Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e2bf69f-3736-3e1d-a2d7-a2552cc43757.roa
File: 5e2bf69f-3736-3e1d-a2d7-a2552cc43757.roa (raw, json)
Hash identifier: o07T1o+xUVQL26Fl3F6siu2JxmN3CiYLX+ul9w6jc2g=
Subject key identifier: 37:2C:D6:06:09:38:4A:24:FF:36:7A:46:0E:31:8A:3B:0B:04:CE:78
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E2BE434DF78897179F1780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e2bf69f-3736-3e1d-a2d7-a2552cc43757.roa
Signing time: Thu 01 May 2025 16:32:00 +0000
ROA not before: Thu 01 May 2025 16:32:00 +0000
ROA not after: Wed 30 Jul 2025 16:32:00 +0000
asID: 22773
IP address blocks: 2600:8800:3680::/41 maxlen: 41
Validation: Failed, certificate revoked on Thu 01 May 2025 22:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:be:43:4d:f7:88:97:17:9f:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:32:00 2025 GMT
Not After : Jul 30 16:32:00 2025 GMT
Subject: CN=7db8643c-48b3-4946-81f4-18b9c68842d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:1e:b2:a4:41:28:40:4c:93:1a:9e:6d:6a:
5a:71:34:19:d5:ed:2f:61:9f:f6:e8:aa:ed:2c:69:
04:36:25:4b:d0:49:68:9d:c0:e5:de:99:74:44:a0:
f4:3c:42:7c:c6:61:fb:71:b8:43:8e:cd:a7:f0:a1:
96:80:27:89:7e:c7:ef:af:61:a0:86:c1:18:80:dc:
33:a1:75:f5:45:4f:9a:1e:28:e7:5f:a1:82:1e:e3:
1d:cc:55:96:e6:24:f4:d0:30:bd:3a:2c:ff:0c:f9:
2e:16:e0:84:98:17:c5:e2:f2:8e:a9:b7:95:2e:d5:
ea:26:41:99:ba:90:d2:b9:17:a6:2b:ed:3b:b4:b5:
e0:31:a0:44:02:ba:46:40:eb:9f:30:e1:6e:a0:46:
9f:ab:cd:1b:d7:58:c3:a5:99:3b:bf:cb:ae:57:8e:
d0:8d:55:1f:c7:2a:b6:5a:72:5c:db:59:57:92:5b:
8e:02:f9:11:75:85:96:8c:fa:5b:c2:b8:88:fa:8d:
c7:d8:36:75:8a:8c:0b:0b:18:c8:45:4b:b0:7f:fe:
57:bc:83:0e:0f:0e:89:2f:13:60:cf:29:ea:21:df:
8c:57:27:78:9f:74:83:6c:c2:41:8d:a5:f9:1e:74:
d5:9f:4b:9b:2f:43:64:40:93:56:65:25:9c:86:dc:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2C:D6:06:09:38:4A:24:FF:36:7A:46:0E:31:8A:3B:0B:04:CE:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e2bf69f-3736-3e1d-a2d7-a2552cc43757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:3680::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:8c:29:b5:c2:72:90:ca:16:3d:39:69:28:b7:20:79:a6:cf:
8c:35:77:9c:25:8f:7c:79:3e:06:5f:1c:09:5b:7f:51:7d:7d:
d8:60:aa:49:ca:b1:27:54:fc:3d:81:52:ee:da:15:62:bf:5f:
cf:f2:55:ae:cd:4b:f6:ee:dd:0b:00:ea:64:a5:86:e3:46:3b:
8f:76:2a:f0:42:9a:79:cb:5f:bd:b1:c2:57:2c:ae:12:e5:59:
04:85:4d:42:fe:41:44:1c:a2:7c:59:70:dd:cd:ce:66:db:7c:
e8:02:48:e4:5c:21:65:6f:10:0f:d8:7e:48:0f:7a:8c:ba:d4:
52:12:cb:d7:a4:99:e0:ce:d2:df:5e:6f:29:50:20:c3:48:8d:
be:6e:81:76:03:30:08:7c:5a:58:03:aa:a4:96:3e:38:48:de:
85:a8:bb:f4:ca:fe:99:1b:ad:63:f3:be:55:1e:c9:1e:29:3c:
aa:16:08:94:e9:b1:ec:52:29:05:6e:23:92:fb:fd:0e:73:8e:
45:23:16:ca:67:78:30:fe:03:fb:1c:4b:db:f1:0f:08:bd:96:
7a:5c:d8:bb:bf:c2:85:aa:da:51:13:1a:01:98:35:a7:50:76:
50:fd:50:57:bd:60:82:4a:25:d4:59:14:19:9d:f7:6d:c6:ce:
9d:ba:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:15:54 2025 by rpki-client