Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7f6dc08-9300-364f-b8e2-4bcc9e2a9f4e.roa
File: f7f6dc08-9300-364f-b8e2-4bcc9e2a9f4e.roa (raw, json)
Hash identifier: niGGiNwtjoKvhApqz01I4/YeP75e2Z5jdG0v1pJZ9vM=
Subject key identifier: 35:8D:41:98:76:14:39:A7:F0:87:86:E8:7A:63:3C:73:D1:6A:D1:D5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584919500A93F265026DFB15C180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7f6dc08-9300-364f-b8e2-4bcc9e2a9f4e.roa
Signing time: Thu 06 Mar 2025 14:30:18 +0000
ROA not before: Thu 06 Mar 2025 14:30:18 +0000
ROA not after: Wed 04 Jun 2025 13:30:18 +0000
asID: 212602
IP address blocks: 2001:470:15a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:50:0a:93:f2:65:02:6d:fb:15:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 6 14:30:18 2025 GMT
Not After : Jun 4 13:30:18 2025 GMT
Subject: CN=d6c31f3d-56d1-464e-afaa-98c8df338d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:7a:12:d4:f5:a6:f7:48:07:75:7d:cb:31:
e9:56:bb:81:70:2c:7c:c1:d9:14:10:41:01:98:94:
4f:03:88:79:66:95:e2:21:9c:b6:b4:a7:3d:67:b7:
13:82:15:5e:5c:88:78:f8:ba:2b:aa:ac:11:e9:18:
b1:e2:a2:36:c6:fb:33:b3:b1:e4:b3:22:12:ab:c6:
51:79:27:92:83:fc:e7:26:8b:96:f9:60:78:c3:82:
d6:37:93:dd:83:48:a8:79:6e:62:69:04:33:27:5b:
4c:40:0d:d4:aa:c1:89:d5:c3:7d:ec:bf:f1:b9:19:
d1:43:8f:e6:24:2b:76:45:4b:9b:e1:54:48:6b:c0:
1e:35:33:22:1e:e1:00:d5:6d:0a:a3:cb:2f:a2:60:
14:36:d9:06:b9:34:2c:2a:4f:3e:28:62:84:1b:29:
e1:81:32:ca:f6:62:d0:89:4a:36:04:93:59:46:6a:
7e:1e:3d:36:f2:8d:b6:e1:2d:dc:69:80:89:9a:d7:
04:f1:e7:74:66:13:f3:7f:a1:b7:cf:a0:ed:0c:3e:
7a:81:ae:83:9a:cb:6a:36:6d:2c:8a:4a:88:38:2c:
58:94:55:10:3f:cf:71:47:68:c4:95:e5:bb:6b:cb:
78:0e:a5:e5:c9:b0:0c:c3:b7:5d:4b:41:b8:be:ff:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8D:41:98:76:14:39:A7:F0:87:86:E8:7A:63:3C:73:D1:6A:D1:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7f6dc08-9300-364f-b8e2-4bcc9e2a9f4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:15a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:85:78:80:06:ed:ac:27:2a:0e:7c:3f:62:44:4c:68:db:f2:
d8:e2:30:8e:1c:b7:3b:ba:68:73:b7:16:b5:3e:88:06:0f:1d:
39:61:e5:ec:99:5b:46:b3:5c:26:76:1f:a5:5c:12:a8:ba:14:
64:ff:b4:9b:76:98:b6:da:c6:9c:3d:a0:63:d4:cc:4a:17:d1:
20:5f:57:b8:f7:72:06:31:45:11:1f:88:d2:ef:f9:c7:0b:e8:
d6:53:86:2f:93:3b:69:ad:a5:74:45:db:fb:bf:e6:39:98:ab:
cd:a2:33:06:90:1c:0e:6d:97:01:d0:1e:0d:7d:fb:71:a4:41:
90:bd:2a:6a:ac:ae:cd:44:87:fd:8d:54:db:05:61:5d:7a:05:
1e:fb:83:ac:44:68:9d:50:40:3c:ea:bd:04:4d:51:42:5d:c0:
88:18:51:8c:8f:28:d1:72:91:72:28:f0:79:84:24:df:3e:21:
ab:36:fd:b1:55:bc:ee:94:9c:93:61:5e:ff:3d:ff:d3:f1:d6:
02:cc:7c:87:13:c5:01:27:fe:ca:e8:c1:77:24:9f:97:64:d0:
d6:9f:3b:04:95:34:b8:8d:da:b6:2d:6a:33:ec:6f:44:90:aa:
85:78:a9:8d:26:ea:08:36:51:8c:c7:c1:9c:05:69:eb:dc:b1:
a0:75:fa:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZUAqT8mUCbfsVwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMwNjE0MzAxOFoXDTI1MDYwNDEzMzAxOFowLzEtMCsGA1UEAxMk
ZDZjMzFmM2QtNTZkMS00NjRlLWFmYWEtOThjOGRmMzM4ZDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYp6EtT1pvdIB3V9yzHpVruBcCx8wdkUEEEB
mJRPA4h5ZpXiIZy2tKc9Z7cTghVeXIh4+LorqqwR6Rix4qI2xvszs7HksyISq8ZR
eSeSg/znJouW+WB4w4LWN5Pdg0ioeW5iaQQzJ1tMQA3UqsGJ1cN97L/xuRnRQ4/m
JCt2RUub4VRIa8AeNTMiHuEA1W0Ko8svomAUNtkGuTQsKk8+KGKEGynhgTLK9mLQ
iUo2BJNZRmp+Hj028o224S3caYCJmtcE8ed0ZhPzf6G3z6DtDD56ga6DmstqNm0s
ikqIOCxYlFUQP89xR2jEleW7a8t4DqXlybAMw7ddS0G4vv9LZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDWNQZh2FDmn8IeG6HpjPHPRatHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjdmNmRjMDgtOTMwMC0z
NjRmLWI4ZTItNGJjYzllMmE5ZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJOFeIAG7awnKg58P2JETGjb8tjiMI4ctzu6aHO3FrU+iAYPHTlh
5eyZW0azXCZ2H6VcEqi6FGT/tJt2mLbaxpw9oGPUzEoX0SBfV7j3cgYxRREfiNLv
+ccL6NZThi+TO2mtpXRF2/u/5jmYq82iMwaQHA5tlwHQHg19+3GkQZC9Kmqsrs1E
h/2NVNsFYV16BR77g6xEaJ1QQDzqvQRNUUJdwIgYUYyPKNFykXIo8HmEJN8+Ias2
/bFVvO6UnJNhXv89/9Px1gLMfIcTxQEn/srowXckn5dk0NafOwSVNLiN2rYtajPs
b0SQqoV4qY0m6gg2UYzHwZwFaevcsaB1+kI=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:26:11 2025 by rpki-client