Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/855617c8-8f14-3d63-a804-822335891c42.roa
File: 855617c8-8f14-3d63-a804-822335891c42.roa (raw, json)
Hash identifier: mz7OK3/JqvcHds2R8QniNXdTprm8SXpar8TDga6URAM=
Subject key identifier: 10:36:DB:02:68:35:09:7A:BE:FB:D7:A4:59:35:05:7E:84:EA:AB:4D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858418BFA719A8496219CE1EB8280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/855617c8-8f14-3d63-a804-822335891c42.roa
Signing time: Wed 12 Apr 2023 12:00:00 +0000
ROA not before: Wed 12 Apr 2023 12:00:00 +0000
ROA not after: Tue 15 Jul 2025 04:00:00 +0000
asID: 11344
IP address blocks: 2600:1900:8010:1000::/52 maxlen: 52
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:8b:fa:71:9a:84:96:21:9c:e1:eb:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 12 12:00:00 2023 GMT
Not After : Jul 15 04:00:00 2025 GMT
Subject: CN=89e5abf1-28b6-4304-8e67-284a0d18a9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:15:48:e1:d7:91:12:50:ac:88:6e:67:fc:
3a:f5:6e:2d:34:ec:06:9b:9d:15:48:06:23:7b:c0:
46:f7:0a:ac:a7:8f:da:9c:cf:9c:60:d9:fb:e3:05:
07:40:d8:10:60:44:3b:47:70:37:31:41:14:a1:64:
bc:5b:f6:23:6a:2d:5e:11:14:8e:fe:4a:43:e1:13:
31:18:ce:1c:99:13:47:db:43:b6:9f:3a:52:a0:d8:
ca:84:f5:70:8d:6a:18:78:9e:3e:53:7c:b5:61:11:
17:18:b5:fa:8a:9d:02:28:b9:c1:13:5c:3b:7a:49:
46:f0:03:07:6a:42:31:5b:c3:f7:df:85:fb:bc:dd:
78:31:9d:3b:17:8a:64:12:df:6d:49:99:19:14:f8:
cf:d0:2b:71:6d:ef:95:04:d3:e8:03:01:a5:28:7e:
d1:1f:44:0d:89:ff:3c:f6:80:fe:ed:d5:ea:5c:6b:
72:11:9a:14:94:60:9f:02:7d:5d:7a:e8:68:9e:a5:
e0:be:9d:df:71:74:13:b3:ae:f3:e9:7f:99:25:38:
ee:15:4d:b5:fe:79:93:0c:86:d4:43:5c:95:e0:b9:
78:f8:49:56:14:fb:47:08:e8:01:41:23:16:c0:af:
93:47:f7:f7:32:c8:84:2e:d5:02:8b:89:96:45:dc:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:36:DB:02:68:35:09:7A:BE:FB:D7:A4:59:35:05:7E:84:EA:AB:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/855617c8-8f14-3d63-a804-822335891c42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1900:8010:1000::/52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:0b:97:51:ec:93:49:ad:66:b2:5e:e0:87:22:64:44:aa:fd:
70:79:e6:2b:24:49:fb:ad:8c:92:97:e7:07:0a:1f:22:f7:2a:
c7:92:b6:1b:fe:66:fc:a3:94:98:1f:6a:2c:c6:df:97:23:62:
51:88:26:43:95:d1:c9:83:64:27:49:4b:24:26:8d:c9:35:bb:
c6:3b:8c:1d:77:39:98:2b:c7:04:a9:19:eb:18:b2:be:b2:4e:
df:54:fc:e5:d8:25:5e:01:aa:c4:f9:53:0c:9a:be:a6:ce:65:
f5:98:8f:52:25:b4:18:c2:bc:63:b1:5f:a5:a8:08:27:d1:2b:
98:8c:d9:3a:b0:d5:4f:2a:a6:eb:2a:57:2a:50:00:ac:66:3b:
ce:d0:58:a6:82:7e:43:6c:65:b7:14:18:4d:4d:20:7a:b7:d2:
5b:68:ed:f2:a9:59:80:1d:47:c2:50:bd:cd:99:ed:f4:da:0c:
ff:bf:ce:00:b8:53:6a:fd:40:69:fa:a2:96:83:b1:58:a9:fb:
e0:cd:d9:cf:3d:6c:46:6e:bf:ff:88:6d:df:81:cc:88:fd:8f:
3f:48:9b:9c:24:8d:ac:42:41:0d:98:ed:82:57:3c:9c:b5:72:
5e:3d:b1:9c:ea:05:a5:21:81:7d:b8:0d:0e:f8:0a:bb:14:3b:
43:9f:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:47:41 2025 by rpki-client