Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aed2c6a8-fda4-33d5-87a4-d7b5699ceb46.roa
File: aed2c6a8-fda4-33d5-87a4-d7b5699ceb46.roa (raw, json)
Hash identifier: jhIJ3/6e9T+/iNV0ol3HzDgV4fNS79I9WtoQTAzM4Qk=
Subject key identifier: CF:3B:9C:63:E1:51:89:05:C3:1E:4D:23:E9:37:51:AE:66:3B:6E:5F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F66A711CA0446EC633C9F500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aed2c6a8-fda4-33d5-87a4-d7b5699ceb46.roa
Signing time: Sat 22 Feb 2025 02:30:12 +0000
ROA not before: Sat 22 Feb 2025 02:30:12 +0000
ROA not after: Fri 23 May 2025 01:30:12 +0000
asID: 212602
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:6a:71:1c:a0:44:6e:c6:33:c9:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 22 02:30:12 2025 GMT
Not After : May 23 01:30:12 2025 GMT
Subject: CN=a5217544-5cf0-4406-836d-19cac95a9309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:d3:8d:f6:3e:e0:a9:d8:7d:04:cc:d8:06:
87:43:6b:f0:df:ec:3f:41:12:0f:77:1a:4b:df:c6:
77:81:b5:77:64:77:6b:58:66:77:b2:d7:f7:48:81:
96:f4:46:47:cd:6e:92:3e:23:fa:c8:63:6b:80:fd:
0f:fe:34:78:9b:3f:43:93:c1:38:fe:32:0d:91:ba:
92:2f:4e:dc:d5:16:7a:3e:69:46:ab:da:ed:eb:22:
e2:ec:a3:27:70:d4:d7:62:27:2f:ba:3c:e0:cc:4f:
6f:15:f2:37:12:a2:c4:67:cb:12:d3:72:4e:a4:d4:
ce:17:66:90:0c:94:6a:c5:5f:7d:f5:0d:9d:86:2a:
5a:e3:9c:51:b5:70:a2:d2:c8:97:10:b6:0f:fa:d3:
f1:32:60:bc:09:14:34:da:fe:25:d6:58:c4:35:19:
3e:68:d5:21:b4:0d:07:89:e6:f4:8f:66:49:ef:a0:
29:28:0f:03:2e:32:21:e0:be:36:0f:1f:94:8a:6c:
4b:f9:57:07:29:00:31:5f:0a:73:b5:10:dd:94:83:
2b:e8:26:8a:cf:cb:7e:31:ca:ae:f2:86:43:93:ee:
93:e0:54:7b:d3:97:6c:24:93:d3:9a:14:81:36:a6:
8c:35:48:ec:ea:b8:13:83:c4:b7:c0:79:e7:71:9c:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:9C:63:E1:51:89:05:C3:1E:4D:23:E9:37:51:AE:66:3B:6E:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aed2c6a8-fda4-33d5-87a4-d7b5699ceb46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d7:1c:63:c8:d2:dc:64:c4:11:35:53:c8:a5:be:5b:5c:7d:
16:dc:b5:0b:92:64:56:ff:81:18:a8:c5:1a:55:09:76:26:2d:
aa:35:d7:69:99:aa:ca:34:e5:b1:d5:d5:be:6b:a3:a6:22:14:
ba:e5:c6:1b:5c:8a:b4:1b:ab:37:95:62:72:f0:72:57:ea:b0:
65:d0:78:71:49:38:af:50:04:0f:fc:07:4a:fd:6b:91:4a:af:
24:1b:16:e6:eb:13:ea:4f:5d:38:9a:bd:d9:8c:51:b1:5a:1d:
ae:62:22:c2:11:d0:8b:60:f1:b1:00:cb:62:2a:83:fd:55:69:
9c:5d:7e:09:5f:be:d7:e0:2c:6d:6e:2b:90:b5:e6:99:fc:b0:
44:e8:48:52:63:b0:7c:d9:ea:5f:73:fd:e3:78:37:17:65:17:
31:69:e9:b1:38:b3:c4:db:68:0b:88:0a:2d:78:b5:ad:f8:c2:
6e:50:2e:34:93:b7:df:fc:1d:a3:f3:ab:75:cb:e9:f1:0f:31:
ad:df:6d:c8:7e:c8:25:d6:5a:17:3e:8d:3e:b3:67:38:f6:c7:
6c:37:6a:21:cd:2c:d6:53:a1:19:58:02:0c:59:77:d3:99:d3:
12:12:9f:c2:f7:6d:94:0d:c6:00:d5:18:48:15:c7:48:96:db:
7d:77:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:20:57 2025 by rpki-client