Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3e78c27-62e1-31b9-902a-ea7d54ac1b50.roa
File: c3e78c27-62e1-31b9-902a-ea7d54ac1b50.roa (raw, json)
Hash identifier: EXWir9glaSwPQ/iUtwrmdQfqeRnGkfTQ+/nFaOuu8fY=
Subject key identifier: AA:69:BB:87:C4:16:42:09:B2:6B:4F:9C:A8:2E:59:BB:05:A0:DF:C9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848B36A058A55465379F4AFD300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3e78c27-62e1-31b9-902a-ea7d54ac1b50.roa
Signing time: Wed 29 Jan 2025 02:30:12 +0000
ROA not before: Wed 29 Jan 2025 02:30:12 +0000
ROA not after: Tue 29 Apr 2025 01:30:12 +0000
asID: 59790
IP address blocks: 2001:470:3f7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Feb 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:6a:05:8a:55:46:53:79:f4:af:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 29 02:30:12 2025 GMT
Not After : Apr 29 01:30:12 2025 GMT
Subject: CN=ff1bbc0d-596e-43ee-94dc-c8cbe250a7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:ca:98:ec:28:41:48:20:8c:a4:b3:d5:00:
b0:ad:65:ef:f6:7e:bc:4a:38:9c:60:be:35:53:b3:
10:80:9c:e8:0b:2f:e1:99:6f:81:b4:09:24:32:be:
e2:bc:ad:a8:b4:b8:27:28:55:2e:5d:24:6c:43:ae:
1e:4c:d3:46:98:48:5a:00:68:d5:fb:1d:68:f1:2e:
59:1d:4c:ab:cf:b1:30:e4:36:52:b5:f0:30:d2:58:
d1:17:13:5d:88:db:38:2e:de:4b:a5:1a:29:5e:b9:
a9:a7:30:1e:56:4d:0a:62:4d:dc:9d:23:29:32:25:
79:d3:60:03:b9:1f:36:44:65:50:6b:20:37:cf:2d:
a7:6c:96:ce:ae:54:9d:7d:97:45:d2:5b:cb:a9:cf:
aa:75:96:a8:19:0f:e3:93:ad:9e:18:78:4d:0d:15:
cf:e4:ae:84:f4:86:dc:d3:a1:ac:f0:a3:77:a5:89:
2d:77:1a:3f:a4:2d:e2:a0:c9:b4:08:f7:b7:7b:16:
b1:60:f7:46:c0:35:dd:24:06:f1:26:f7:57:41:15:
06:21:19:10:b5:b5:aa:e8:3a:48:51:18:3c:7d:a3:
b1:b7:d4:28:18:8f:42:cf:64:fd:48:d8:7b:fe:a5:
72:76:71:7a:9e:65:76:66:0d:ce:90:f2:6c:5e:0b:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:69:BB:87:C4:16:42:09:B2:6B:4F:9C:A8:2E:59:BB:05:A0:DF:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3e78c27-62e1-31b9-902a-ea7d54ac1b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:93:74:09:c8:28:1f:77:f5:85:37:cf:de:17:23:bd:35:9c:
57:45:62:65:22:d4:66:47:81:53:0d:a9:41:b6:d1:c1:a4:9d:
18:33:cb:57:de:33:6c:5b:74:51:2a:20:a4:0b:eb:78:bf:80:
64:2a:ef:13:75:fe:1e:c6:96:04:cf:ad:69:08:71:96:2b:89:
56:47:be:42:c0:1e:bc:9c:e9:55:7a:45:59:03:5a:8c:78:56:
4c:26:2d:68:3f:9e:f5:bd:06:2a:94:8c:1d:42:e3:77:9d:78:
40:59:cd:9d:a3:c9:7d:cf:56:13:9b:e8:a7:e6:8a:92:c1:d8:
55:f1:f3:88:0a:76:8e:2d:06:06:2e:af:3d:c3:6c:39:52:0f:
9a:a7:ff:3b:3e:1e:90:cf:b6:7e:5a:52:41:8a:bf:a4:87:8e:
7a:48:f2:8d:05:6a:65:53:5e:17:1d:0e:0d:17:bd:90:1c:87:
bc:06:bd:74:1e:45:8e:7a:35:05:6a:14:93:90:3c:ff:5e:33:
43:dd:4b:a1:a3:aa:a7:2c:09:3d:79:30:e5:e5:02:82:67:cf:
da:cc:3a:bf:b3:bb:fc:2e:ba:a1:d4:f6:70:70:0f:58:0d:c6:
8c:f4:af:26:b5:bf:b3:9c:ce:d1:bb:a5:0a:e6:84:ce:39:23:
64:56:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 16:18:53 2025 by rpki-client