Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfd8caa7-da08-3f6d-b4d0-4aa1c5f42e77.roa
File: cfd8caa7-da08-3f6d-b4d0-4aa1c5f42e77.roa (raw, json)
Hash identifier: LjBFeBPjiRHXEmXlqqkyPDji5gOX8ym1szI9lDuw46A=
Subject key identifier: 7D:B7:A5:43:3B:AD:25:D2:4C:32:E4:12:6C:29:3A:AE:69:62:30:56
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E2E2F32AB0F3F31EB4E7D8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfd8caa7-da08-3f6d-b4d0-4aa1c5f42e77.roa
Signing time: Thu 01 May 2025 16:32:17 +0000
ROA not before: Thu 01 May 2025 16:32:17 +0000
ROA not after: Wed 30 Jul 2025 16:32:17 +0000
asID: 22773
IP address blocks: 2600:8800:4700::/41 maxlen: 41
Validation: Failed, certificate revoked on Thu 01 May 2025 22:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:e2:f3:2a:b0:f3:f3:1e:b4:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:32:17 2025 GMT
Not After : Jul 30 16:32:17 2025 GMT
Subject: CN=287ab67f-7188-4bdd-bf5f-5d4ea83656b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:1a:40:3d:d1:e5:6f:f2:bb:48:e5:f9:c7:
77:02:29:a4:76:39:7f:7a:27:7b:25:d1:3b:f1:b9:
ed:ca:7b:e8:2b:4d:de:73:d2:f7:ca:73:24:03:5a:
9c:cd:f9:38:e9:fa:b7:19:39:3c:f5:b1:d1:12:73:
58:d3:3e:f7:98:07:59:16:24:64:dc:48:76:7c:01:
12:9d:c8:d0:cd:2d:d2:1f:03:31:d9:9e:e9:9c:46:
cd:e2:07:d7:6d:3e:8f:65:9c:ae:74:a1:19:f8:2f:
60:1c:03:df:a6:99:01:95:0b:5d:8a:11:e8:9c:f6:
67:51:d3:b0:66:ab:28:7b:e1:68:d2:12:5e:27:9e:
89:b2:ce:c3:45:7c:68:9f:83:c2:1e:a0:0e:f5:0f:
b2:1b:d8:33:7d:a2:80:48:0a:c9:d3:e7:f3:d4:f0:
2e:17:a8:40:cc:b4:de:63:0e:c9:85:77:37:5d:e2:
23:e7:27:04:0c:94:3a:65:f3:73:3a:c0:0d:21:41:
a8:91:81:48:18:ed:0b:57:9c:61:48:fe:c6:ec:45:
ed:e2:d7:f5:ca:a8:38:5f:36:7d:5d:f0:fa:06:98:
f6:a9:18:ca:83:1f:95:94:2d:d3:14:e7:8f:98:c4:
ff:e4:4e:a9:82:87:1f:f9:e1:4b:e5:b1:35:8f:7c:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:A5:43:3B:AD:25:D2:4C:32:E4:12:6C:29:3A:AE:69:62:30:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfd8caa7-da08-3f6d-b4d0-4aa1c5f42e77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:4700::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d2:95:72:2d:5d:d9:de:ae:a5:b7:67:0b:92:e9:29:a6:5e:
d7:23:da:81:b1:2a:26:ab:66:cb:4c:5a:a2:36:3c:7a:61:d5:
03:62:51:07:68:d5:88:56:f4:76:f0:61:62:53:00:ef:ed:1b:
9f:98:85:d7:1f:29:27:8d:73:49:a7:d1:e0:f8:f2:2f:7a:0b:
42:13:ee:89:d7:7c:d6:98:25:bc:33:b1:36:23:60:bc:7d:c9:
d0:02:14:67:4e:58:19:1b:44:08:e0:c3:40:8d:49:4d:cf:9d:
c3:5b:4a:64:ba:ed:3f:23:2e:23:5f:3c:83:61:26:2d:e6:b2:
44:f8:fe:f1:6f:5e:a4:0f:68:d0:e7:71:d6:d1:fd:cd:21:b8:
83:3d:c0:eb:36:3c:a0:bf:33:f4:c3:23:f5:88:6f:a6:0e:89:
ce:be:0a:44:92:a1:9a:c4:00:de:df:ab:c9:42:40:5e:26:42:
1d:ef:97:6d:bd:cd:70:dc:49:98:60:cc:56:10:81:11:37:2f:
27:b0:f3:8e:74:d9:15:49:05:90:e1:51:da:69:f6:70:7e:75:
a1:f9:3d:31:24:1c:91:5b:b7:de:6b:99:4a:bc:c8:72:4c:2d:
bf:06:10:87:a3:6c:35:e3:1d:70:bf:2f:95:e0:a7:0c:bc:8c:
3f:70:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:10:05 2025 by rpki-client