Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/0caf65eb-3b98-3bcb-9352-f7bfc470ca89.roa
File: 0caf65eb-3b98-3bcb-9352-f7bfc470ca89.roa (raw, json)
Hash identifier: PI6Q7uErv/jxFM+5RkQshnb8qQj7KuhCiuxmZlZ4eyU=
Subject key identifier: E2:34:54:CF:1E:61:0D:93:9C:92:41:65:CB:22:70:11:F6:09:93:BC
Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial: 010D0C9F4328584A26280921BD5852AC1F93A200
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/0caf65eb-3b98-3bcb-9352-f7bfc470ca89.roa
Signing time: Tue 10 Jun 2025 21:42:09 +0000
ROA not before: Tue 10 Jun 2025 21:42:09 +0000
ROA not after: Mon 08 Sep 2025 21:42:09 +0000
asID: 399970
IP address blocks: 2602:fc3b:500::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Jun 2025 12:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:26:28:09:21:bd:58:52:ac:1f:93:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
Validity
Not Before: Jun 10 21:42:09 2025 GMT
Not After : Sep 8 21:42:09 2025 GMT
Subject: CN=265a4fa6-0aa3-4f1b-95dd-b302a0ae8a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:b6:a2:fa:86:76:dd:5f:dc:72:f3:ce:5d:
4f:ec:aa:c9:e1:87:fc:d0:82:35:e9:9c:b2:55:80:
97:60:47:77:a0:7d:e3:5b:69:b6:17:2a:cf:4c:cc:
8d:48:48:6b:4a:a2:c0:6d:ac:f0:69:fd:db:e8:74:
0a:b2:ec:a0:fc:58:6a:2a:8b:10:f0:91:03:8c:d6:
5f:fe:2d:ea:38:66:d8:94:d9:8b:58:b4:56:5a:09:
53:26:1f:53:d8:1d:bc:fb:e5:31:b2:d6:e8:c9:72:
e8:04:33:2d:18:14:56:c5:a1:a5:fb:84:98:00:42:
b2:a2:b7:23:a0:56:52:f7:d7:c5:ab:dc:b6:69:00:
55:79:43:83:ef:b6:cb:9b:5f:76:f5:48:08:a9:60:
7f:8c:10:3a:3f:a1:2c:5b:ed:b3:c7:20:9e:bf:30:
c9:89:a6:d9:52:8e:ed:23:14:fe:29:5b:94:b9:af:
17:7d:ad:85:b5:f6:38:8c:dd:35:f7:ef:53:78:58:
74:e8:d5:39:11:a0:87:8c:1a:32:99:eb:5d:50:e4:
56:e0:17:28:76:e7:be:b5:5e:5f:cc:fa:c2:3e:03:
5f:f2:45:91:f0:f7:3b:f8:eb:51:c7:a5:04:4b:32:
8e:48:eb:da:17:38:4f:3a:16:6d:3e:54:28:7e:2f:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:54:CF:1E:61:0D:93:9C:92:41:65:CB:22:70:11:F6:09:93:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/0caf65eb-3b98-3bcb-9352-f7bfc470ca89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
X509v3 Authority Key Identifier:
keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:500::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:a6:7f:4e:f2:9b:fb:84:b9:b9:3b:2b:09:e2:95:93:75:55:
83:e8:ad:c7:76:20:b5:67:60:26:bc:bd:b3:2f:d0:4b:33:06:
46:30:86:00:8b:b4:67:a0:28:8c:93:ef:be:0b:88:14:d6:cb:
c2:98:be:60:12:4b:ec:50:31:80:f8:c0:7a:4b:f8:d9:f8:c9:
6a:ab:eb:68:91:01:55:11:48:c5:64:0c:6a:1a:86:2d:1c:9e:
9a:43:2e:fa:60:65:da:f4:2f:e4:f2:71:c0:c3:4a:bd:ae:45:
a0:15:8b:61:a2:6a:88:76:a3:71:84:91:f2:a3:5c:ef:3a:d8:
6a:ff:ff:46:92:5f:66:34:37:d6:81:70:3d:d2:47:a7:ff:4f:
3a:57:8d:df:3b:e9:17:4b:b7:bc:27:5e:f6:33:91:98:de:60:
92:73:a2:5d:0a:61:a5:88:72:84:9d:d4:19:f9:ae:6f:13:0f:
f0:f8:4c:c7:75:64:ba:98:be:8c:48:ad:22:55:8c:4c:53:6c:
b3:a7:62:34:2e:ad:15:56:d8:9a:16:5b:9f:a8:e2:bf:d0:05:
14:85:81:32:6b:82:e7:cc:0e:d9:20:fa:ac:ad:29:ed:4d:55:
fb:4c:6b:0f:a3:bd:f9:89:0a:53:9f:a6:05:43:b2:e7:87:7c:
d4:43:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:00:15 2025 by rpki-client