Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/948299b5-eb41-37dc-929a-0e6d2b684bca.roa
File: 948299b5-eb41-37dc-929a-0e6d2b684bca.roa (raw, json)
Hash identifier: QXlk+0FzwhQ4WmAh64fp2zmVb2CysEoeXRENUkBgpyY=
Subject key identifier: DB:DD:24:17:79:A0:60:87:27:49:51:BC:36:08:A1:2D:64:82:58:56
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849D85FCAB1E1D3C6537AAD1C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/948299b5-eb41-37dc-929a-0e6d2b684bca.roa
Signing time: Wed 14 May 2025 01:00:47 +0000
ROA not before: Wed 14 May 2025 01:00:47 +0000
ROA not after: Tue 12 Aug 2025 01:00:47 +0000
asID: 30092
IP address blocks: 2001:470:2c9::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:5f:ca:b1:e1:d3:c6:53:7a:ad:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 14 01:00:47 2025 GMT
Not After : Aug 12 01:00:47 2025 GMT
Subject: CN=a97312a2-3dbf-4935-8e23-bec94ce28aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:f3:15:1b:ef:71:59:29:8d:0f:58:2b:e1:
9f:d7:ce:cf:f7:39:5a:85:be:cd:aa:b7:88:e3:11:
08:db:18:ad:59:c5:64:f4:10:16:7a:eb:21:7b:34:
5f:73:05:f3:21:02:ef:a9:4b:c5:ee:f4:9d:e7:fa:
b9:7e:13:99:65:29:66:6b:8d:87:cf:d3:77:d2:b9:
40:9e:c1:1a:aa:da:60:57:0a:ce:a6:82:87:30:1f:
e3:a9:e9:78:22:82:cb:ce:cd:b4:29:4f:ae:f3:2a:
d3:b0:2e:e7:6e:a8:cd:96:a4:4f:ab:21:44:d4:c5:
c7:1e:5f:df:1d:34:55:84:a6:11:b2:56:09:ec:16:
6d:9a:e4:49:6b:3b:e0:3a:0e:7d:2f:8c:36:1a:07:
cd:bb:45:21:f9:f3:39:26:11:4c:a4:da:75:9c:4c:
aa:65:8a:93:77:f8:e0:d1:dc:e9:80:5f:4f:8d:0f:
5b:f6:20:f7:0f:b8:26:02:40:04:e8:eb:c2:dd:19:
e7:fa:01:84:3b:d0:7a:fb:10:fa:28:9d:19:e2:72:
b5:dd:c4:0a:8c:df:40:db:82:e6:1a:f8:57:0c:3e:
f7:8f:2e:0c:e1:2a:1c:57:0d:17:9d:3c:77:ae:84:
f1:20:e4:68:32:c7:cf:68:2b:0f:e8:5e:99:3f:77:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DD:24:17:79:A0:60:87:27:49:51:BC:36:08:A1:2D:64:82:58:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/948299b5-eb41-37dc-929a-0e6d2b684bca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:51:f9:ab:a5:f3:4f:53:95:72:7f:0e:e5:ad:7e:5e:a0:17:
c0:31:94:1b:dd:ec:ae:98:01:b0:e2:6d:af:e1:f8:83:36:33:
08:85:5b:84:61:ef:41:83:04:c2:bd:2d:39:19:9c:71:cc:50:
d7:90:7e:96:e8:2d:b2:59:8e:b2:40:51:38:ae:4d:16:f7:80:
b6:2f:65:d8:82:de:99:db:71:93:9b:d8:c7:36:1e:ea:8a:cf:
e7:15:d5:3b:37:ea:e1:91:93:26:eb:55:4f:33:c5:0b:4a:29:
22:3f:8f:fd:02:c4:97:ad:05:fe:95:8f:cb:4a:e6:82:40:cc:
d2:9f:98:b3:6f:45:c7:10:c1:92:2c:8b:12:97:ce:a7:eb:b2:
71:0f:2f:2a:48:18:95:ed:8c:56:26:44:53:b0:f8:32:d0:be:
eb:17:8f:7d:50:5f:c8:98:e6:2b:9c:cf:6d:4a:88:a7:fd:83:
f9:1f:a0:63:26:a0:ae:ba:e6:5c:93:9d:81:e0:c3:33:80:55:
79:32:a4:8d:4a:d9:2a:8f:cf:38:ce:79:f8:10:16:64:5c:b2:
7b:b6:00:6d:b9:5c:bc:73:e3:d8:b2:4b:a3:f9:39:2a:13:e2:
2f:5d:ec:4b:1d:c0:02:e2:e6:24:4d:a4:25:c3:59:bd:52:e3:
df:cc:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:34 2025 by rpki-client