c-4ddd-8f28-7064e75d833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:b8:79:e3:32:83:a5:6c:8e:fd:99:38:cf:
b3:28:92:45:3f:1c:a6:5a:1b:97:9e:0c:97:d9:32:
10:57:a5:bf:00:b8:a5:d9:40:3a:6a:08:05:18:d2:
f6:fc:cb:62:fd:ae:73:10:26:da:e2:a7:b8:91:89:
28:2e:25:ff:24:72:8a:4c:4d:07:5b:63:a4:25:a8:
bb:8b:63:6f:b7:1d:26:a4:3a:c0:26:a5:0f:87:5d:
df:08:0a:0f:5e:37:13:7a:23:5d:13:a3:ad:1d:5c:
ca:3f:12:cf:7a:78:e2:7d:c0:12:9e:2f:6f:bf:09:
3e:45:18:a1:c7:d3:17:12:7a:1f:00:35:09:cb:7e:
b0:46:ca:36:3a:06:d9:f4:66:74:d8:fc:38:6f:3a:
82:27:cc:bd:cf:75:2f:97:b6:01:3a:b6:de:59:37:
19:0c:48:80:56:77:75:d8:b8:7c:c0:78:5d:b1:98:
a5:b7:3b:94:76:5e:6c:4d:26:8d:43:2d:f9:bc:d4:
5e:6e:66:c9:68:a4:54:cc:24:f9:32:ae:0d:e9:88:
cf:0f:26:b9:25:84:7a:7c:3e:a2:93:e1:c6:20:6d:
42:d1:da:55:e6:ff:47:e0:85:92:74:ff:21:6a:fb:
ed:35:e4:13:9f:b1:e0:1f:6d:84:8c:de:16:02:7a:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:C8:D8:BD:8D:0B:0F:3A:02:CF:6F:3B:9D:56:77:02:ED:38:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:427::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b3:e6:2c:e9:04:d4:a3:41:74:1e:f4:f8:e5:a2:fe:d0:47:
aa:a6:40:ce:26:b4:21:7c:4a:06:1a:88:b1:3c:24:c1:10:91:
de:12:83:4e:d1:2b:50:a5:85:0f:cd:a1:6b:a6:38:a5:2b:71:
9f:5b:ab:cd:06:36:a5:07:7e:a7:ba:9c:55:97:f6:ad:63:19:
82:03:6b:9f:b8:06:0e:4d:07:22:11:51:db:b0:c5:2f:16:b4:
cc:a4:97:13:b3:ba:4e:c1:90:d9:c4:30:8b:4b:1d:f4:67:c0:
f7:09:f6:17:69:88:01:fe:d2:f2:82:95:b3:84:fb:8f:ac:71:
f0:6d:65:1b:49:06:e6:c4:cd:f8:9a:fc:ef:63:a1:7d:c0:90:
3d:69:9e:8a:78:be:14:af:95:03:66:cd:fb:52:8c:c7:6d:53:
f7:bc:c2:dd:59:40:75:b2:f0:4d:2a:e5:00:9e:81:32:33:32:
2b:cc:a7:29:6c:8d:3e:30:1a:67:3b:3d:3b:70:7f:04:42:aa:
78:4e:60:8b:f6:f7:96:b4:f3:20:be:28:dc:9c:fc:6d:47:a0:
b1:be:0a:4e:66:62:11:b9:5f:90:9c:65:51:d8:1e:3b:7b:f4:
42:ff:ab:d4:8a:f6:2c:08:79:fd:75:72:8c:4e:02:d7:b2:fe:
f0:2f:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:35 2025 by rpki-client