Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/847917d1-f4af-30b1-9ed1-ec289792439a.roa
File: 847917d1-f4af-30b1-9ed1-ec289792439a.roa (raw, json)
Hash identifier: akii/laVjCv0BUkHQvhpQpyJtElDjZNKFihBdN2EUUU=
Subject key identifier: 32:D4:3C:4A:9E:92:7F:B4:42:A9:3A:14:DE:7C:7E:08:3E:C2:02:FC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E2AFCD48EBC04AD8437780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/847917d1-f4af-30b1-9ed1-ec289792439a.roa
Signing time: Thu 01 May 2025 16:31:53 +0000
ROA not before: Thu 01 May 2025 16:31:53 +0000
ROA not after: Wed 30 Jul 2025 16:31:53 +0000
asID: 22773
IP address blocks: 2600:8800:2ce4::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 01 May 2025 22:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:af:cd:48:eb:c0:4a:d8:43:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:31:53 2025 GMT
Not After : Jul 30 16:31:53 2025 GMT
Subject: CN=d030eb1d-0068-4428-8967-e835a98cbf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:7c:c2:b5:4f:a1:05:7c:91:60:b5:99:b5:
bf:6a:c2:36:03:7d:15:f1:f2:48:62:05:b6:e3:f9:
45:ef:05:85:f5:e5:07:fd:ae:a9:56:fe:76:fa:3a:
f9:74:fe:8a:db:fd:4d:49:95:0f:2a:00:e9:1d:3f:
a0:a7:22:b7:19:ef:fc:20:61:ec:b3:8c:54:4c:a1:
11:b4:ef:fe:a1:93:65:cf:e6:51:eb:27:cd:a7:3d:
04:40:7d:f6:ae:95:d7:50:11:40:4d:e5:aa:fb:c1:
cc:c8:28:c0:b5:3c:87:38:f1:d8:16:3c:06:ab:16:
c6:51:3c:b0:01:73:85:85:a0:74:de:ef:16:f3:f4:
25:a9:80:07:bc:6e:3d:ee:48:a5:56:10:70:c3:74:
68:c2:24:02:e4:08:c9:fc:cc:7d:41:17:ad:98:cf:
6d:80:6e:4c:8f:43:20:8a:48:85:53:87:c6:b0:fd:
a4:98:c2:19:36:f9:82:a5:e7:52:4c:9a:b4:d4:62:
98:c1:ad:f3:30:c9:07:56:5c:35:21:c9:85:01:53:
88:1b:5c:c8:5d:c8:46:ae:56:b2:c4:3b:97:29:d1:
f5:77:0d:1f:45:e2:a6:81:22:b3:af:39:48:ad:53:
3f:7b:8d:a9:55:fc:2a:e2:cd:f0:0c:ad:69:2d:46:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:3C:4A:9E:92:7F:B4:42:A9:3A:14:DE:7C:7E:08:3E:C2:02:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/847917d1-f4af-30b1-9ed1-ec289792439a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:2ce4::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:51:88:9f:2f:83:35:32:8d:b1:e2:e6:77:7d:70:95:af:9a:
6f:ae:61:e3:72:1a:b7:0f:a5:d2:99:5f:e3:5c:e9:85:fb:1f:
35:fe:06:1e:1f:d4:3b:9a:d7:dc:73:92:bc:66:27:75:02:80:
b1:b9:b3:d5:ec:3c:d8:72:43:13:b6:65:75:36:b0:f5:f2:9f:
50:25:42:d0:02:ca:f2:bc:e3:7a:3b:bb:3c:55:54:4b:47:cf:
13:39:36:66:a3:24:07:89:f7:68:41:e0:7f:2c:f4:f5:c5:e2:
e9:3c:2e:b4:ed:99:1a:f4:68:58:38:31:1c:ca:4c:9c:18:35:
f0:bc:6f:13:2f:ed:e7:cc:ea:e5:31:1a:66:fc:ca:d9:86:5e:
30:9d:c3:f9:b3:0e:43:58:bb:67:fa:8d:29:df:0e:e8:bb:ae:
a2:14:b1:ff:05:8a:59:46:90:e4:3e:86:13:26:db:25:97:7e:
45:c0:9c:61:4f:1f:6b:7e:1e:53:32:f3:7a:a9:99:a9:8a:c8:
48:8e:80:1e:86:f5:cd:aa:cc:69:6d:f2:73:b0:52:ca:ab:6c:
30:34:54:16:6a:4b:6b:f1:75:d4:96:59:31:35:6c:33:0a:6d:
43:26:5e:72:b7:fd:87:84:67:a3:28:89:0a:6c:9c:1d:d3:8b:
fd:31:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:59:26 2025 by rpki-client