Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/59cfa3cf-bca9-35f4-befa-ac021280b90a.roa
File: 59cfa3cf-bca9-35f4-befa-ac021280b90a.roa (raw, json)
Hash identifier: e5y410NmQPuqsmc7tEMfyTzVNMqmTKyzXpEb1sMCO9M=
Subject key identifier: BB:4E:39:61:97:78:70:DC:85:A9:CC:96:8A:04:6F:8C:A8:4B:3B:82
Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial: 010D0C9F4328584A2628A75D27B53AC5C7922E00
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/59cfa3cf-bca9-35f4-befa-ac021280b90a.roa
Signing time: Tue 10 Jun 2025 21:43:24 +0000
ROA not before: Tue 10 Jun 2025 21:43:24 +0000
ROA not after: Mon 08 Sep 2025 21:43:24 +0000
asID: 399970
IP address blocks: 2602:fc3b:900::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Jun 2025 12:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:26:28:a7:5d:27:b5:3a:c5:c7:92:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
Validity
Not Before: Jun 10 21:43:24 2025 GMT
Not After : Sep 8 21:43:24 2025 GMT
Subject: CN=bfc4c94e-3d98-49ba-9836-55f82eb32615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:7d:06:e5:8b:25:69:e0:8e:27:98:d1:27:
6d:b2:45:bd:c9:bf:d4:0a:12:be:0e:5a:d9:2e:aa:
14:37:0d:50:f1:7f:7a:e4:e1:ac:03:c3:cd:32:9c:
26:d4:67:92:82:95:75:4b:44:0e:7d:94:29:03:ec:
63:39:5e:32:30:81:ef:58:2a:e4:59:52:e9:d8:4f:
3d:69:18:00:3c:52:9b:cd:65:39:63:b8:67:b1:e8:
4c:dc:30:26:5c:12:47:e9:00:97:09:e8:3d:89:b3:
38:14:17:1b:d0:61:40:6a:e3:cd:a3:8a:6b:e4:15:
16:26:3b:d3:b0:6c:7e:cf:37:3f:6e:fb:31:6b:4a:
7b:03:60:bc:35:51:3f:47:08:cd:1b:fe:0b:07:1d:
84:3d:d2:fb:b7:45:fc:77:f8:3d:ea:ce:4f:a0:25:
17:02:22:c6:58:95:1f:88:75:e1:4a:c4:a5:8e:61:
b2:39:99:99:6e:dd:59:97:d5:36:cd:58:ba:7e:25:
60:bc:eb:b7:be:34:0a:d6:70:7a:97:de:66:8e:9a:
2a:33:67:1a:92:74:0c:96:48:00:a0:a4:5c:7f:99:
74:9d:8b:0f:00:88:14:f7:a6:9f:31:18:1d:89:91:
b3:cf:66:94:30:c3:d4:94:c6:3a:88:55:6e:c9:0f:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:39:61:97:78:70:DC:85:A9:CC:96:8A:04:6F:8C:A8:4B:3B:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/59cfa3cf-bca9-35f4-befa-ac021280b90a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
X509v3 Authority Key Identifier:
keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:900::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:aa:da:51:c0:e0:31:fe:cd:99:d2:a1:ca:09:ef:0b:f2:26:
bb:82:c0:24:83:65:1e:86:61:37:be:5b:2a:3a:fe:35:49:32:
0c:13:c2:fd:4a:53:b0:58:82:a0:c0:0a:2b:08:7c:5d:b2:fc:
42:bf:2f:56:06:6a:01:38:3a:4d:e4:33:3c:38:6d:18:61:00:
eb:58:44:0f:51:f5:2f:af:4b:c0:36:c7:ad:b1:fa:c6:03:f0:
2c:a8:dd:a2:70:42:de:b8:8c:b7:03:b3:d9:d8:34:2a:87:b0:
65:45:3b:3c:96:71:31:e9:dc:fa:57:7d:e3:0f:23:f6:f6:2a:
44:65:4b:85:df:f9:57:59:37:79:08:ba:1b:15:52:41:9d:a1:
bf:13:b8:dd:f0:74:e3:4b:e6:27:ea:13:55:44:f0:e2:46:25:
69:cb:20:ee:00:22:83:1d:3c:72:90:d8:1d:25:a8:55:58:72:
bd:67:f8:54:30:fb:37:e4:63:48:89:18:89:70:5d:41:94:74:
d2:41:7d:54:3e:10:12:62:38:47:72:11:6a:93:a1:0c:61:27:
b8:3e:4b:5a:66:0e:a9:6e:0f:6e:4c:e3:80:a6:15:76:6d:c7:
3c:15:e7:33:e9:82:f1:15:79:61:61:97:de:1b:f2:34:13:3c:
4c:78:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:29:02 2025 by rpki-client