Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/529c9219-2a62-3ad5-8c3e-6e372f231081.roa
File: 529c9219-2a62-3ad5-8c3e-6e372f231081.roa (raw, json)
Hash identifier: BKpnNLcw2fsf3J4aiMTi6xTt7fLQLNB8WpSmKINJZCE=
Subject key identifier: 1A:54:0D:83:7B:4C:DB:84:32:4B:01:0E:CB:C1:A3:16:32:44:CA:40
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858498A42E3AEEFB31FA5AD2D01C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/529c9219-2a62-3ad5-8c3e-6e372f231081.roa
Signing time: Wed 16 Apr 2025 01:30:09 +0000
ROA not before: Wed 16 Apr 2025 01:30:09 +0000
ROA not after: Tue 15 Jul 2025 01:30:09 +0000
asID: 45557
IP address blocks: 2001:470:3f7::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8a:42:e3:ae:ef:b3:1f:a5:ad:2d:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 16 01:30:09 2025 GMT
Not After : Jul 15 01:30:09 2025 GMT
Subject: CN=d77c90ec-4c35-49f6-80a7-3e4ffaf4d056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:14:68:10:4d:68:82:66:68:46:7a:88:d0:
cf:69:87:4c:76:9a:b5:98:64:9e:d6:7a:37:b9:73:
b5:ea:99:0a:45:0f:ae:6a:e9:67:69:33:72:11:64:
d8:90:b2:dc:f3:f9:01:25:77:cd:a3:32:dc:14:e3:
5c:02:ea:22:53:a9:86:a0:00:75:30:1f:23:fa:78:
e1:73:25:f5:35:b4:81:86:6e:43:9f:d3:85:cf:9c:
04:ca:fd:97:ff:45:94:41:85:83:a0:50:6b:23:60:
f3:e0:41:4d:f0:ff:fd:d2:f0:68:33:56:d1:9f:d7:
54:b4:47:5b:8f:e5:43:02:b6:6a:ff:20:8c:39:e9:
ec:da:ed:c2:f3:b1:f3:61:f8:3d:e6:cd:fc:79:d2:
71:8d:2b:10:53:06:07:8e:4f:31:04:a6:71:0a:e0:
86:2a:10:11:c9:90:b7:6c:d5:36:92:52:ed:bb:a7:
9d:e8:fe:1f:72:d5:57:b6:51:cb:7c:64:5a:93:9f:
63:19:62:41:c8:a2:cb:7e:80:03:9c:52:3c:fe:29:
63:57:ee:f5:52:89:37:10:81:63:f5:01:a1:84:db:
72:77:b5:45:be:67:71:fb:90:41:5c:26:18:7f:dd:
ef:7c:cf:de:1a:2c:30:17:8f:4f:67:76:cc:5c:cc:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:54:0D:83:7B:4C:DB:84:32:4B:01:0E:CB:C1:A3:16:32:44:CA:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/529c9219-2a62-3ad5-8c3e-6e372f231081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:42:b8:96:c2:f3:a2:f2:fd:a8:b8:45:10:ec:c6:83:d2:8a:
8c:c2:61:59:7b:32:a2:be:71:c9:28:5d:da:c4:a1:24:07:d9:
7f:af:5e:46:10:eb:64:02:4a:ca:9e:69:cb:8e:09:01:1b:d7:
2a:cd:d5:d9:ed:b0:78:8a:1d:cc:2d:8d:87:e3:47:08:ab:59:
7b:47:0a:cb:c6:13:8c:88:58:0f:06:8b:a7:5a:41:5b:5e:49:
3f:42:a4:8a:d3:70:c0:3d:33:bd:ca:10:8f:d5:e5:4a:58:c6:
6c:6e:83:07:89:dc:f1:3a:2d:25:23:b0:a3:da:24:48:2a:b6:
a3:40:80:86:88:be:0c:94:ee:f4:21:b0:81:15:15:92:eb:3a:
50:ab:bd:42:15:4e:8a:e4:3c:e2:47:5d:be:37:66:d0:10:aa:
f3:8b:ff:81:32:95:3f:cd:94:f4:e1:a7:16:67:cb:bf:9d:15:
e3:cb:71:c3:c6:41:c0:86:b7:50:43:c7:db:cf:8d:31:f2:91:
3e:82:41:fc:f8:ef:66:13:96:27:2d:e4:81:77:1f:2b:89:18:
5b:fd:2b:1f:bd:83:fa:88:a7:24:f3:7e:ce:4e:7b:14:71:e6:
85:a6:45:5d:22:21:b1:5a:b2:a8:29:50:a5:d3:f8:4f:18:7a:
e4:d0:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:37:05 2025 by rpki-client