Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b168167-0912-3d0b-8d77-192bc5868439.roa
File: 3b168167-0912-3d0b-8d77-192bc5868439.roa (raw, json)
Hash identifier: wiYq7T50WzR2/NfNGIb9YamyjYYHhKhUXodXKrVADNc=
Subject key identifier: AE:43:86:E3:26:E8:37:43:E3:BC:6D:44:B8:56:00:38:75:B6:0F:DF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584A00DB1E8EC6F7A6168E55BBE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b168167-0912-3d0b-8d77-192bc5868439.roa
Signing time: Wed 28 May 2025 13:01:04 +0000
ROA not before: Wed 28 May 2025 13:01:04 +0000
ROA not after: Tue 26 Aug 2025 13:01:04 +0000
asID: 396559
IP address blocks: 2001:500:126::30/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 10 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:00:db:1e:8e:c6:f7:a6:16:8e:55:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 28 13:01:04 2025 GMT
Not After : Aug 26 13:01:04 2025 GMT
Subject: CN=4a56fd47-532a-4d8d-8603-6013f73263ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:85:47:9a:d2:b9:09:59:53:9c:16:7a:68:
de:0f:33:6e:ba:6d:2e:35:ef:f4:6d:0e:7c:c0:18:
f7:87:bc:75:fe:32:a4:7c:ea:4d:e5:c6:e4:c2:16:
c6:e4:97:5b:8e:2b:3c:da:d7:85:5f:38:79:0f:dd:
60:3a:f7:bc:4d:af:de:17:5b:08:3b:00:b3:d8:c5:
a0:02:dd:a1:40:5e:cd:0c:11:e8:b1:e4:fd:33:41:
33:e8:43:5f:75:56:74:46:d0:b4:64:41:6b:73:84:
57:fd:75:de:ad:52:8e:27:0b:01:0d:6d:b7:30:2a:
1e:bf:aa:25:2b:f6:54:cd:bf:77:f4:8f:05:a1:ea:
af:e6:81:a7:2c:b0:0e:f3:ce:d9:3f:3c:7b:e6:bf:
cc:11:01:1d:6f:39:db:14:88:15:77:b2:02:24:8b:
1e:12:9b:26:ba:96:e6:e1:d5:d2:2c:43:42:22:3a:
33:36:9f:1c:c5:79:8e:35:01:bf:f1:3f:28:a1:05:
c1:8d:d0:7c:36:2d:62:a4:5d:3c:ca:e3:ac:35:39:
70:24:58:48:ce:a3:86:d9:4b:d3:59:10:6e:36:b0:
9b:07:91:b7:a8:60:d4:b5:d3:fe:1f:aa:04:1b:ec:
f7:18:55:be:08:8b:26:21:43:63:8a:ab:22:56:38:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:86:E3:26:E8:37:43:E3:BC:6D:44:B8:56:00:38:75:B6:0F:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b168167-0912-3d0b-8d77-192bc5868439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:126:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:bb:e1:35:56:85:68:94:eb:2d:e3:9c:85:48:be:71:b3:b4:
ab:05:0c:0c:c5:a6:51:cb:bc:d9:e9:a3:d2:26:06:ff:31:f0:
cc:01:12:4e:7e:ce:06:cd:61:89:e4:6c:ff:6c:2f:df:af:0f:
7a:1f:4e:e7:7e:35:b9:9a:8b:00:f3:76:e2:e4:d6:5d:9a:d5:
66:61:8a:c0:23:3a:c1:a9:55:96:b3:ec:e8:d1:02:db:a3:17:
7f:11:1c:39:2c:dc:54:2f:43:7b:d5:eb:a5:01:84:20:b4:89:
c5:2d:7e:da:27:ff:a1:a2:0e:f8:08:4a:04:b8:21:10:41:e8:
a4:39:be:fc:bf:f7:87:e8:ef:32:b1:37:82:5b:38:57:3a:1a:
44:8c:9f:71:5c:be:da:af:97:d5:be:2e:05:ad:2e:65:e2:96:
d7:88:bc:a2:ce:91:7b:a9:69:7b:8f:8e:90:38:52:40:79:10:
a3:45:0d:e5:87:fa:38:1e:65:36:6d:84:8f:4f:dd:3e:ca:1d:
3b:47:cf:d8:d8:3d:c9:dd:24:63:90:1f:0a:ad:4a:e9:96:72:
3b:b8:24:ef:6a:53:73:d9:02:7f:b2:e3:16:97:68:5f:6e:9a:
77:07:e8:47:7e:bd:d1:23:a9:10:21:85:81:40:1a:20:45:6f:
87:39:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:20:49 2025 by rpki-client