Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e8f159-e3f1-38e5-8123-17f005995195.roa
File: 35e8f159-e3f1-38e5-8123-17f005995195.roa (raw, json)
Hash identifier: wH9n1xhKhDOdXVGVcodFp2hBipDHOxbc9ztVbF8L1i4=
Subject key identifier: 72:16:06:D2:E1:B0:BC:66:C0:23:F3:A0:9E:4E:31:5D:B2:99:F9:CE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E35081575332882D09E800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e8f159-e3f1-38e5-8123-17f005995195.roa
Signing time: Thu 01 May 2025 16:33:09 +0000
ROA not before: Thu 01 May 2025 16:33:09 +0000
ROA not after: Wed 30 Jul 2025 16:33:09 +0000
asID: 22773
IP address blocks: 2600:8800:7f08::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 01 May 2025 22:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e3:50:81:57:53:32:88:2d:09:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:33:09 2025 GMT
Not After : Jul 30 16:33:09 2025 GMT
Subject: CN=23df3cce-ee19-420f-80b5-61a49726d27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:96:37:bc:33:62:81:24:63:fd:b2:bc:75:
94:35:5a:3f:96:24:7c:7c:c7:d5:56:65:08:56:57:
6e:77:11:ed:6f:fc:f4:53:27:86:3c:32:2b:92:8d:
2a:21:06:5f:d7:70:07:3e:79:e9:1a:51:98:43:25:
97:78:bc:b2:ca:bb:b8:94:7c:b0:e4:bc:6f:34:4f:
41:0e:71:f8:c9:dd:25:e5:15:10:a8:d6:78:23:61:
b4:73:60:2b:e5:47:ba:7a:d1:c0:50:1a:3b:11:eb:
bb:94:af:e8:37:4f:f7:33:e2:a2:ad:9f:eb:4a:ed:
a8:0e:06:a1:61:b8:63:5c:ed:79:70:9b:2e:97:f8:
85:2d:69:85:98:bf:3b:46:0b:0b:40:d8:6f:fa:ca:
df:d1:f0:60:80:5c:a0:d0:ec:2a:36:0c:eb:23:70:
8b:9c:45:c3:6e:ac:6c:aa:cd:ca:b6:96:c8:44:b7:
a1:59:12:b1:24:82:ca:3c:1b:30:69:6c:b2:32:b8:
83:c8:1c:95:a2:69:8b:e5:70:ce:8c:64:b3:f5:8a:
d3:5c:23:a8:b4:6a:c7:ba:ba:cf:f3:c6:ec:73:24:
53:d2:05:0b:62:04:c2:7d:77:79:61:4c:be:01:39:
2a:c5:8c:a8:f3:1a:f5:6e:ae:39:67:ee:96:22:36:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:06:D2:E1:B0:BC:66:C0:23:F3:A0:9E:4E:31:5D:B2:99:F9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e8f159-e3f1-38e5-8123-17f005995195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:7f08::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:c2:9d:1d:f8:9a:f9:e4:77:11:be:36:e7:8a:e3:4a:7d:76:
7b:5d:ac:bc:ca:e3:12:13:d9:64:90:3f:c9:ff:68:77:a3:1d:
b1:96:5e:57:d1:a6:49:75:5c:51:36:4e:5c:24:db:f6:67:7b:
c6:89:bb:b7:88:48:d2:c8:52:1c:c3:81:f0:fc:f9:fe:f4:93:
50:43:32:e3:c0:0c:a5:ce:a9:37:a0:2a:b0:0d:08:93:f6:b4:
ba:6c:cd:42:81:88:cd:4e:eb:42:ac:0c:ad:6b:0a:29:32:30:
1b:0f:8e:df:5b:e1:54:0a:c0:b5:67:c8:58:a6:72:71:da:74:
d7:1f:4c:05:1f:b3:71:d9:52:78:a8:be:87:71:f7:11:bf:05:
47:03:46:06:42:4f:8f:88:31:c8:c3:53:58:aa:c7:88:45:6c:
b3:59:1c:87:ad:b1:08:e6:59:a4:95:4e:a6:b2:5c:53:e3:79:
5e:8f:17:bf:c5:f0:a9:c2:e6:41:fc:82:74:93:76:29:92:15:
cf:c7:aa:f6:fc:1b:58:5f:96:bb:91:0f:da:d3:1b:c9:f6:a1:
cc:d8:50:95:fc:7d:4e:88:b4:bf:8f:db:22:5e:4d:bf:b1:9c:
86:d0:51:22:d5:99:eb:06:d5:11:ea:0b:5f:91:56:e6:f4:a5:
51:ed:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:00:19 2025 by rpki-client