Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2a5bb18-5941-38ff-905e-7d5770e93f0f.roa
File: c2a5bb18-5941-38ff-905e-7d5770e93f0f.roa (raw, json)
Hash identifier: nqrsN4/qYVRPXJkblLbq6y4dz+GzVmIuOMdky1k4oKQ=
Subject key identifier: 2B:CF:D8:BF:31:DB:4D:E8:34:F1:AA:4A:1D:93:95:21:19:48:5A:0C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849D85FE9043FF55B118525FF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2a5bb18-5941-38ff-905e-7d5770e93f0f.roa
Signing time: Wed 14 May 2025 01:00:47 +0000
ROA not before: Wed 14 May 2025 01:00:47 +0000
ROA not after: Tue 12 Aug 2025 01:00:47 +0000
asID: 30092
IP address blocks: 2001:470:2c3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:5f:e9:04:3f:f5:5b:11:85:25:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 14 01:00:47 2025 GMT
Not After : Aug 12 01:00:47 2025 GMT
Subject: CN=53233e7c-dedc-4110-861b-6f66fa4445c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:0b:a1:0a:8e:3e:c0:61:21:ef:ad:1e:b5:
87:07:b9:5e:5e:06:22:2e:7d:3d:18:30:42:ef:42:
a9:4c:5f:7e:91:76:74:23:22:b3:52:56:9b:e3:58:
3b:7c:b2:08:1f:b3:88:c3:a1:88:6f:8c:de:69:e5:
91:a5:ce:ed:2d:2d:ca:a0:d1:52:fa:61:30:dd:7b:
8e:0f:65:69:6a:b4:e8:ee:a1:d1:62:db:d2:8a:bf:
82:03:41:72:ed:c8:45:30:61:5c:ed:e4:f8:b2:7c:
c6:61:98:b7:3c:3b:40:e2:03:87:e3:14:c3:7f:19:
8c:d4:96:78:1b:9e:c9:4b:bb:d9:c6:d9:b9:50:31:
f3:c5:ee:08:62:f7:2a:fb:fb:ea:da:65:b3:1a:b3:
3d:d5:de:4e:80:60:86:ea:f4:65:10:00:1d:73:1b:
80:ba:1b:79:84:cf:a0:0d:4a:ca:8b:36:23:9e:19:
11:d9:c9:82:2e:24:9d:f4:74:29:ca:d7:e3:7d:1b:
49:33:cf:0d:44:c8:3e:18:c7:0c:a1:41:a0:a8:e1:
af:18:db:45:49:c9:53:20:02:9b:5c:38:6e:9a:51:
e0:0a:f2:42:c5:be:32:03:4d:fb:b0:9d:c9:96:f8:
9a:c5:2c:be:9e:fd:ee:11:4e:cd:a9:d6:a8:6e:8d:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:D8:BF:31:DB:4D:E8:34:F1:AA:4A:1D:93:95:21:19:48:5A:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2a5bb18-5941-38ff-905e-7d5770e93f0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f6:08:15:30:be:80:cb:29:ca:31:11:58:e3:c0:72:a3:ac:
90:7d:1d:ba:8a:30:8d:3e:c6:42:2c:b4:75:fa:2e:3f:e7:8d:
7e:4a:7f:cb:b7:b6:aa:09:85:77:d6:df:cc:08:77:c0:e9:d8:
af:8e:57:3d:38:44:fe:af:56:39:10:2b:94:ba:e7:7f:1f:7f:
50:3e:80:3b:ee:fb:ec:b5:89:dc:2c:fe:68:bf:4b:6a:60:15:
4c:5d:7d:7f:c7:c7:a5:3c:f9:4d:d5:e9:5a:3d:45:a7:d2:b8:
4b:f1:7f:11:59:e5:6b:86:1e:98:93:52:5a:d2:98:13:4e:f7:
41:a3:d4:6d:9d:59:21:2e:64:47:bd:bc:2e:a8:ab:7a:d4:08:
10:1a:7d:5b:01:01:87:4f:38:d1:3b:cb:1c:6b:a8:63:86:73:
fc:dd:16:d8:97:bd:61:42:bd:46:2f:b7:a9:97:c5:e0:32:87:
cc:6a:1b:b9:3b:f8:0d:d7:09:a6:c2:b1:bc:78:d2:78:0d:3a:
c8:cb:60:2c:be:7e:88:51:07:ca:63:e4:5c:e9:83:ad:53:73:
07:7d:be:83:89:e6:1f:2f:d5:5a:2a:a8:a3:58:8f:08:25:d3:
a0:54:f2:42:3e:05:63:1a:af:e0:0a:b1:2a:e2:de:c8:b6:db:
b4:04:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:12:23 2025 by rpki-client