Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f1c925b-cc36-3bf9-87f6-ba052144239a.roa
File: 8f1c925b-cc36-3bf9-87f6-ba052144239a.roa (raw, json)
Hash identifier: Lssby5BQlAXGjDx7ZjBetgkpIGZsvPYch0CFtohpMGU=
Subject key identifier: 37:79:3C:21:E6:AD:85:69:43:D7:52:FE:FE:D6:1A:70:3A:3A:90:7E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E3935EB27546330FFA4920
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f1c925b-cc36-3bf9-87f6-ba052144239a.roa
Signing time: Thu 01 May 2025 16:33:40 +0000
ROA not before: Thu 01 May 2025 16:33:40 +0000
ROA not after: Wed 30 Jul 2025 16:33:40 +0000
asID: 22773
IP address blocks: 2600:8800:8e80::/43 maxlen: 43
Validation: Failed, certificate revoked on Thu 01 May 2025 22:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e3:93:5e:b2:75:46:33:0f:fa:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:33:40 2025 GMT
Not After : Jul 30 16:33:40 2025 GMT
Subject: CN=e5ff656f-0bf2-4c3e-880a-40c31a40c082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:78:3a:91:de:0e:45:6b:64:5b:5a:85:b2:
95:52:a8:27:91:ef:ea:45:83:ec:bd:cb:09:6a:a1:
66:8a:c2:71:c0:a1:b9:67:11:65:88:37:a3:55:b2:
32:39:3c:6e:0f:39:5b:98:90:28:78:c0:1d:d4:8a:
27:d4:a5:02:f1:59:26:79:e8:10:f2:ef:91:da:e4:
e4:31:da:59:0e:83:33:4e:4e:9f:b2:d4:b1:dd:3f:
a4:e4:09:9e:9a:bb:21:c8:95:c6:d5:b3:81:9c:e7:
65:54:4f:a1:fe:78:b0:ca:59:77:2b:89:79:e4:47:
c1:48:f4:0a:da:72:f4:40:9f:cd:97:9c:65:d1:29:
ee:de:3e:21:91:1b:00:31:43:44:fd:8f:d8:bd:60:
a9:23:35:a4:27:ec:39:95:2f:59:23:f7:a0:24:d4:
ec:76:cd:95:62:9d:44:2c:a7:63:11:25:f8:cd:63:
ce:85:3e:86:38:14:49:20:39:0d:45:59:c1:6e:bb:
c7:16:83:5c:da:dd:af:6f:b9:ae:a0:bd:2a:38:6c:
24:e0:b4:5e:6b:71:cb:b5:9c:17:ad:df:29:50:b7:
11:61:12:3d:9e:45:2e:38:6b:1f:ce:ff:d3:13:84:
f7:ea:20:e7:ea:a9:fa:c4:2c:42:e0:f4:84:f9:3b:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:79:3C:21:E6:AD:85:69:43:D7:52:FE:FE:D6:1A:70:3A:3A:90:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f1c925b-cc36-3bf9-87f6-ba052144239a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:8e80::/43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:83:e6:ab:36:17:4f:f3:dc:a9:18:2c:66:e1:27:06:a7:8d:
d2:12:c7:04:b9:e7:09:81:0c:cb:68:dc:db:71:7f:bb:fe:38:
96:13:48:86:86:9f:bb:c3:33:e6:d3:1f:89:02:be:f9:33:30:
66:e9:03:3c:49:6f:a4:1b:36:80:4a:7c:89:e2:3e:89:19:3e:
d9:61:ab:1f:e9:ae:21:83:70:f8:bc:16:1b:35:3d:c1:3c:7a:
31:4e:8e:9e:58:a9:0a:06:51:38:de:86:57:3a:5f:9b:9f:13:
28:0a:9a:32:25:e8:68:62:bb:e3:f5:ca:cf:fe:b2:23:7b:03:
05:96:d6:59:0d:16:b1:e3:1b:b9:bc:14:02:41:8a:30:42:c9:
26:bc:85:b0:3b:32:3a:9b:5c:53:73:2d:64:31:2e:1b:67:8e:
68:06:78:5e:2e:6d:72:ed:66:d8:4f:9e:75:32:b7:99:5c:ec:
06:be:0e:3d:0b:a3:b5:7b:3d:3f:a9:87:ec:30:7e:62:d3:17:
78:82:2f:77:42:e5:62:10:54:0d:a2:0f:97:65:5e:67:42:5f:
5f:b7:9d:1a:83:29:3b:44:38:68:e1:8f:9f:bf:a4:84:3d:55:
a8:ae:f6:9b:e6:aa:cc:1d:7f:07:74:5a:58:ef:02:3f:bc:93:
54:0b:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:21:57 2025 by rpki-client