Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32e33684-54a9-3ea6-93c0-54cb7acabe8e.roa
File: 32e33684-54a9-3ea6-93c0-54cb7acabe8e.roa (raw, json)
Hash identifier: 8Qwn2NQZDehDtWnBo77Tiah9cQcTYxn3O+Qzo0tR5Uw=
Subject key identifier: E8:11:4B:F9:63:E0:80:4B:40:5F:D4:2C:3A:1E:51:7B:A6:CA:36:D6
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E2A9EAC5A516F2A8676C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32e33684-54a9-3ea6-93c0-54cb7acabe8e.roa
Signing time: Thu 01 May 2025 16:31:50 +0000
ROA not before: Thu 01 May 2025 16:31:50 +0000
ROA not after: Wed 30 Jul 2025 16:31:50 +0000
asID: 22773
IP address blocks: 2600:8800:2ca6::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 01 May 2025 22:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:a9:ea:c5:a5:16:f2:a8:67:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:31:50 2025 GMT
Not After : Jul 30 16:31:50 2025 GMT
Subject: CN=a9357fec-b963-4f9d-bba6-9cf8f05edd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:df:57:ac:1a:f7:16:64:7d:70:92:49:0e:4c:
46:b8:b3:da:4c:a8:68:d7:e8:55:a9:d2:25:d4:d7:
ec:46:a3:88:6d:7f:3b:a9:1e:a6:4a:f2:42:7f:5f:
13:94:56:1d:75:8c:c1:4e:e2:74:18:ba:24:f6:25:
33:08:fe:45:78:f9:d5:fc:ad:b7:75:0e:41:e3:4d:
37:e1:7b:cb:41:06:2e:c4:7f:f1:8a:27:c2:93:0d:
14:c4:1e:2e:43:71:7a:a8:5b:9e:2c:e4:36:38:00:
f5:73:ed:8c:c2:c6:53:a2:ac:c5:7d:dc:8b:79:55:
41:30:f4:3d:3f:e4:6f:3d:40:9c:9e:af:d9:a8:ab:
a0:0c:28:42:0d:71:18:30:96:c1:ce:1b:47:27:b1:
95:08:69:f5:42:78:d6:0e:47:bf:16:9d:3a:85:a6:
cd:e1:a2:93:e5:c1:38:df:d0:92:95:8a:e1:f1:ef:
c5:ed:c4:2f:5c:83:50:35:38:19:f9:ce:71:ee:ee:
45:80:0e:fc:30:73:cc:b4:9a:a8:47:f6:5d:e2:de:
43:55:66:ac:c1:49:46:53:0d:c3:48:b1:a1:0d:2c:
ba:c7:81:14:7a:3b:a6:a8:0c:9c:fb:69:cc:48:7a:
5f:b6:df:f3:b6:cd:38:ab:1d:61:d4:72:57:d7:c4:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:4B:F9:63:E0:80:4B:40:5F:D4:2C:3A:1E:51:7B:A6:CA:36:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32e33684-54a9-3ea6-93c0-54cb7acabe8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:2ca6::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:58:f7:55:e2:26:9d:28:bc:25:5c:3c:8f:ad:15:6c:6e:75:
76:33:66:fa:c7:d4:66:d2:4d:36:94:71:dc:b2:64:a6:83:56:
7a:06:72:7c:6a:60:5a:ed:3c:bc:df:bd:32:05:66:2f:0e:91:
76:b4:41:02:36:79:39:38:f0:ae:ff:11:5d:4a:33:9a:a0:aa:
a0:eb:47:84:cd:04:53:f7:b7:5b:81:32:9a:2b:39:cf:cd:cf:
14:18:a4:6a:f9:73:fd:9a:f8:fa:92:ce:16:93:44:59:5c:c3:
32:7f:70:8d:4a:a8:fe:9e:03:34:3d:02:c8:18:66:87:f3:22:
6d:f9:05:82:77:25:4f:65:8f:b2:ba:fe:53:eb:23:12:a0:81:
2e:73:4b:6f:b8:7c:60:3f:8f:08:85:35:d3:de:ed:3e:d3:79:
45:f8:05:68:ba:1b:e1:41:d8:30:d3:1a:ed:46:70:49:2c:45:
25:0b:f6:76:4d:79:e3:f3:4e:b3:ca:38:d1:2e:33:fd:6e:d2:
d6:44:cd:48:37:ce:e5:c8:dc:f7:c6:9c:8e:0d:b2:36:01:7e:
7b:b0:3c:7e:db:52:9e:55:a5:bc:eb:11:71:54:7c:d2:73:22:
63:ff:25:ff:50:92:c5:3a:9d:a4:1e:27:cb:fb:5d:67:9c:72:
87:e7:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:26:12 2025 by rpki-client