Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b99f940-11b6-32b9-8f72-144f4aca49df.roa
File: 1b99f940-11b6-32b9-8f72-144f4aca49df.roa (raw, json)
Hash identifier: Sb9G9LU4GKNysojqvKQtFIDUSp0SAdvrYKmMYUKqprc=
Subject key identifier: 2E:9D:A2:91:E8:1F:DA:18:4F:59:BE:FC:32:64:21:39:EC:8E:46:CB
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584A1250436183B9E75CEE75B580
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b99f940-11b6-32b9-8f72-144f4aca49df.roa
Signing time: Tue 03 Jun 2025 19:07:02 +0000
ROA not before: Tue 03 Jun 2025 19:07:02 +0000
ROA not after: Mon 01 Sep 2025 19:07:02 +0000
asID: 3939
IP address blocks: 2001:418:1401:a4::/64 maxlen: 64
Validation: Failed, certificate revoked on Tue 03 Jun 2025 21:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:12:50:43:61:83:b9:e7:5c:ee:75:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jun 3 19:07:02 2025 GMT
Not After : Sep 1 19:07:02 2025 GMT
Subject: CN=9eb2aa85-7e43-49e8-b265-7736fd34dc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:e8:30:7b:57:e5:37:57:6c:ea:06:9f:26:
3a:b5:8e:0f:fc:a0:bf:fb:77:7d:20:85:c5:51:64:
7a:19:61:8d:83:2f:86:81:96:ef:5b:a1:23:ba:c8:
8b:49:17:0b:bd:1e:74:d3:16:ab:8d:11:1d:a5:f6:
59:8a:5d:b6:5d:9d:89:6b:7a:7f:ba:0c:08:c0:fa:
ad:99:da:a3:b6:e3:dc:e9:46:ce:f9:41:6a:71:74:
12:a0:c7:01:79:dd:9a:9a:f0:f3:f9:0f:4a:1f:56:
1c:ee:6d:49:8f:0b:8d:34:f9:ee:f5:48:0b:06:f3:
98:f0:be:1c:c1:35:ce:53:d9:a9:01:75:e6:89:58:
5d:a3:ba:ba:e9:44:0b:63:45:c4:7e:2a:c8:39:bb:
a7:93:2a:21:cd:cc:46:8e:49:89:a8:0c:19:5b:73:
0f:1d:1d:77:67:b4:52:0b:b7:a1:2b:8d:b0:bd:8c:
e3:b2:17:bd:18:09:9b:65:48:c6:a5:55:3e:17:70:
43:c0:d4:4b:a0:a1:41:d9:aa:02:f3:2b:0a:65:40:
1f:bb:e6:f8:04:10:80:cf:e7:0a:05:34:19:f4:01:
3e:84:7b:4e:db:82:25:ca:75:eb:ed:92:ae:64:2a:
d3:59:c3:96:43:99:d3:6b:c3:04:ef:01:84:8a:5b:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:A2:91:E8:1F:DA:18:4F:59:BE:FC:32:64:21:39:EC:8E:46:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b99f940-11b6-32b9-8f72-144f4aca49df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1401:a4::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:6f:28:22:0c:04:3a:b3:81:cc:d4:ef:a0:ec:1d:5f:2a:ac:
05:4c:a8:84:52:55:7b:05:18:07:32:32:86:18:ff:f5:10:e7:
1d:c4:c5:6c:ca:54:a0:1f:de:1d:fe:3c:c2:4f:f8:0f:0f:61:
2d:5a:aa:65:11:94:4f:7c:b3:20:bb:bc:7d:6a:db:eb:75:17:
3e:f5:c7:4b:a8:c4:ea:10:69:dc:f7:85:34:d2:ae:69:ff:3f:
ae:5f:b4:9c:57:22:ec:c7:74:01:12:d6:93:98:ca:9a:29:0e:
92:8f:bc:d3:b8:ac:91:09:61:da:80:a0:c1:91:b3:83:d2:0e:
69:92:83:bb:ba:d9:c7:37:20:e7:bd:26:25:2a:c2:74:d9:f0:
60:07:23:f2:6c:00:de:da:31:22:e1:5d:54:34:c4:8d:ea:b0:
03:75:bd:51:1b:ee:fd:06:57:72:a9:b9:8a:d5:36:0d:1e:3b:
6d:ee:22:57:c0:26:51:99:20:91:49:09:f9:e9:a5:7c:36:e4:
84:54:4c:d3:9d:89:e2:8b:a2:fd:d0:8e:ba:1c:42:65:ce:70:
08:05:bc:c8:44:cb:8b:c0:0c:24:b7:13:69:ec:84:f8:ac:70:
f8:c2:7a:9c:fa:7b:72:7e:37:3e:02:dd:31:ae:39:95:77:4d:
a7:12:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:04 2025 by rpki-client