Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34382d3438203d3e20343031363832.roa
File: 323630343a6361303a3530303a3a2f34382d3438203d3e20343031363832.roa (raw, json)
Hash identifier: sKy2CLXunph/MyW9w5m+QRT/bvttk//uxfoITe4v+fk=
Subject key identifier: C0:0C:D1:2A:08:B0:A2:9F:D6:C0:06:A0:9B:D0:DE:B9:1F:EB:E2:61
Certificate issuer: /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Certificate serial: 2BF2FAF5BA9FDA16AB078F825106F10D4A5811A6
Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34382d3438203d3e20343031363832.roa
Signing time: Mon 28 Apr 2025 01:04:27 +0000
ROA not before: Mon 28 Apr 2025 00:59:27 +0000
ROA not after: Mon 27 Apr 2026 01:04:27 +0000
asID: 401682
IP address blocks: 2604:ca0:500::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 28 Apr 2025 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f2:fa:f5:ba:9f:da:16:ab:07:8f:82:51:06:f1:0d:4a:58:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Validity
Not Before: Apr 28 00:59:27 2025 GMT
Not After : Apr 27 01:04:27 2026 GMT
Subject: CN=C00CD12A08B0A29FD6C006A09BD0DEB91FEBE261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:07:dc:1f:60:00:54:76:b3:1b:3c:f5:ed:
e6:2e:00:e8:17:46:0e:88:18:43:e2:97:23:9a:c1:
a2:08:f8:9d:7b:03:2a:6b:8b:51:bb:64:0f:76:b5:
05:f5:06:19:5d:2d:a9:b9:a7:db:19:8c:a6:2b:df:
91:cf:3f:19:e7:73:b1:3d:32:f0:0f:62:90:d3:77:
17:31:27:ba:54:d0:d0:f6:eb:85:79:b6:c5:20:ce:
ab:28:75:94:a1:77:de:f2:3e:db:5e:10:51:63:84:
3c:0d:9d:27:6f:84:54:56:52:ad:6e:1c:ee:c1:c7:
dc:9a:35:ec:4f:b2:9b:a6:77:a5:8a:9a:ca:7a:eb:
2e:0c:96:0c:66:fc:5a:b4:f5:98:a7:a9:c1:bb:17:
26:e8:73:c3:ac:20:60:41:0c:ae:8a:36:58:3d:15:
45:26:60:e8:9a:3a:0e:5c:19:39:84:86:a7:32:5b:
a9:a1:bb:5a:b9:de:15:af:0f:b0:b9:b6:2b:d1:76:
d0:16:a6:bd:62:92:7e:4f:a5:cd:66:f4:3d:95:5c:
c9:cd:a9:e4:c2:09:51:db:be:da:f8:f5:c2:ad:57:
dc:12:e3:be:8a:d8:73:cd:cc:f8:91:2c:cb:7c:f3:
69:d5:74:d7:86:cc:9b:25:83:ad:11:39:90:e5:3d:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0C:D1:2A:08:B0:A2:9F:D6:C0:06:A0:9B:D0:DE:B9:1F:EB:E2:61
X509v3 Authority Key Identifier:
keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3530303a3a2f34382d3438203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:ca0:500::/48
Signature Algorithm: sha256WithRSAEncryption
29:13:dd:ed:cd:c3:5c:50:ff:8b:ed:4a:ce:84:4e:b7:7d:fc:
71:61:8c:42:c6:e2:52:ca:ed:f0:85:92:b1:bd:8e:6c:8c:14:
c2:f5:34:9c:93:26:ca:f0:2d:8a:5b:6c:31:d5:c7:d7:90:01:
15:b3:39:30:44:a8:7f:73:42:7a:18:9e:e9:1a:60:2a:4b:fb:
01:6e:86:7f:3b:e4:e8:d1:3c:29:64:5c:70:8e:96:d7:d6:81:
fe:92:4c:7b:72:98:d1:a2:bc:ca:83:69:7e:ae:3d:d9:fb:9f:
01:cc:55:2f:90:85:79:43:58:9e:9e:91:62:de:f3:40:9b:28:
55:54:11:a0:ba:e9:de:2f:7c:50:e9:04:be:7b:5d:d3:3e:6f:
40:d4:f0:ed:eb:8b:14:10:ee:7d:c2:7b:1c:ab:1b:1f:c9:c0:
3f:1a:39:2d:cc:12:95:06:41:3d:bf:8d:76:d9:de:c2:b4:04:
5c:69:fd:7d:78:8d:43:bb:44:8d:91:be:11:7e:82:84:d6:40:
b7:21:db:6c:c7:8c:ed:a3:88:9e:19:8a:8d:cc:8f:5b:9d:3c:
54:13:21:e9:41:b7:3c:cd:2a:6b:01:3f:c1:ef:c4:cb:02:11:
7a:1a:2b:85:3a:48:f3:84:8a:78:01:c4:c8:2b:8e:5f:98:ca:
b0:61:7f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:46:59 2025 by rpki-client