Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae2bbb15-f061-348b-a0fe-621e01d72d92.roa
File: ae2bbb15-f061-348b-a0fe-621e01d72d92.roa (raw, json)
Hash identifier: tykEdVzmP7/UHe8rObZkE2FcabFOOHIGwhnrYocmTUo=
Subject key identifier: C9:2F:48:11:ED:94:36:12:CE:33:DC:BC:FF:56:87:BE:24:CE:DE:0B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849D758B059A5F4D7E38A12A700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae2bbb15-f061-348b-a0fe-621e01d72d92.roa
Signing time: Tue 13 May 2025 16:11:19 +0000
ROA not before: Tue 13 May 2025 16:11:19 +0000
ROA not after: Mon 11 Aug 2025 16:11:19 +0000
asID: 396559
IP address blocks: 2001:500:123::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d7:58:b0:59:a5:f4:d7:e3:8a:12:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: May 13 16:11:19 2025 GMT
Not After : Aug 11 16:11:19 2025 GMT
Subject: CN=9d2d93ec-a896-4e16-b743-72fe6d3bf695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:55:11:50:a0:01:6f:b2:f6:ae:81:d6:58:
12:9f:ca:e8:d7:d0:51:a7:42:1c:d6:b3:b2:df:4b:
32:4c:cc:bd:1b:c4:c1:79:1e:12:33:e0:61:24:43:
68:01:3e:60:d0:5b:07:36:18:c9:f1:b6:ba:96:bf:
57:3b:6a:fc:17:4a:b6:11:12:d9:8f:0f:99:5d:e8:
85:f8:80:ce:96:f7:6c:99:46:d5:55:15:2a:6c:dc:
d8:63:db:5e:7d:c0:b3:a4:8b:38:89:48:d0:1b:1d:
52:f7:6e:79:63:b5:64:93:4c:42:8b:a3:40:7c:29:
7a:36:92:25:3c:41:26:84:01:37:ea:5b:11:b3:63:
eb:6d:72:ab:ad:69:ec:dc:f6:55:5b:66:40:94:67:
06:d7:40:aa:8a:4a:07:5f:9b:c1:74:9c:a9:b0:fc:
44:ad:18:0e:0a:13:cb:a7:6a:69:e8:f3:87:4b:2e:
ef:b9:4d:32:57:5b:1c:8e:38:c0:f6:64:a7:e2:f0:
fa:0e:dd:b1:f4:cb:4d:fc:88:30:ca:bd:37:dd:10:
ad:ca:22:04:92:f7:31:b3:46:fc:1a:29:b6:c5:c6:
53:b4:0c:93:1d:e2:4c:34:bc:12:6a:37:83:e5:e8:
8d:84:6e:cc:6a:30:c0:14:0f:1a:01:b6:98:63:e3:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2F:48:11:ED:94:36:12:CE:33:DC:BC:FF:56:87:BE:24:CE:DE:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae2bbb15-f061-348b-a0fe-621e01d72d92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:35:27:b4:26:ab:db:7e:f2:fe:20:1c:49:05:49:6f:25:e0:
89:3f:47:9e:e2:6c:80:2f:89:d9:6b:59:1c:d3:9b:49:10:9a:
1d:1a:36:b0:71:86:be:d3:3d:22:f2:29:a6:3d:cc:c8:3b:68:
7e:fb:0f:54:d0:9f:99:c2:3a:51:1e:b0:2e:16:ae:52:db:6b:
f4:87:47:1e:ab:34:34:88:e3:1e:31:7f:0d:42:70:d5:24:93:
fe:fe:0f:6e:67:36:20:9f:de:e7:f2:c3:4d:b6:7f:4a:5f:4a:
1e:56:cd:c6:5b:55:88:aa:53:cd:5f:c6:d7:cc:c7:b4:3d:dc:
f6:04:fb:65:cd:5b:6a:4f:6d:9b:fc:11:18:fd:4c:64:3d:77:
58:5d:ea:79:11:18:b7:66:1a:35:62:c9:6b:5a:cc:39:84:77:
5f:5a:04:72:a6:8b:9f:a9:58:28:91:ca:9d:8b:ba:f6:3c:4b:
26:32:0d:0e:3f:ef:48:6b:2e:da:41:f5:c9:37:92:a6:5e:81:
92:a1:4b:d0:3f:d2:86:55:52:e9:d4:58:55:4e:69:60:92:4f:
a9:15:01:e6:ff:b6:49:68:0d:38:ed:67:90:f4:83:37:b0:80:
ff:ba:12:7c:9f:a3:cd:0a:c1:a2:35:b9:5b:e2:10:85:f5:0b:
26:bd:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:42:17 2025 by rpki-client