Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de1956e8-9633-3a91-8e57-bcea4f2a143c.roa
File: de1956e8-9633-3a91-8e57-bcea4f2a143c.roa (raw, json)
Hash identifier: SSL/Um9qd1OzwX7aK5O/vHRH9S/SkBFVHeamW+EbO/Q=
Subject key identifier: 10:0F:4A:FF:27:C6:02:E1:10:B6:EF:4A:AB:6B:8C:6B:63:FC:3F:8F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849019530C1B52215FCB6A71E40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de1956e8-9633-3a91-8e57-bcea4f2a143c.roa
Signing time: Wed 26 Feb 2025 02:30:14 +0000
ROA not before: Wed 26 Feb 2025 02:30:14 +0000
ROA not after: Tue 27 May 2025 01:30:14 +0000
asID: 329239
IP address blocks: 2001:470:3f7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Mar 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:01:95:30:c1:b5:22:15:fc:b6:a7:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 26 02:30:14 2025 GMT
Not After : May 27 01:30:14 2025 GMT
Subject: CN=8364fab0-ee04-445e-865b-bd12339588b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:cf:39:8c:8e:c7:63:49:07:f8:9d:c4:b5:
ef:e5:35:d1:fb:75:be:a3:eb:1d:a5:cf:a1:84:57:
ce:a3:39:83:60:1b:2e:45:fc:1b:d2:b1:dc:4a:4a:
28:b0:0a:eb:4f:c4:53:65:fe:53:37:f0:e8:19:e9:
b5:80:ce:89:74:32:69:ce:c9:12:4a:df:85:f4:7a:
f8:c8:5b:5f:00:63:41:d4:21:32:ee:d8:7b:05:ea:
50:53:9b:4a:ac:11:df:ed:9b:44:b8:58:05:89:88:
b1:6c:2e:89:0f:27:e3:34:14:4c:93:02:40:66:7a:
d7:3c:cc:c6:c1:65:4a:7a:4a:57:88:3a:5c:f0:b2:
d8:da:d9:6a:0a:d5:ba:d1:66:f4:27:b5:48:55:33:
23:97:5c:89:8e:71:4b:c9:46:18:66:c3:93:16:64:
7e:b4:b6:fa:7a:80:68:2f:db:03:c5:fd:d3:34:7b:
09:fb:b8:cf:79:d2:a7:8f:70:33:32:1b:0c:92:a4:
a0:18:24:26:78:b2:6d:5b:a9:ae:43:68:0b:2f:5b:
b1:77:41:90:98:5e:e1:ab:ab:b3:a6:44:3c:d0:73:
6d:09:ce:6c:ca:30:31:ab:f9:b6:c0:99:59:af:44:
52:53:8f:a4:55:f0:5b:cb:f2:86:f1:f5:60:ed:1e:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:4A:FF:27:C6:02:E1:10:B6:EF:4A:AB:6B:8C:6B:63:FC:3F:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de1956e8-9633-3a91-8e57-bcea4f2a143c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:1a:27:18:5f:28:e2:4b:2b:ad:a4:10:d0:86:40:6f:59:19:
ce:2f:2f:35:71:33:06:c7:56:de:85:c6:5f:b0:12:25:da:00:
a6:d2:75:c0:23:9f:d0:37:a6:37:f5:20:12:7c:50:3a:8e:69:
ab:1d:77:92:1d:da:27:b4:28:81:d4:6f:df:e1:0d:0a:30:90:
1f:94:5d:7f:69:8f:d4:a0:55:13:0d:e0:15:1a:1e:57:5e:ef:
a5:e3:ea:65:6d:95:58:d4:f6:af:d5:4d:92:fc:1b:67:12:b7:
aa:27:fb:0a:21:4c:5b:2c:79:47:8c:e0:c3:2c:bf:c6:3f:6c:
ad:fd:05:bd:5f:48:5e:00:9c:8e:6c:a2:45:64:aa:88:fe:95:
6f:f0:3d:00:a3:be:34:e8:01:f0:4e:7c:9b:fd:c1:2d:65:c7:
8c:fa:04:6d:d2:7b:3f:4a:e4:79:e3:8e:64:f3:84:dd:7d:27:
0e:67:e3:4c:08:8b:b5:c0:c0:6f:22:60:23:19:17:70:3d:da:
9f:5c:a6:61:e8:b8:2a:4e:7e:71:14:30:b8:5c:68:55:fa:71:
78:2a:12:b9:73:f6:1f:0e:1f:cd:4a:e8:f0:46:6c:eb:b7:40:
fd:9e:f4:f2:6c:53:a3:d1:af:67:21:dc:5f:38:b5:e9:98:68:
dc:6d:be:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkBlTDBtSIV/LanHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyNjAyMzAxNFoXDTI1MDUyNzAxMzAxNFowLzEtMCsGA1UEAxMk
ODM2NGZhYjAtZWUwNC00NDVlLTg2NWItYmQxMjMzOTU4OGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNPPOYyOx2NJB/idxLXv5TXR+3W+o+sdpc+h
hFfOozmDYBsuRfwb0rHcSkoosArrT8RTZf5TN/DoGem1gM6JdDJpzskSSt+F9Hr4
yFtfAGNB1CEy7th7BepQU5tKrBHf7ZtEuFgFiYixbC6JDyfjNBRMkwJAZnrXPMzG
wWVKekpXiDpc8LLY2tlqCtW60Wb0J7VIVTMjl1yJjnFLyUYYZsOTFmR+tLb6eoBo
L9sDxf3TNHsJ+7jPedKnj3AzMhsMkqSgGCQmeLJtW6muQ2gLL1uxd0GQmF7hq6uz
pkQ80HNtCc5syjAxq/m2wJlZr0RSU4+kVfBby/KG8fVg7R5PMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBAPSv8nxgLhELbvSqtrjGtj/D+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGUxOTU2ZTgtOTYzMy0z
YTkxLThlNTctYmNlYTRmMmExNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGUaJxhfKOJLK62kENCGQG9ZGc4vLzVxMwbHVt6Fxl+wEiXaAKbS
dcAjn9A3pjf1IBJ8UDqOaasdd5Id2ie0KIHUb9/hDQowkB+UXX9pj9SgVRMN4BUa
Hlde76Xj6mVtlVjU9q/VTZL8G2cSt6on+wohTFsseUeM4MMsv8Y/bK39Bb1fSF4A
nI5sokVkqoj+lW/wPQCjvjToAfBOfJv9wS1lx4z6BG3Sez9K5HnjjmTzhN19Jw5n
40wIi7XAwG8iYCMZF3A92p9cpmHouCpOfnEUMLhcaFX6cXgqErlz9h8OH81K6PBG
bOu3QP2e9PJsU6PRr2ch3F84temYaNxtvlk=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:36:50 2025 by rpki-client