Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4781a01-a84a-3780-9fb6-2def1b299618.roa
File: f4781a01-a84a-3780-9fb6-2def1b299618.roa (raw, json)
Hash identifier: Jr0DhwzSOkb2QfgdWWdBZiRxSjr4ePVUrZLkGgeU6hk=
Subject key identifier: F1:4C:BF:67:38:63:16:5F:C4:D2:33:8D:D1:1D:74:7C:A1:02:3C:97
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E2E8E003AB29F2FE771D80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4781a01-a84a-3780-9fb6-2def1b299618.roa
Signing time: Thu 01 May 2025 16:32:20 +0000
ROA not before: Thu 01 May 2025 16:32:20 +0000
ROA not after: Wed 30 Jul 2025 16:32:20 +0000
asID: 22773
IP address blocks: 2600:8800:4c14::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 01 May 2025 22:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e2:e8:e0:03:ab:29:f2:fe:77:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:32:20 2025 GMT
Not After : Jul 30 16:32:20 2025 GMT
Subject: CN=ac6c81ff-0086-41ba-817a-de1d7085e579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:21:65:2b:5e:65:35:89:37:3a:c3:14:8a:
7b:60:da:d0:f2:d0:77:4b:ed:34:4b:1c:a3:57:1f:
02:ee:31:de:4d:39:c0:df:18:a1:fe:2f:5c:74:31:
25:8e:2d:64:f7:aa:32:36:33:60:b4:66:ad:3d:74:
35:e6:d4:07:a9:10:25:25:44:ea:87:22:34:fd:8e:
2d:31:c1:9c:e1:56:37:ac:6d:3a:fb:71:54:4d:5b:
67:e2:85:f0:51:c0:e4:82:dd:7e:fa:33:cd:10:f2:
39:77:8a:c7:fd:cd:8a:49:8d:06:42:4a:d7:42:50:
e5:16:28:45:47:d0:ac:fb:17:0c:98:d5:ed:6d:1c:
83:6b:e5:1c:a3:3e:de:18:fc:b9:06:8a:4c:d7:34:
47:a8:dc:e2:e1:92:a6:33:ac:b1:b8:25:8b:ec:33:
31:78:3e:2f:40:20:02:be:26:33:de:e7:77:aa:d2:
d1:06:68:41:29:e1:08:cb:d7:93:15:65:a8:93:0c:
32:62:5c:a6:06:27:42:0c:ab:e3:f5:33:64:a6:f2:
e3:a5:86:04:78:15:55:be:24:4f:b3:80:27:45:92:
04:af:a1:2f:80:e3:55:7d:66:d6:17:b7:bc:2b:d6:
ee:bb:0f:ad:6f:85:ab:26:3a:02:d5:98:1d:df:d9:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4C:BF:67:38:63:16:5F:C4:D2:33:8D:D1:1D:74:7C:A1:02:3C:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4781a01-a84a-3780-9fb6-2def1b299618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:4c14::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:56:58:f5:7a:e6:49:b1:d9:b7:8e:1b:29:7f:ba:31:b3:9e:
a4:72:9a:97:e0:58:8b:96:b1:b8:af:e2:80:f0:e2:e1:aa:0f:
06:bb:f3:c9:6c:7f:50:1c:33:c6:ce:4a:3b:fa:bb:3d:28:73:
77:65:67:c8:d3:6e:0c:de:18:16:49:68:be:9f:eb:cd:7e:71:
eb:b0:c6:0f:15:32:10:c8:76:df:62:26:85:67:fb:a6:0b:f8:
b1:97:82:ea:49:55:fe:26:00:98:04:f6:a1:1d:9e:81:e3:b7:
32:ea:ac:5d:09:9e:34:e8:51:cf:ea:0d:fc:6c:d9:72:3a:c6:
3e:4e:a4:f8:ba:cc:f6:3d:ed:bc:b7:3b:66:c6:db:5a:70:03:
6d:15:a9:10:50:41:8c:cf:5e:4d:f6:25:c1:84:f9:a5:df:1b:
2d:dd:8f:49:04:74:c9:cb:3b:46:39:c8:ff:ea:fa:1a:85:1c:
9e:1e:4d:1d:7c:29:ef:9d:4a:0f:b5:67:f7:42:7d:97:05:02:
11:25:46:d8:78:ba:68:40:71:88:dd:84:58:e7:70:20:19:13:
fa:0b:2d:00:6f:ea:95:ad:30:9e:85:37:05:72:0f:e8:20:e4:
9b:7e:2c:7a:8b:df:6a:20:a9:ad:70:78:b0:b3:44:0c:ff:61:
e8:24:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:38:26 2025 by rpki-client