Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/112c3e5b-7a71-3be0-a5d9-6a78b8dd280e.roa
File: 112c3e5b-7a71-3be0-a5d9-6a78b8dd280e.roa (raw, json)
Hash identifier: oFo/yzDfB435EfV8nOybDJ5aSl1Quf9FP553xqt18oc=
Subject key identifier: CD:58:A9:C7:2A:7A:D2:AC:05:0E:A8:4C:77:A9:44:C5:47:05:58:83
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E42A0BE870D7AD61F2C960
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/112c3e5b-7a71-3be0-a5d9-6a78b8dd280e.roa
Signing time: Thu 01 May 2025 16:34:52 +0000
ROA not before: Thu 01 May 2025 16:34:52 +0000
ROA not after: Wed 30 Jul 2025 16:34:52 +0000
asID: 22773
IP address blocks: 2600:880a:1020::/46 maxlen: 46
Validation: Failed, certificate revoked on Thu 01 May 2025 22:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e4:2a:0b:e8:70:d7:ad:61:f2:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:34:52 2025 GMT
Not After : Jul 30 16:34:52 2025 GMT
Subject: CN=c6e31df9-f08a-4fa5-abdf-151bb8992e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:0b:6a:bd:28:00:de:36:ba:78:1b:2c:17:
db:b5:88:a4:d7:b6:4e:88:19:84:ad:0b:71:d9:89:
9d:e8:30:fc:f9:e7:5b:fe:41:8d:56:b8:0c:5d:e4:
71:91:d6:0a:45:6b:7b:cd:d1:d2:aa:0e:82:18:14:
87:20:cb:08:ea:fe:85:ae:54:a6:f7:42:a2:7b:3f:
34:e8:1a:1d:35:ac:0e:1b:d9:d3:1d:3e:07:de:d3:
db:bb:ee:75:3e:a7:2e:51:ba:46:36:9e:48:8b:c9:
c1:3f:90:b1:e7:3d:e0:bb:82:7f:0c:34:65:95:e8:
79:c6:bc:fe:fa:fe:50:95:a7:11:2a:ab:6b:51:f9:
91:ae:71:0e:31:c5:a5:37:e8:90:aa:25:02:c7:81:
ea:d9:4f:c5:a8:ea:ef:a0:62:88:29:0c:bb:2e:2f:
dd:e5:cd:f1:44:33:c8:33:99:69:86:ee:7f:46:cf:
f0:31:ec:a9:61:ea:c4:ed:e4:9f:b9:45:33:c8:cb:
5e:3a:ae:e8:b1:ec:d5:79:b3:c1:86:fd:34:e8:6b:
80:f7:5d:94:10:b7:cc:59:7e:ca:bc:dc:ed:ce:3a:
84:e9:87:96:73:b2:4e:7b:9d:45:f4:54:6d:82:3b:
a4:af:0f:d1:90:49:ec:f6:aa:3a:a0:a3:3e:c4:b0:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:A9:C7:2A:7A:D2:AC:05:0E:A8:4C:77:A9:44:C5:47:05:58:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/112c3e5b-7a71-3be0-a5d9-6a78b8dd280e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:880a:1020::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:4f:c0:da:85:d9:17:ee:9d:da:03:51:ae:eb:c2:22:34:72:
13:6f:a4:d9:72:b6:7a:db:a5:1a:2e:9d:fc:82:5b:67:2c:ed:
03:04:76:ac:e7:1b:f8:c5:b4:06:31:24:84:fa:ba:c6:7a:d5:
61:73:e2:7e:ae:a1:55:4d:dd:00:d9:b3:c1:b0:5d:0f:34:17:
03:e3:82:8d:39:2e:bf:94:49:dd:5c:fa:27:cc:81:9a:e3:ea:
3a:63:83:3a:aa:30:ef:cd:16:0a:d5:a1:9e:d5:04:9b:8b:1a:
40:1e:e3:97:e8:77:d2:88:cb:74:5c:48:df:03:0e:b9:3e:52:
53:52:a4:ce:1f:7c:f8:2e:0f:1f:f1:b6:b4:e3:29:ee:b1:e7:
8d:25:a1:b7:c7:da:c0:7e:f8:53:40:56:e8:1f:79:4d:c1:b8:
b8:ca:30:00:7c:bb:33:be:72:57:91:a5:ab:2c:8b:4e:32:a1:
e1:ba:41:b9:fa:10:0c:b9:3e:87:a1:2a:b4:53:7c:7f:75:16:
1a:fc:94:be:02:a3:ec:63:22:48:a6:8d:b8:cc:b4:62:95:94:
4d:67:89:1e:bd:f8:72:06:14:8b:b2:f3:7c:2c:f6:48:89:7f:
af:a9:b9:0b:1b:a6:e0:66:81:91:62:15:d8:8e:6d:16:f8:37:
30:c1:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:33:13 2025 by rpki-client