Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/437da57b-5650-3c03-a5d7-27c76c54210a.roa
File: 437da57b-5650-3c03-a5d7-27c76c54210a.roa (raw, json)
Hash identifier: umTIG6gUI1CEbDBMmPqFOlZDomyAaTN7rfmfD35zlPs=
Subject key identifier: 74:5C:96:80:35:71:12:A8:11:43:17:46:61:BF:35:18:AB:14:31:2B
Certificate issuer: /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial: 010D0C9F43285848EE38125AA86A564D197D1780
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/437da57b-5650-3c03-a5d7-27c76c54210a.roa
Signing time: Wed 19 Feb 2025 04:02:15 +0000
ROA not before: Wed 19 Feb 2025 04:02:15 +0000
ROA not after: Tue 20 May 2025 03:02:15 +0000
asID: 206081
IP address blocks: 2602:2da::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Feb 2025 03:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ee:38:12:5a:a8:6a:56:4d:19:7d:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Validity
Not Before: Feb 19 04:02:15 2025 GMT
Not After : May 20 03:02:15 2025 GMT
Subject: CN=ae9270be-fd84-466f-919f-8fb42b89d7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:8a:12:d7:da:a4:3b:ca:29:1a:3c:dd:53:
aa:3d:0e:42:b8:9a:83:a5:3f:1d:93:c3:41:22:12:
a9:65:96:cf:20:37:ca:3f:99:fe:7e:1f:a2:f4:b8:
6d:c4:37:47:19:dd:d3:3b:02:27:c3:3c:2b:71:9f:
5a:c8:41:ba:16:dc:01:1b:f1:b7:60:a8:62:96:68:
c8:c5:b6:7a:21:da:a1:51:08:13:03:5d:4b:06:f5:
d5:3e:e4:66:48:b3:bd:a0:c2:22:f7:e7:41:ac:c2:
1e:54:85:9b:a2:f5:96:1b:30:b8:8a:6c:0a:0e:ac:
4a:92:bf:d4:19:bd:42:d1:7c:9d:ab:80:e0:7d:2d:
a3:c3:21:38:4e:9a:3c:10:76:7c:39:71:85:32:9b:
61:38:6a:ae:7f:91:02:92:45:b0:7a:1e:0e:ef:1c:
d2:8c:7c:17:47:43:2a:95:38:c8:77:3c:97:e9:05:
d0:12:eb:fe:a3:29:11:99:aa:78:77:c0:ca:b3:a5:
68:7f:06:41:31:a3:71:5c:a1:23:c0:0f:03:d6:0e:
74:ea:d5:0e:45:7e:50:8a:6b:ff:70:52:57:a2:3e:
48:b4:92:28:a3:6a:79:eb:7b:b0:7d:a6:05:2a:65:
0b:ca:2b:c8:25:03:6f:58:39:e5:c1:74:37:4e:fb:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5C:96:80:35:71:12:A8:11:43:17:46:61:BF:35:18:AB:14:31:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/437da57b-5650-3c03-a5d7-27c76c54210a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
X509v3 Authority Key Identifier:
keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2da::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:f9:33:46:12:af:00:b4:68:bc:85:c5:a9:5f:9c:f9:80:32:
6c:fa:c1:09:32:5a:44:a9:4e:61:ee:9e:2a:1f:b5:b7:1b:85:
ca:21:da:3f:f9:3f:44:e9:91:3c:42:34:a9:64:66:c1:35:10:
55:a8:70:7e:cb:9f:3d:c6:83:c2:1e:42:9b:6c:f5:9c:e6:9d:
ef:f7:63:97:03:a0:d6:98:b1:98:25:f7:02:62:be:f7:e9:3b:
82:56:3f:7b:1b:05:11:f8:93:7e:56:5d:51:b0:70:f5:cf:45:
ec:c7:9f:07:86:a8:85:7c:9d:2d:f3:a9:de:c8:a1:72:0a:f0:
54:57:5c:9b:29:9f:c3:b4:57:a7:a3:f4:95:1f:dd:60:a5:b2:
af:20:10:d4:fa:5d:2b:1e:3b:7c:30:b1:85:ed:18:75:f9:35:
07:b2:c5:3b:73:a3:7d:da:e6:7e:5d:93:bf:83:ae:91:dc:de:
60:ad:33:67:2e:02:1b:fd:7c:bd:92:e8:e7:b5:a1:77:24:e6:
6c:eb:99:c1:75:b8:c3:56:1c:6b:12:c5:98:33:23:65:61:cc:
39:8d:96:91:b6:8d:f8:14:19:d6:ba:71:d3:73:56:eb:a1:ff:
b0:0b:10:03:ad:28:e6:ff:16:01:6b:d8:23:d0:d6:76:9a:7f:
c9:7d:70:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:49:00 2025 by rpki-client