Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60891515-dfc5-3684-8883-1da1e3f51a24.roa
File: 60891515-dfc5-3684-8883-1da1e3f51a24.roa (raw, json)
Hash identifier: 0v/ScT4rrumhVdXWZwgq8rUj1d7NrUxlOP+wIDTHMms=
Subject key identifier: AE:41:59:2D:D2:CA:AA:F0:BC:1E:91:20:40:93:3E:DC:57:F1:01:5A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285841D3DDAED5FB39597602D10EA8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60891515-dfc5-3684-8883-1da1e3f51a24.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 396982
IP address blocks: 2600:1900:42d6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:ae:d5:fb:39:59:76:02:d1:0e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=5e241d8f-6487-4ef4-8ff5-42dba36ba363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:72:b7:6f:dd:19:82:85:8d:d8:8c:0a:e3:
9d:86:79:ab:49:c9:56:97:d7:92:34:14:75:81:6a:
80:3b:99:ca:00:c8:4e:f2:8a:7f:92:31:6b:f9:21:
8e:b3:96:1e:48:c2:b6:31:85:75:13:7f:84:16:8a:
86:dd:44:37:e3:18:66:e0:59:2b:cb:99:bd:ad:75:
b6:17:6f:17:32:5f:4b:3b:bc:f6:b4:f5:5e:0d:40:
56:96:f6:93:81:4b:e3:10:bb:64:ea:99:43:a8:2e:
1d:02:af:e8:02:2a:ab:2e:02:2a:28:90:23:dc:79:
cd:22:e8:60:e1:52:8e:d6:9d:f4:bc:00:c1:99:e0:
9a:1f:b8:6f:53:20:4d:2f:6f:6d:3b:77:38:5f:57:
fe:d8:0a:38:70:e8:ee:66:00:7c:fa:c4:48:c0:7d:
2a:58:8f:78:16:b1:a5:c4:14:a5:a8:45:18:1d:de:
e2:b3:02:bd:e1:46:66:85:93:74:e4:a8:50:c0:21:
6b:3c:b8:5d:ec:5d:dc:fd:c2:92:d5:df:ce:cd:2f:
4f:cf:25:06:91:7f:33:98:85:46:6c:a6:e1:00:02:
e7:d7:6f:1f:61:01:36:44:98:f7:26:8f:c0:52:d8:
1d:e2:40:c7:ea:0b:06:22:71:be:24:ee:7e:be:bd:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:41:59:2D:D2:CA:AA:F0:BC:1E:91:20:40:93:3E:DC:57:F1:01:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60891515-dfc5-3684-8883-1da1e3f51a24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1900:42d6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ea:70:a2:84:5f:61:43:b0:69:0f:2c:4e:1f:9e:45:6d:d6:
71:3f:cd:85:71:52:46:15:1e:35:c9:d7:ba:74:c6:0f:a7:04:
b5:2a:0d:62:67:3d:ff:43:f8:f2:85:2b:28:d3:d6:34:51:db:
ac:df:11:ef:3f:6d:89:b8:17:80:71:e3:29:03:6b:a4:88:ee:
23:b8:0e:7a:17:25:2a:20:62:60:e8:29:5f:fd:b8:99:45:cb:
7e:66:46:dc:99:c0:d4:f9:fb:dc:11:97:ed:81:e4:df:07:76:
9b:df:2a:fb:0b:f0:03:db:e1:0d:46:49:37:ef:ec:03:32:b2:
88:78:89:95:ab:51:74:68:5b:8d:00:fe:d7:03:9c:0a:bd:ee:
57:da:1d:a4:ff:86:06:d5:cd:75:52:01:81:8a:46:68:9e:06:
c3:b7:a5:bd:43:98:db:d8:08:c5:4b:1a:61:a0:8b:cb:fa:c5:
54:ac:bd:9d:86:8c:1c:b2:ea:cb:ae:b9:5a:49:db:9a:43:99:
15:93:d8:b2:36:f0:57:73:78:83:8f:96:9c:b5:4a:a8:4d:8f:
00:ee:8e:39:ea:ab:91:a3:3f:df:45:29:36:64:63:a1:54:16:
6c:f1:26:b4:48:73:4a:37:7e:61:06:8c:88:90:05:a6:65:96:
d6:2d:7b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:48 2025 by rpki-client