Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef87ee3e-6049-3aa1-8a88-0cd59da87f7a.roa
File: ef87ee3e-6049-3aa1-8a88-0cd59da87f7a.roa (raw, json)
Hash identifier: NbFsd3SqScEdQ5iaqEepdI5KFDLJbxxAjqJyA+6O9Gw=
Subject key identifier: 78:A7:E1:64:F9:28:E9:0E:28:D9:7C:A9:9E:F5:5D:59:75:44:9F:0B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285849D85FCA7753E2B66C9C7EF980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef87ee3e-6049-3aa1-8a88-0cd59da87f7a.roa
Signing time: Wed 14 May 2025 01:00:47 +0000
ROA not before: Wed 14 May 2025 01:00:47 +0000
ROA not after: Tue 12 Aug 2025 01:00:47 +0000
asID: 8100
IP address blocks: 2001:470:2c3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d8:5f:ca:77:53:e2:b6:6c:9c:7e:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 14 01:00:47 2025 GMT
Not After : Aug 12 01:00:47 2025 GMT
Subject: CN=d38c02c5-6a61-433b-b8b7-61b21653fda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:50:a6:95:ac:93:7d:30:a0:a6:43:19:5d:
60:df:9d:a9:42:2f:61:49:18:fd:73:40:c7:75:f2:
62:30:58:e9:0d:3a:06:07:31:c1:31:11:14:2a:16:
e2:57:f7:b0:15:b8:5d:4c:94:55:7b:3c:23:09:65:
6d:c1:3a:96:50:39:49:28:ff:b3:de:26:2e:d1:c4:
0a:93:f2:4c:9e:46:5e:1d:b9:f2:31:51:5f:f0:4c:
32:c2:44:b4:cc:04:c6:c8:36:a3:f4:b7:23:e0:e4:
45:07:3c:5d:73:49:f9:96:32:80:be:5d:a7:56:07:
db:77:bf:fe:94:b2:be:73:17:04:e1:e6:fa:82:11:
a4:3c:22:e2:54:59:53:65:2e:64:5c:3d:a6:ee:6b:
8a:1f:7e:0a:b0:7d:bb:87:47:ce:ab:9f:5c:bd:99:
e7:6f:c9:e7:55:88:b7:66:c6:d7:d3:2a:58:d3:45:
42:f4:c8:4b:1f:78:20:b1:41:aa:dc:e0:d5:13:8a:
78:2f:8c:55:aa:61:4e:69:08:7b:48:10:e6:0d:df:
a3:cc:99:26:11:6e:3e:55:94:36:b0:f7:c7:84:05:
f2:f6:f8:36:f5:ee:a2:b2:01:e9:3e:d7:13:78:08:
b8:31:6a:78:aa:0d:59:15:33:0a:d1:02:99:92:70:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:E1:64:F9:28:E9:0E:28:D9:7C:A9:9E:F5:5D:59:75:44:9F:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef87ee3e-6049-3aa1-8a88-0cd59da87f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:4e:18:24:8d:ff:79:ff:4c:62:fb:3a:37:05:aa:0b:b2:c5:
19:f8:91:1c:83:08:89:31:f8:86:3f:cc:32:79:85:06:ca:dd:
eb:d0:22:c1:83:73:a4:b8:54:fc:45:38:0d:9b:6f:f7:a7:58:
1e:0e:46:75:23:36:ab:70:41:fa:f0:42:70:fb:95:d5:a5:5e:
da:8a:8b:76:b3:50:cd:3a:e1:27:8b:bc:f7:5b:eb:c6:8d:94:
76:b0:1a:f2:a7:22:c1:0c:e7:2d:d9:a8:00:16:b2:2d:46:d4:
c9:e2:86:9a:56:f8:8b:c7:d5:9e:79:d8:35:dc:5d:84:55:c5:
df:94:eb:62:11:0c:af:6b:a8:ce:ad:47:1d:c1:09:dc:dd:0c:
bb:26:74:d3:6f:23:a5:13:98:5a:57:b9:22:34:d9:2f:95:26:
a3:f5:a1:c6:11:20:0d:aa:d7:54:a1:db:a3:49:29:fb:9d:5e:
13:74:d6:2d:dd:f8:cf:c9:3d:16:57:3d:75:df:4c:2b:8e:5f:
1d:8b:92:37:31:e2:7a:50:be:ce:a4:32:57:11:aa:f2:93:1e:
c3:12:8c:47:f0:84:94:2d:c6:8d:17:56:7a:b1:a9:13:9f:df:
7a:c7:e3:8b:ca:b3:72:aa:38:4e:56:44:1c:ea:c3:47:aa:a7:
9b:67:7a:ac
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8p3U+K2bJx++YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
ZDM4YzAyYzUtNmE2MS00MzNiLWI4YjctNjFiMjE2NTNmZGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFdQppWsk30woKZDGV1g352pQi9hSRj9c0DH
dfJiMFjpDToGBzHBMREUKhbiV/ewFbhdTJRVezwjCWVtwTqWUDlJKP+z3iYu0cQK
k/JMnkZeHbnyMVFf8EwywkS0zATGyDaj9Lcj4ORFBzxdc0n5ljKAvl2nVgfbd7/+
lLK+cxcE4eb6ghGkPCLiVFlTZS5kXD2m7muKH34KsH27h0fOq59cvZnnb8nnVYi3
ZsbX0ypY00VC9MhLH3ggsUGq3ODVE4p4L4xVqmFOaQh7SBDmDd+jzJkmEW4+VZQ2
sPfHhAXy9vg29e6isgHpPtcTeAi4MWp4qg1ZFTMK0QKZknBPtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHin4WT5KOkOKNl8qZ71XVl1RJ8LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWY4N2VlM2UtNjA0OS0z
YWExLThhODgtMGNkNTlkYTg3ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJJOGCSN/3n/TGL7OjcFqguyxRn4kRyDCIkx+IY/zDJ5hQbK3evQ
IsGDc6S4VPxFOA2bb/enWB4ORnUjNqtwQfrwQnD7ldWlXtqKi3azUM064SeLvPdb
68aNlHawGvKnIsEM5y3ZqAAWsi1G1MnihppW+IvH1Z552DXcXYRVxd+U62IRDK9r
qM6tRx3BCdzdDLsmdNNvI6UTmFpXuSI02S+VJqP1ocYRIA2q11Sh26NJKfudXhN0
1i3d+M/JPRZXPXXfTCuOXx2Lkjcx4npQvs6kMlcRqvKTHsMSjEfwhJQtxo0XVnqx
qROf33rH44vKs3KqOE5WRBzqw0eqp5tneqw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:41 2025 by rpki-client