Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f12c46c-8d92-37e6-85ed-e8a29fe2f94e.roa
File: 9f12c46c-8d92-37e6-85ed-e8a29fe2f94e.roa (raw, json)
Hash identifier: b8NebdfvtkHTtrtZVN965Pji+uCsiC/dyuihd2Hv3Ls=
Subject key identifier: EA:14:9C:1E:F6:9F:FD:5D:AD:E5:3A:9A:DC:07:E1:14:D2:12:D0:95
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285841D3DD9973566B7D4E6D859C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f12c46c-8d92-37e6-85ed-e8a29fe2f94e.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 396982
IP address blocks: 2600:1900:42d4::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:99:73:56:6b:7d:4e:6d:85:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=025ad3c6-7c39-4d3e-9c3c-2689cb780553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:b1:91:db:c8:fc:9a:2b:f1:30:fd:c2:55:
89:28:af:5a:d3:d3:e2:6d:ae:1f:f3:e2:0a:54:06:
bd:70:b9:a0:66:53:1c:75:80:fd:9f:5d:d8:1c:a7:
a9:8f:45:8f:2f:43:bd:34:b5:25:51:a7:1c:77:19:
e0:ba:20:17:97:13:2d:11:36:70:b7:a2:fc:8a:5f:
36:85:c3:59:34:61:a6:88:70:39:d8:a5:2d:18:c4:
1c:19:4b:0b:f9:7f:59:71:c4:5f:6e:06:01:eb:3e:
e7:20:c7:39:da:93:86:c6:b3:a5:23:57:08:1e:ca:
d2:f5:12:91:d6:4d:81:89:d3:bf:87:ba:7d:2c:d3:
04:ed:dd:c2:ba:db:ba:32:17:37:0d:c1:78:cd:08:
56:75:16:c9:18:09:22:d6:09:e9:94:d8:9d:f8:e9:
51:41:13:40:fb:1d:00:02:5a:f7:a7:70:95:fe:49:
df:1e:f7:c8:cd:5a:da:44:be:46:f9:4b:46:da:ec:
01:6d:65:8b:16:d1:2c:9f:16:13:31:14:97:aa:bf:
ee:e5:64:a6:2f:b0:9b:bf:76:96:08:c2:fa:0f:4f:
f0:28:13:3f:93:63:52:ab:68:2c:57:25:9c:37:e0:
1f:b6:90:7a:4c:80:ee:a7:12:fa:52:d8:7c:03:09:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:9C:1E:F6:9F:FD:5D:AD:E5:3A:9A:DC:07:E1:14:D2:12:D0:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f12c46c-8d92-37e6-85ed-e8a29fe2f94e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1900:42d4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:85:16:ed:88:48:ba:b9:aa:12:98:75:6f:46:7e:f2:1f:5c:
07:b7:37:86:75:6e:ef:31:7d:e1:e7:b3:73:d8:aa:80:3a:83:
62:62:04:85:77:b3:7e:03:75:08:3f:4b:cb:a0:a2:5d:38:07:
a7:84:f3:26:26:73:53:d8:4f:86:1a:2d:c6:d0:4c:14:60:2d:
d6:2c:b2:a3:4c:32:0f:03:5c:3c:5d:fb:f5:92:3f:87:79:e8:
83:f6:22:98:84:ad:33:80:fa:af:27:59:64:9d:a5:b5:83:35:
4c:08:70:c8:82:b9:c2:aa:c2:aa:8b:9b:81:f1:d5:52:4b:28:
56:ba:c1:fc:fd:8b:b6:e8:c9:25:2b:ae:41:b1:bf:c3:6d:14:
cf:1b:18:fb:13:ea:6a:c1:70:11:76:6b:c9:fe:0b:f5:33:96:
57:00:06:e1:10:0e:57:b5:35:34:c4:9a:55:2d:65:48:ca:e3:
4e:a8:7a:ca:62:c9:cb:27:0a:3d:47:fb:16:de:f4:60:88:62:
02:86:b4:fb:a8:15:c9:83:22:ca:12:00:9f:f3:0e:c2:92:1a:
25:5c:5a:8e:ed:8e:d5:ae:17:f4:d8:43:cc:43:35:39:f2:c4:
44:df:54:b4:33:f9:6a:ea:03:f9:96:94:5b:03:63:c6:01:13:
8f:b4:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:06:38 2025 by rpki-client