Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d489cb4b-3ce7-355e-8631-e47fdac4c66f.roa
File: d489cb4b-3ce7-355e-8631-e47fdac4c66f.roa (raw, json)
Hash identifier: Ezbmfwqrs/WhqgiBomeioVOZZCkbjAxkPmwzNgJ3C3Y=
Subject key identifier: 3E:2C:28:F6:BA:29:0D:2F:FE:89:C9:AF:D3:A1:22:F0:9D:BA:7E:28
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849D85FE05FE60BEA3EA9CB3960
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d489cb4b-3ce7-355e-8631-e47fdac4c66f.roa
Signing time: Wed 14 May 2025 01:00:47 +0000
ROA not before: Wed 14 May 2025 01:00:47 +0000
ROA not after: Tue 12 Aug 2025 01:00:47 +0000
asID: 31856
IP address blocks: 2001:470:18a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Jun 2025 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:5f:e0:5f:e6:0b:ea:3e:a9:cb:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 14 01:00:47 2025 GMT
Not After : Aug 12 01:00:47 2025 GMT
Subject: CN=49454b52-5230-41e5-a81f-97f51bd032c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:61:c2:7d:d2:6a:e8:db:20:4c:f4:b7:93:
d3:da:e9:a7:6f:99:aa:8b:3c:53:99:ca:0d:e7:d6:
77:d3:bf:87:bb:6c:ba:c9:dd:a3:ef:60:ed:fd:24:
c8:13:20:06:de:54:59:5c:7b:2b:c7:7a:46:d8:8a:
58:4b:fd:0f:a6:9a:ce:46:82:b6:d5:32:7c:f0:d9:
d2:d1:3c:42:f3:e1:55:13:34:83:74:b3:28:80:76:
11:e5:4a:eb:63:52:c8:e7:0b:de:94:57:08:6b:17:
f6:db:c5:4b:fb:a9:2d:a9:47:8e:89:ba:d6:88:3d:
3b:4e:1f:04:a6:46:fb:56:d4:88:cc:30:d3:ce:6a:
ad:93:93:5a:cf:f1:33:7c:76:30:98:8e:a5:a1:c5:
4e:7d:ab:23:72:4a:a4:00:81:1d:ff:98:24:3b:93:
1b:14:9c:34:6b:74:ea:38:e7:73:7e:97:b5:93:55:
18:55:53:30:3b:5e:62:f3:3c:b0:be:e5:a4:83:43:
61:1e:ef:66:cf:89:f9:d9:d9:09:47:af:00:5a:98:
84:d3:63:f0:6c:5d:55:d4:d0:93:79:73:ba:0a:89:
92:d3:1a:15:96:9d:7b:63:e1:fc:45:2f:6c:51:35:
38:c4:70:0c:5e:3e:42:e9:b3:b8:56:59:e9:d0:ba:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:28:F6:BA:29:0D:2F:FE:89:C9:AF:D3:A1:22:F0:9D:BA:7E:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d489cb4b-3ce7-355e-8631-e47fdac4c66f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:18a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:f5:00:d5:75:87:d1:97:c2:b4:df:f8:d2:90:b2:05:4d:7a:
3f:6d:a2:6a:9d:56:a8:a1:5a:2d:04:c2:35:91:42:a6:28:01:
a0:4d:b8:b3:e6:40:5e:e5:f7:0b:0f:78:42:f6:cf:d7:1d:f8:
ce:b8:ee:f1:f0:5e:e9:88:a1:b4:ee:22:1f:f7:67:78:f4:7d:
d0:58:d7:1c:ea:91:76:d7:55:ec:db:33:10:80:40:15:63:cc:
f4:d5:53:40:9e:c1:ec:67:ea:fc:92:02:81:1f:85:8a:87:5f:
f2:f3:4a:ae:8c:b0:5a:2a:ff:ba:b1:98:8e:e1:b9:d9:ab:b5:
ec:d2:2a:d9:e4:94:9e:7a:48:89:f2:96:9a:f9:42:67:0e:59:
b1:03:20:1e:a9:fa:2e:43:28:9c:b7:fa:ed:7f:69:13:f1:89:
3c:03:cf:d9:45:62:0e:3d:f8:cd:48:02:85:a5:ad:eb:98:61:
1f:15:4b:6d:d0:4b:ce:eb:15:7f:39:d0:fe:fb:04:1a:79:57:
dd:a4:33:a6:a5:f4:8a:83:ac:85:c9:3b:8b:59:3f:65:e4:5a:
89:d5:80:76:cf:94:40:c3:8c:17:8f:0f:12:f7:6b:41:f1:c2:
ed:f2:a4:6a:40:c5:b3:17:74:16:62:8f:c6:81:9f:03:3b:04:
96:89:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:16:04 2025 by rpki-client