Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/844c0010-9f7c-30c3-a43d-a7ebf11f995b.roa
File: 844c0010-9f7c-30c3-a43d-a7ebf11f995b.roa (raw, json)
Hash identifier: Kz0vHXCo9v71xMl22ZQa3M8VSRJRJ7PYmgk0D5wIZ0E=
Subject key identifier: FA:96:B6:F4:27:C5:5E:DE:AC:27:7B:9F:72:8D:CD:56:B2:47:A9:1B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E402767265C55BE1AFE600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/844c0010-9f7c-30c3-a43d-a7ebf11f995b.roa
Signing time: Thu 01 May 2025 16:34:33 +0000
ROA not before: Thu 01 May 2025 16:34:33 +0000
ROA not after: Wed 30 Jul 2025 16:34:33 +0000
asID: 22773
IP address blocks: 2600:880a:104::/46 maxlen: 46
Validation: Failed, certificate revoked on Thu 01 May 2025 22:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e4:02:76:72:65:c5:5b:e1:af:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:34:33 2025 GMT
Not After : Jul 30 16:34:33 2025 GMT
Subject: CN=bdd96082-1af3-473e-ab03-23f849110f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:5e:b7:29:b1:7f:4a:42:d6:7f:84:88:65:
e0:e8:7a:da:5b:75:82:23:11:36:2f:9d:08:37:d3:
8e:3c:de:c3:eb:85:f8:c0:d2:95:51:60:f8:96:20:
92:d2:47:c7:22:31:38:55:2a:e4:39:06:d6:2e:e1:
b7:f7:3a:0d:a5:51:22:ea:0d:d0:f5:3e:97:10:f3:
2a:86:1f:8d:e7:f2:e9:7c:43:62:85:6a:e7:e2:90:
9c:f0:1e:36:69:89:8e:31:f6:5b:e9:75:38:83:d5:
f8:06:0d:0e:a2:64:77:f4:6f:dc:d0:a5:a1:cf:ba:
5b:07:cf:02:4e:e8:b1:42:b3:a5:98:c5:cc:3c:b1:
55:d1:52:b0:4b:f5:7b:15:67:9c:85:6a:b6:b9:26:
d4:a7:e0:19:4c:5b:ea:08:13:4f:e8:b0:ff:f4:5a:
70:56:2c:64:c3:76:cb:6d:70:43:87:d4:37:1d:88:
df:d9:aa:81:54:11:15:96:68:30:97:fc:89:4b:7e:
ff:a2:87:66:07:d2:97:f3:11:5a:50:20:34:d4:6e:
90:d1:a2:7d:71:a7:79:3e:bb:ec:ac:3f:20:02:86:
5d:34:8f:cb:34:16:99:d8:c3:f1:6d:01:b1:30:5a:
83:a3:fc:b4:e3:60:7a:4e:1c:f2:51:09:bf:25:92:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:B6:F4:27:C5:5E:DE:AC:27:7B:9F:72:8D:CD:56:B2:47:A9:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/844c0010-9f7c-30c3-a43d-a7ebf11f995b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:880a:104::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:54:91:59:ac:49:0d:d6:e5:14:07:82:fc:ca:8d:55:c0:21:
ef:a1:66:a4:b4:0b:51:cf:b5:af:ea:f1:04:49:d6:57:a9:b6:
6d:fb:82:82:f9:0c:83:a8:63:c5:97:28:90:cc:48:4e:58:81:
6e:57:a7:c5:e8:87:e2:a7:99:dd:e0:3f:f5:2b:05:cc:db:4d:
33:0f:8f:6b:ab:18:0c:2f:72:3f:70:b3:4d:37:f3:0d:b4:69:
a0:cb:d8:6f:fd:a0:3b:22:3f:e1:7f:45:4b:8f:7c:f8:21:f8:
2d:ed:47:3a:38:be:ba:ee:5e:14:b3:be:2e:8b:77:7b:c0:37:
81:7d:ff:19:1d:52:b1:7f:f3:52:c7:9f:a1:2d:a4:7d:f6:4c:
9e:10:db:29:e3:0b:a1:39:6d:6a:f5:af:b8:c0:83:13:0c:e7:
58:44:46:35:a1:6e:45:7a:9b:11:32:42:bf:12:30:52:5d:49:
b7:33:74:63:c4:25:d0:df:3d:f4:04:dd:a4:15:40:2e:e1:f8:
3b:11:a7:71:f4:25:f7:9a:48:64:90:80:e6:ff:3e:31:f8:14:
8f:6e:f3:60:a9:87:16:c2:29:eb:ad:d1:ff:60:1e:0d:0c:3c:
e1:26:1c:5c:2f:fa:cb:a5:61:ef:5f:1e:33:03:c4:bb:27:45:
68:1d:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:18:38 2025 by rpki-client