Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08d96e3f-6c86-34b6-9fa4-4f3ec60a3fd8.roa
File: 08d96e3f-6c86-34b6-9fa4-4f3ec60a3fd8.roa (raw, json)
Hash identifier: Nx/7fu77nu4lQpIUx5ReA7alrNiRgeg3o1huTShHiwM=
Subject key identifier: 7F:8B:15:CC:62:D0:49:8D:FB:A4:B8:87:E9:87:A3:63:70:A2:6E:05
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848C9BF8184180AE42BD72C0F28
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08d96e3f-6c86-34b6-9fa4-4f3ec60a3fd8.roa
Signing time: Thu 06 Feb 2025 02:30:14 +0000
ROA not before: Thu 06 Feb 2025 02:30:14 +0000
ROA not after: Wed 07 May 2025 01:30:14 +0000
asID: 51202
IP address blocks: 2001:470:21f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Feb 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:bf:81:84:18:0a:e4:2b:d7:2c:0f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 6 02:30:14 2025 GMT
Not After : May 7 01:30:14 2025 GMT
Subject: CN=1edbbd2f-6348-4ef7-87c0-fab8e0066630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:2f:de:81:09:fe:2e:e8:08:57:90:92:bc:
1f:3e:da:50:e0:b5:bd:16:e1:55:bc:47:45:93:42:
cb:40:e6:fd:80:5f:e4:85:fc:f0:d5:4f:5e:bc:56:
95:be:e6:6a:6b:69:ca:82:aa:fb:8e:c5:34:39:a8:
5d:0f:f6:69:66:1b:d0:56:c6:38:48:fe:f8:42:6e:
99:8a:12:61:31:47:a6:c4:28:8d:e4:27:45:80:c9:
cf:cc:b5:ee:7f:85:b3:04:f9:c3:2a:dd:9d:4f:e5:
12:4a:a5:a9:28:25:f1:83:7a:c1:f3:98:15:a4:6f:
76:72:50:cd:24:f5:aa:db:0c:78:74:65:f8:82:99:
c6:f0:d0:05:00:c6:ba:4c:7f:d4:c4:6d:43:3e:2c:
1d:53:22:35:50:55:1d:76:55:89:47:13:1c:8d:67:
43:ca:58:a4:86:23:41:ad:b4:0e:1e:8a:41:ca:be:
a2:2d:9c:82:6f:94:2c:8a:50:8d:a7:d2:e4:9f:be:
a2:75:e2:a2:b7:8a:3e:66:9e:55:93:0d:ed:fd:d3:
3c:74:c4:f7:0c:6b:87:ce:8c:6d:4c:8b:04:89:fc:
d7:f9:66:3b:a7:78:69:41:c8:cd:52:b5:7b:89:39:
33:a1:b4:b8:5a:77:9f:c0:f9:0f:db:f1:99:96:62:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:15:CC:62:D0:49:8D:FB:A4:B8:87:E9:87:A3:63:70:A2:6E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08d96e3f-6c86-34b6-9fa4-4f3ec60a3fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:21f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:22:91:a5:ec:0d:97:83:93:d8:47:b2:e1:1c:17:6f:1e:e8:
06:cc:d2:24:7a:b5:96:50:0c:ca:0f:4f:fd:02:af:52:cc:1d:
79:12:3f:65:21:af:e5:29:6c:1c:6f:76:26:de:2c:24:19:45:
5e:dc:da:07:1f:01:3d:53:2f:5f:05:74:74:14:de:6f:93:c1:
ba:5f:e1:ff:2d:4b:24:f0:c6:8c:20:b8:d5:ae:a6:d4:1e:1a:
95:6d:76:a8:2d:69:2b:79:d7:1d:5a:3d:43:de:c3:50:fe:f3:
c2:5b:f3:a9:dd:ce:38:85:67:fb:50:eb:6e:5e:44:1b:12:3c:
db:db:ec:5f:e1:18:4e:9b:83:79:e3:b8:b5:04:86:3e:f0:59:
bd:fd:e6:6f:d8:5f:2c:91:7f:f4:01:76:2c:26:dd:92:4f:cd:
f0:9c:9c:14:16:f2:d1:b7:ed:1a:0c:cc:aa:76:d1:89:5c:d0:
94:3b:61:f2:2f:51:f2:ff:ba:70:e4:88:6b:e0:bc:a6:bf:d4:
46:c3:83:ae:33:67:aa:35:87:42:b7:a5:f1:a5:d6:1d:41:89:
08:58:b3:6f:b5:96:9d:5a:5a:a9:8c:37:06:57:34:a1:19:cd:
14:15:82:75:e7:0a:26:c8:7e:bc:f8:ac:e2:de:8e:de:2f:b0:
56:f5:4e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:57:20 2025 by rpki-client