Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a273b0ad-50c1-3b23-807f-e7a927fb868a.roa
File: a273b0ad-50c1-3b23-807f-e7a927fb868a.roa (raw, json)
Hash identifier: mi+aSWh3ICZJsU7TX2GToeBWKCcg+fi+bGs79vq+NSQ=
Subject key identifier: 99:0E:8F:84:5D:E4:4E:32:B2:2E:27:6A:CD:70:A1:BD:24:4F:E8:87
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D7472327E73F943018A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a273b0ad-50c1-3b23-807f-e7a927fb868a.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 36225
IP address blocks: 2001:470:90::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d7:47:23:27:e7:3f:94:30:18:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=cf986702-7ff7-4b8c-b10a-13bf10c7278d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:a5:e7:47:1f:c8:92:81:b4:b0:0d:55:aa:
98:28:16:ba:40:fe:64:d0:5b:5e:84:4d:c6:d7:57:
07:2d:e1:62:16:a1:c1:da:4f:d0:b0:85:66:eb:bf:
8d:14:b9:1b:e9:bd:b5:46:b8:24:69:d6:fd:7b:e0:
36:46:e1:9c:82:17:1e:65:33:5a:12:9e:b4:25:b7:
a5:8e:63:5b:4e:15:c1:32:d0:5e:74:42:56:a8:2a:
fd:6f:4a:97:b3:3c:13:de:3a:6f:cc:62:c1:7b:bf:
6a:99:28:0f:96:ca:2c:19:e9:35:69:8f:26:d5:0b:
cb:cf:e4:ec:50:c9:6d:9f:48:77:6b:d9:b0:eb:f3:
2f:e1:ed:2a:07:83:9b:5e:01:2d:c6:55:f0:cb:20:
bc:f4:68:dd:ab:30:52:41:a7:4c:95:d8:7d:66:2f:
13:b0:d5:b3:0f:d9:9f:4b:5e:d8:42:a8:1d:d9:1d:
e7:c1:87:f8:90:06:df:86:3e:8f:a6:c3:07:80:6b:
21:13:ea:9c:8e:32:05:36:b3:97:32:12:2f:55:81:
01:b6:ae:ac:bd:aa:27:5f:ec:a0:fd:e6:a6:66:e3:
e3:a3:7b:f6:42:e4:1e:e8:f0:d0:f3:e5:91:a6:ca:
e9:98:23:5c:c2:bc:a1:e5:98:32:1f:c5:98:11:7e:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:8F:84:5D:E4:4E:32:B2:2E:27:6A:CD:70:A1:BD:24:4F:E8:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a273b0ad-50c1-3b23-807f-e7a927fb868a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:90::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:e4:49:9b:96:bc:7d:a0:e4:44:b8:99:e4:58:ff:59:65:81:
8e:3a:2e:f7:e0:5e:f0:92:f3:3e:78:74:8f:9a:6a:6a:b0:bf:
c8:97:b0:84:3c:e6:7c:82:c6:e8:8b:3e:55:66:62:2b:ff:57:
0c:dd:13:52:87:0e:b7:c4:6b:67:7b:0c:b6:7e:4a:c3:66:ab:
cb:40:f1:ad:c1:4c:70:24:7c:62:9d:6e:6b:ef:07:e6:5d:8c:
91:0d:2b:48:7f:cc:37:0d:a8:e5:24:ed:8c:d6:40:9a:b5:f5:
b7:9a:cb:4e:89:df:27:f1:36:bb:10:1a:77:82:fa:f8:fe:38:
8d:65:e4:4f:de:37:63:86:50:57:3c:90:1c:5a:c7:fd:24:19:
76:0a:48:f2:6f:35:73:1a:6c:bf:2a:cc:f0:2c:69:72:88:58:
10:a7:18:44:a5:e4:ef:fa:43:3c:92:0a:1d:f3:b7:91:45:bd:
85:90:91:84:2a:b2:f6:48:a5:2a:ce:e2:77:58:2c:a6:db:8a:
cf:f9:4b:77:3e:e1:36:43:70:89:8f:57:93:ee:ad:5e:c7:dd:
71:10:24:ca:77:d4:8c:bf:43:25:aa:fe:84:15:7e:e2:4a:4b:
08:5f:66:73:de:f5:a4:06:21:54:6e:57:ae:57:30:12:35:23:
32:98:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:30:32 2025 by rpki-client