Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ded303a1-e2aa-3a9a-a634-bc4de47d7329.roa
File: ded303a1-e2aa-3a9a-a634-bc4de47d7329.roa (raw, json)
Hash identifier: uNn+X3KaUxZtpkf1YO2oayz7FgeP5x2j4yeQZtRCbFM=
Subject key identifier: 8D:5C:10:86:1C:BB:27:DE:0E:12:E0:CF:EC:D0:E7:22:38:2F:91:93
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285849D19DA1C8EDB4A7E8A713EC00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ded303a1-e2aa-3a9a-a634-bc4de47d7329.roa
Signing time: Sun 11 May 2025 14:55:23 +0000
ROA not before: Sun 11 May 2025 14:55:23 +0000
ROA not after: Sat 09 Aug 2025 14:55:23 +0000
asID: 53667
IP address blocks: 2601:20f0::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 15 May 2025 15:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d1:9d:a1:c8:ed:b4:a7:e8:a7:13:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: May 11 14:55:23 2025 GMT
Not After : Aug 9 14:55:23 2025 GMT
Subject: CN=29397ae6-57f0-4f8f-915b-86b4cce83e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:64:b5:71:52:a0:6d:1a:10:1a:6a:fe:d2:a6:
89:d5:e5:d6:3b:ce:4b:43:4e:39:a3:01:7c:68:7c:
51:5d:0a:8d:74:15:0f:b1:e9:a0:51:c1:dd:21:49:
3e:42:3b:38:7e:36:a8:0f:fd:e1:39:3f:9f:08:75:
98:a7:ff:82:ad:6b:62:23:03:79:96:e8:8d:44:61:
9c:d3:a3:9a:bc:4b:be:ee:62:1b:3e:39:eb:05:64:
06:11:b3:82:8d:c4:87:d6:e8:be:64:94:53:79:f1:
0f:14:0b:0a:8b:4e:a7:fe:e0:c7:a2:f1:73:90:78:
3d:c2:25:95:fa:87:cb:58:81:e8:95:dc:ab:33:18:
33:c9:92:19:83:08:58:fb:54:ff:70:78:4e:d6:af:
ed:39:86:af:13:21:14:b5:2e:a2:b8:50:6c:f3:5b:
c1:4a:9f:f7:2c:8e:38:fb:72:a1:e4:7b:72:0b:c9:
66:d0:5e:38:33:90:16:d7:30:04:9f:29:47:9c:8f:
30:f0:9b:a2:36:6a:54:5e:89:be:68:52:fc:ba:77:
0b:af:85:9d:f4:88:22:71:ef:1b:1d:22:62:2b:fe:
39:2d:67:a8:a1:6d:45:a8:7c:67:2b:90:30:dc:15:
a7:13:9e:53:58:81:bf:b1:87:81:49:cf:cc:e3:6d:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:10:86:1C:BB:27:DE:0E:12:E0:CF:EC:D0:E7:22:38:2F:91:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ded303a1-e2aa-3a9a-a634-bc4de47d7329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:20f0::/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:df:10:25:6d:47:1e:33:d5:86:35:e0:67:93:47:88:f1:3d:
ec:77:3f:c6:07:d7:36:b3:d4:64:4d:7f:10:5d:ed:91:44:3e:
f0:00:a6:a1:a6:c0:28:64:2c:0c:a2:52:ea:f4:95:e5:7b:ec:
02:e7:83:34:2e:ad:3d:07:67:e4:fa:8f:00:9a:20:a4:52:30:
06:fe:80:60:e2:66:d0:92:b0:93:cf:71:97:ad:95:62:97:c7:
83:52:21:f6:46:0c:55:73:a9:77:6a:7e:3b:37:16:d1:8b:3f:
96:2d:76:4d:6b:b4:7b:70:f5:92:0f:de:0a:cb:8e:be:9d:8d:
1f:5e:04:ea:d2:d9:08:a4:4a:73:82:44:25:a8:09:16:58:65:
d4:ce:7c:93:52:25:f0:1c:3f:9a:55:64:cc:fe:ab:d6:35:c7:
8b:43:81:d8:36:fe:2a:a7:6d:43:72:4d:5b:ea:2b:8b:37:4d:
95:c1:8a:48:25:02:5a:2a:ba:f1:f2:64:3d:0f:76:bf:a2:31:
19:21:85:8f:aa:aa:dd:63:9d:a3:b4:c2:bd:5c:a1:16:0f:2e:
7a:7e:ab:00:38:e8:62:c7:5b:8a:3e:7a:c2:fa:a1:76:e0:15:
12:9a:a0:56:bb:c7:aa:d7:f1:a2:21:6c:7f:97:24:73:ba:bf:
b2:4f:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:17:51 2025 by rpki-client