Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddcd9d63-37b9-32c7-affc-51c0c508d76c.roa
File: ddcd9d63-37b9-32c7-affc-51c0c508d76c.roa (raw, json)
Hash identifier: l1Wt+F9zd8P8thhqCvgUzm1uq7y8ZZiVU+/TTlLFSlw=
Subject key identifier: 5A:56:2E:CE:8C:F9:6C:1B:30:36:06:F5:AA:55:83:91:A3:2A:C9:6A
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E3A50B9FD09BCCD55D8200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddcd9d63-37b9-32c7-affc-51c0c508d76c.roa
Signing time: Thu 01 May 2025 16:33:49 +0000
ROA not before: Thu 01 May 2025 16:33:49 +0000
ROA not after: Wed 30 Jul 2025 16:33:49 +0000
asID: 22773
IP address blocks: 2600:8800:9c04::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 01 May 2025 22:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e3:a5:0b:9f:d0:9b:cc:d5:5d:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:33:49 2025 GMT
Not After : Jul 30 16:33:49 2025 GMT
Subject: CN=0d5e4d1c-3c66-4d13-9f7e-ca0015222247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:fb:9b:97:83:42:a5:1e:88:5a:55:9b:08:
77:b3:cb:93:19:60:7d:a4:56:4b:94:0b:e2:35:5d:
a2:6e:aa:e7:fa:c7:52:67:aa:62:d7:0d:a9:3f:ef:
df:76:9c:23:4d:d0:da:b5:ba:66:4f:77:09:30:fb:
79:8b:fe:f2:f1:d7:4b:79:43:4b:68:39:96:ae:b2:
13:54:22:85:5c:ef:e7:6a:29:5a:5b:db:ce:7e:ce:
04:29:69:89:d2:b3:aa:64:5a:de:79:2e:f3:f8:a0:
52:80:54:6d:f3:ad:c3:f0:97:b1:54:c6:8d:d8:73:
0d:9f:ba:17:9d:ed:4e:4f:b5:ce:1e:a6:bf:fb:3e:
f8:0f:39:e5:91:d7:02:45:01:ba:f7:ea:65:46:61:
16:79:92:88:eb:51:df:d3:21:96:4c:c8:6c:6f:da:
d6:f0:75:ac:0a:e0:80:eb:05:fb:89:46:5b:a3:4f:
bb:06:21:88:4f:e8:18:8d:9b:f5:59:5f:e5:fb:da:
a2:79:6c:ca:13:dc:5c:51:74:28:a2:3e:1e:80:53:
e3:48:ab:ba:28:ac:56:f8:2d:b6:31:fa:16:af:4a:
2a:39:50:97:f3:04:ab:3a:2b:1c:93:8c:e0:45:c7:
ff:e9:18:2f:4c:c1:f3:fe:80:ed:d8:f7:32:06:be:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:2E:CE:8C:F9:6C:1B:30:36:06:F5:AA:55:83:91:A3:2A:C9:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddcd9d63-37b9-32c7-affc-51c0c508d76c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:9c04::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:b2:97:37:2e:60:4e:6d:89:ad:3e:dc:49:2e:e0:3d:03:05:
fe:a1:61:3e:b7:e7:c8:cb:58:fa:b1:17:cb:71:cc:83:d4:77:
0a:95:6a:24:61:12:6e:6d:a3:b6:aa:65:7f:f1:78:8c:41:7a:
9d:d8:c2:f8:4f:38:c0:d7:17:8e:49:01:90:01:20:98:63:b1:
07:c9:cd:a9:08:a8:bd:c4:35:48:1c:6d:9b:dc:65:a1:78:49:
05:35:03:39:b3:41:7a:c3:e1:53:99:61:a0:51:52:f5:f9:47:
9c:84:d8:2f:f5:f6:5e:81:fc:d2:28:5b:73:3f:e1:55:ca:f7:
ef:e3:6b:b7:f5:9a:73:7f:18:17:77:3b:42:d2:b3:4d:b8:f3:
51:69:3c:bb:1b:47:36:41:38:1c:c7:f3:18:3a:ba:e7:36:50:
77:70:10:d9:b9:cb:e1:2a:5d:53:37:ba:80:31:fe:71:cf:73:
64:ce:ce:f5:0a:8d:38:14:0a:e1:52:56:14:48:85:31:d0:7f:
7a:89:51:3f:8f:54:e5:86:67:63:29:bb:b9:f7:17:05:0e:bd:
10:d3:0f:b7:3c:7a:21:84:04:96:46:b7:fa:5f:59:1e:1f:b9:
8a:74:3a:bf:b9:a5:95:3e:ca:a0:2c:4e:33:cc:3f:00:b8:25:
d4:a0:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:07:26 2025 by rpki-client