Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/566bdcdd-15e4-3fd3-a321-433bd452997a.roa
File: 566bdcdd-15e4-3fd3-a321-433bd452997a.roa (raw, json)
Hash identifier: lyRfD2AVeu5RDWfBQ9Bl5pSn72+wVkvljmlw4J0SKTI=
Subject key identifier: 68:21:89:86:AD:3C:30:0D:F4:20:88:31:41:61:63:24:1E:03:84:53
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849D85FB3CD3E36CFCD05025680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/566bdcdd-15e4-3fd3-a321-433bd452997a.roa
Signing time: Wed 14 May 2025 01:00:47 +0000
ROA not before: Wed 14 May 2025 01:00:47 +0000
ROA not after: Tue 12 Aug 2025 01:00:47 +0000
asID: 50888
IP address blocks: 2001:470:38::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Jun 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:5f:b3:cd:3e:36:cf:cd:05:02:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 14 01:00:47 2025 GMT
Not After : Aug 12 01:00:47 2025 GMT
Subject: CN=04c2724a-0698-4989-b774-b9c63b057feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:ae:3c:d9:1d:45:9c:b0:fe:ca:5a:24:8c:
d9:07:80:5b:1c:02:5c:84:fb:b5:44:0d:ad:17:10:
65:2a:84:ff:f7:45:81:9a:c7:05:4c:7b:09:e4:27:
a0:6e:d2:27:6e:55:5d:51:94:6b:7a:3d:8e:46:8c:
1f:f6:7f:1a:b4:57:f5:c0:bd:51:fe:e8:b1:ba:cb:
f3:96:0f:13:0a:b5:8f:3b:cd:82:10:f5:ed:2b:cf:
8d:b0:ea:57:7f:26:86:48:fb:13:1f:ef:ab:fe:b1:
9f:47:1f:11:1a:f2:ec:76:1c:c1:4b:15:83:95:14:
df:8c:ac:d2:62:d5:3d:5f:a3:61:d7:62:6d:3a:17:
91:02:46:30:65:59:49:2b:c2:48:4c:10:61:44:55:
60:97:20:50:1f:08:ed:d6:65:bc:c5:44:7c:ec:4d:
e9:89:9e:a9:b5:50:56:7c:a4:b7:cc:a8:00:4f:cf:
4b:5e:75:60:8a:7a:73:27:18:06:dd:86:74:06:00:
13:2d:9a:9e:11:af:2b:de:ab:c4:b9:2b:70:35:3b:
1f:b3:f8:b9:4b:3b:2c:27:ba:cf:24:48:9d:e3:14:
05:00:18:e9:08:38:39:49:8a:6c:41:4c:09:53:92:
f6:80:e1:6c:ae:be:c0:67:37:69:6d:cd:e1:41:5d:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:89:86:AD:3C:30:0D:F4:20:88:31:41:61:63:24:1E:03:84:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/566bdcdd-15e4-3fd3-a321-433bd452997a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:38::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:97:87:43:33:bf:5e:67:01:69:f7:0c:c8:47:8f:2c:0b:9d:
7c:54:9b:fc:ab:f5:75:e0:2b:06:da:16:cd:a0:99:04:ef:a1:
86:02:aa:4d:c0:a1:ca:8c:d4:68:29:04:5f:15:19:a9:07:08:
1b:bc:e1:53:cc:60:c5:57:f8:87:bf:45:eb:d9:84:4f:2e:b7:
0c:39:9c:bf:15:d9:90:69:48:10:57:05:91:55:fd:07:9c:70:
aa:67:b2:b0:8b:1b:48:1d:63:f8:67:5b:b2:77:3b:f5:17:d0:
82:64:3f:94:e7:a2:62:2e:33:f1:87:59:bf:f4:29:1f:06:8b:
cd:71:b8:53:90:fc:af:84:01:23:4e:a4:37:ed:24:40:20:2a:
ab:75:da:63:0b:55:a3:0d:af:3e:9e:9c:76:e7:89:f5:27:be:
78:26:e4:1f:a8:fb:3d:07:04:21:c6:de:fe:61:4c:8a:a5:f9:
50:9e:b2:53:b0:40:05:db:74:0f:5a:97:d9:b4:b3:23:8c:91:
cb:44:2c:ae:11:87:35:27:72:dd:b2:3e:5b:3c:9b:d3:99:53:
2e:1e:9e:03:70:0f:fd:df:4f:f7:95:93:5d:5f:ff:3f:2a:e4:
6a:3c:53:43:9a:c8:af:54:78:b9:d1:f1:12:23:17:c4:42:05:
63:82:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:15 2025 by rpki-client