Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa
File: a232f75c-46e8-3d93-8406-d3f904ca2565.roa (raw, json)
Hash identifier: 9xoeEviZR3i0/bcdg7JK51ZJyclB1RW9tbSu7vwYMmM=
Subject key identifier: F1:D6:B2:0C:42:19:82:EA:89:13:82:9E:BA:E2:54:47:8D:F5:1C:0B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584A9FFBB9DFD9AF64F89B877780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa
Signing time: Thu 24 Jul 2025 13:01:02 +0000
ROA not before: Thu 24 Jul 2025 13:01:02 +0000
ROA not after: Wed 22 Oct 2025 13:01:02 +0000
asID: 32489
IP address blocks: 2001:470:3d5::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 31 Jul 2025 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:9f:fb:b9:df:d9:af:64:f8:9b:87:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 24 13:01:02 2025 GMT
Not After : Oct 22 13:01:02 2025 GMT
Subject: CN=6acc072b-d970-4f93-ba14-eff17443b404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:b8:3d:f4:dd:22:6d:5c:d5:51:66:10:fa:
66:16:07:88:71:c3:e2:c6:71:85:40:e1:89:c7:f2:
d1:7e:9a:2e:28:1f:d0:50:65:cc:35:bb:56:a2:34:
13:a4:e2:c5:33:5b:e7:a7:6d:1a:17:7d:10:51:30:
50:1e:a1:0b:23:29:7c:e5:3e:bc:64:dc:5b:62:92:
e6:7e:9a:95:10:e7:9b:83:e4:4d:61:22:1a:8b:7e:
7a:92:50:93:c3:b9:00:b1:e2:a9:63:b3:e8:45:1b:
dd:72:bb:2c:bd:52:07:38:b5:d0:76:d7:cd:1b:72:
8c:c6:43:c6:b0:ef:c1:58:c0:bd:49:81:6c:46:35:
05:8a:c2:19:b6:2f:0b:8a:94:9e:69:99:8c:f4:fe:
17:9f:dc:f7:55:36:8b:6a:a3:61:25:5f:98:65:0e:
cd:9c:4a:7f:78:bc:38:ae:59:16:40:d9:7d:8f:27:
31:8e:3c:fe:46:96:7f:60:f9:bf:3a:2b:9e:31:53:
13:f9:08:8c:69:f8:9f:72:7f:1a:73:e2:a2:e7:85:
0e:ae:de:c2:e2:05:bc:bf:34:5b:b5:a8:1d:15:02:
2f:37:03:ff:d7:a5:30:07:a7:b3:f3:80:e2:27:2f:
77:6b:be:97:33:c5:78:1f:0b:23:b2:b5:27:2c:f5:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D6:B2:0C:42:19:82:EA:89:13:82:9E:BA:E2:54:47:8D:F5:1C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3d5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:06:75:2f:63:b5:40:1f:fa:c6:30:a6:45:e4:6a:5e:6f:f5:
e1:09:2e:5f:86:89:93:d1:de:25:b8:f2:b7:b4:ae:69:b8:84:
7c:81:ec:f0:af:b6:23:0d:da:e8:bb:fa:bf:36:4f:b0:68:f1:
3c:87:17:5b:32:23:5b:97:89:99:66:e6:34:62:46:f9:88:5b:
09:27:1f:61:29:b2:8d:54:b8:6f:77:66:91:73:58:2b:95:ec:
78:b9:b8:2f:cd:0c:38:30:dd:c2:a1:1b:4c:a7:f1:69:88:b1:
b1:67:7a:9f:d8:1f:4f:e9:08:8b:b1:4a:29:c2:69:68:80:2e:
75:74:10:8c:3b:08:d0:88:3f:83:ba:ff:83:11:d6:e7:b1:51:
d2:65:92:58:8a:f8:19:de:a5:ff:f7:ef:fd:b0:99:95:3e:03:
83:35:d9:c2:6b:c4:43:16:bc:b9:c1:a0:ea:a6:07:9d:66:4a:
c8:27:58:cf:a0:2c:4c:aa:56:eb:b0:5f:7b:f3:cd:88:5e:65:
f6:f9:81:7d:d5:c0:79:12:41:e2:49:55:92:2f:fb:c7:ef:66:
8f:26:7a:c7:69:f0:52:9c:ec:a7:1b:3b:ee:37:28:58:01:4f:
4f:9e:26:cb:82:b4:f5:0d:bc:11:f1:30:b4:2c:d2:0a:ed:51:
84:51:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:20:33 2025 by rpki-client