Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa
File: c8e59d5d-26d2-3644-b480-2e571c81f11c.roa (raw, json)
Hash identifier: FSQEUYgKe2zezbhezauWMc6hLrf+/oEPyNle1rswQqQ=
Subject key identifier: B0:A5:16:CE:38:78:CC:4C:95:E7:E6:CC:91:03:EA:7C:15:64:CD:90
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F4328584A0C0562C9B5105487F8E59400
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa
Signing time: Sun 01 Jun 2025 13:01:03 +0000
ROA not before: Sun 01 Jun 2025 13:01:03 +0000
ROA not after: Sat 30 Aug 2025 13:01:03 +0000
asID: 8070
IP address blocks: 2602:f9e7:2a::/47 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Jun 2025 17:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:0c:05:62:c9:b5:10:54:87:f8:e5:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Jun 1 13:01:03 2025 GMT
Not After : Aug 30 13:01:03 2025 GMT
Subject: CN=b886d371-b279-498d-88e9-6ab8a2523c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1c:53:8e:fd:db:32:19:3e:bc:bf:81:ef:3e:
cb:1e:79:ac:10:5b:27:ff:f5:b1:20:6b:b4:4c:ea:
de:92:27:f0:15:15:32:20:87:48:27:ad:23:b4:a6:
5f:b6:cd:00:a6:9d:13:05:4a:98:9e:ee:17:61:9b:
d7:0d:aa:59:72:2e:24:d1:da:e2:9e:07:aa:93:6e:
75:31:a7:a5:47:d8:07:08:d9:78:44:84:74:47:47:
dd:5e:17:ac:e0:88:42:43:f4:f7:b3:3f:1f:84:4c:
13:a0:43:79:a1:36:f5:63:48:e7:bb:c5:68:1a:82:
59:d4:0d:06:9f:d5:a1:49:04:09:69:d5:4b:bb:3c:
c3:53:da:45:b0:36:cb:ea:66:98:56:4f:9a:bb:9e:
f7:ac:a1:72:a9:6e:d1:2f:a3:94:1c:f8:72:80:b3:
45:e7:00:da:7b:fe:9a:6f:a7:0c:e5:d7:89:5c:30:
71:81:da:4c:1f:cd:a4:0a:cc:8b:e7:b3:93:72:f3:
2b:f2:6f:b8:a5:15:ed:f0:5a:a5:bc:d5:1c:7a:ca:
f5:6e:78:47:de:b0:c6:53:75:57:e8:ca:9f:f8:d1:
9a:4a:65:93:c5:7b:9f:e1:39:7a:e1:fd:17:99:66:
bd:a7:98:c8:af:69:1e:ee:3d:04:0e:e5:78:6e:e5:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A5:16:CE:38:78:CC:4C:95:E7:E6:CC:91:03:EA:7C:15:64:CD:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9e7:2a::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:8e:17:85:32:56:01:fd:0d:60:be:c9:33:dd:1e:3f:cb:0b:
69:f8:59:9d:5f:2c:00:8e:08:ca:3a:42:ae:8b:79:16:35:f0:
6d:5e:3b:70:59:4b:db:3e:89:04:e0:44:c4:23:39:2f:b7:68:
c9:d6:f0:af:24:a8:f4:1c:9a:ac:57:f3:fd:f4:37:89:96:88:
aa:fe:20:e0:09:0e:49:de:22:3c:85:6e:6c:88:e9:06:48:18:
9e:a2:2c:9d:92:b2:b7:13:69:4e:81:0c:ea:b7:c2:f6:19:86:
09:0d:46:4f:26:79:94:3e:2e:1d:e6:5f:71:a5:ad:f0:80:28:
83:ac:e0:c6:35:9e:3e:be:ae:ae:69:c1:15:e5:f9:8b:5b:13:
de:d9:7a:91:4a:b0:ec:15:45:63:24:92:b7:a5:e7:d5:95:67:
1e:9b:77:67:49:b6:8e:fe:f2:6f:fc:77:46:34:d7:14:6e:f4:
44:1e:05:7d:9d:e8:55:a3:92:28:16:f8:cd:ac:8d:79:17:14:
aa:42:f7:8f:82:ae:2a:56:a2:8a:44:0c:10:86:2b:7e:a8:b7:
0a:20:11:76:2e:e9:83:2b:d8:60:cb:de:c3:3e:62:0a:b4:cc:
31:7b:8b:6d:af:82:15:34:06:7a:b8:56:1d:1c:4f:2d:f9:c2:
ba:19:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:59:01 2025 by rpki-client