Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa73d39c-9aca-3750-9571-f60089ea228a.roa
File: fa73d39c-9aca-3750-9571-f60089ea228a.roa (raw, json)
Hash identifier: wLOHceQqx+Yie9k6Zzs+oaPPumMJ2qolSBbPWg4IpMc=
Subject key identifier: 89:B5:95:F4:A2:80:68:77:68:9B:DE:DB:A4:A9:2C:F5:14:6D:26:75
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584976B81AF758B52E409E87EE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa73d39c-9aca-3750-9571-f60089ea228a.roa
Signing time: Wed 09 Apr 2025 01:30:10 +0000
ROA not before: Wed 09 Apr 2025 01:30:10 +0000
ROA not after: Tue 08 Jul 2025 01:30:10 +0000
asID: 22690
IP address blocks: 2001:470:43c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Apr 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:b8:1a:f7:58:b5:2e:40:9e:87:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 9 01:30:10 2025 GMT
Not After : Jul 8 01:30:10 2025 GMT
Subject: CN=2e545504-82fb-4dc6-8da9-331d90ce042f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5a:98:ef:30:c5:33:03:68:d1:05:3d:24:c0:
f1:7e:1b:83:8c:34:0d:1c:d1:87:d6:93:01:ea:29:
c3:33:59:15:c2:fa:72:50:27:d2:01:fb:2c:47:19:
b6:87:c1:7e:1f:91:25:63:fc:60:8a:9b:b0:e1:8f:
85:f7:3c:37:1e:1b:0b:d9:ab:21:19:8f:6b:a7:c0:
3d:51:f4:44:f0:32:c2:8e:14:cd:91:03:de:27:63:
4e:e5:bb:86:12:a3:76:81:81:34:59:f9:d9:6a:a0:
37:05:1f:36:ff:33:ee:ef:30:f8:03:18:a9:3d:d8:
af:5b:33:8e:61:83:08:77:09:bb:00:4c:46:76:77:
83:1c:cf:50:42:44:b4:17:30:08:b4:2e:de:52:fe:
24:07:d7:d7:75:68:16:5f:98:5e:34:b9:02:0e:48:
23:96:c2:3b:b7:1b:5a:34:46:16:79:31:e1:f8:16:
3a:bb:19:e2:74:0a:f3:46:7e:72:39:5e:df:a7:7c:
74:f2:d2:94:bb:a5:d9:50:a2:6f:06:54:12:d9:cb:
91:13:c9:a5:a7:98:77:df:e9:76:78:52:33:b2:4c:
0d:71:fe:e3:d3:7a:12:23:2b:f1:aa:9d:22:c3:0d:
a0:2a:77:64:9b:52:e9:35:e4:1f:45:ed:31:19:f2:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:95:F4:A2:80:68:77:68:9B:DE:DB:A4:A9:2C:F5:14:6D:26:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa73d39c-9aca-3750-9571-f60089ea228a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:43c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f4:49:ff:e0:d0:8b:7e:65:b7:a4:2e:69:df:6a:ae:6a:96:
ce:f9:f9:fd:1c:69:58:53:d5:0b:37:3e:60:bb:b2:08:8f:5a:
be:00:10:36:99:92:83:f2:d1:e0:b3:7a:03:8a:e4:60:d2:10:
89:77:f5:41:10:63:bc:14:a4:1e:df:b0:74:98:9d:d5:21:0d:
7b:f7:35:b6:33:35:e9:6a:86:c8:ee:bc:80:1c:74:69:95:c4:
a3:10:d9:3b:87:ee:51:ae:cb:d6:36:5c:8b:5b:e6:bf:20:39:
60:56:8d:1e:f2:44:29:53:3a:de:41:b6:30:50:48:cc:16:d4:
aa:15:b4:8f:55:ad:8c:1e:7e:83:97:29:cb:0a:39:ba:af:40:
ca:27:4d:bb:e4:55:ab:c1:4f:e6:bb:82:3d:5d:5c:35:d9:4e:
cb:73:a1:35:52:66:3a:d1:af:05:29:88:40:13:21:ea:7e:49:
8f:1b:54:a8:d6:4a:76:f7:42:e5:12:2e:30:a7:21:f6:42:71:
c6:a9:9b:50:60:87:ab:ae:b5:c8:b8:54:28:66:a4:a2:e2:60:
63:05:29:c2:6f:d0:cc:ed:f9:59:50:97:00:e7:be:a2:b8:39:
ff:86:d3:92:a4:c0:9f:6a:2e:13:25:85:cb:84:f9:a1:84:48:
39:ff:d7:6d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2uBr3WLUuQJ6H7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDQwOTAxMzAxMFoXDTI1MDcwODAxMzAxMFowLzEtMCsGA1UEAxMk
MmU1NDU1MDQtODJmYi00ZGM2LThkYTktMzMxZDkwY2UwNDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglqY7zDFMwNo0QU9JMDxfhuDjDQNHNGH1pMB
6inDM1kVwvpyUCfSAfssRxm2h8F+H5ElY/xgipuw4Y+F9zw3HhsL2ashGY9rp8A9
UfRE8DLCjhTNkQPeJ2NO5buGEqN2gYE0WfnZaqA3BR82/zPu7zD4AxipPdivWzOO
YYMIdwm7AExGdneDHM9QQkS0FzAItC7eUv4kB9fXdWgWX5heNLkCDkgjlsI7txta
NEYWeTHh+BY6uxnidArzRn5yOV7fp3x08tKUu6XZUKJvBlQS2cuRE8mlp5h33+l2
eFIzskwNcf7j03oSIyvxqp0iww2gKndkm1LpNeQfRe0xGfINpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIm1lfSigGh3aJve26SpLPUUbSZ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmE3M2QzOWMtOWFjYS0z
NzUwLTk1NzEtZjYwMDg5ZWEyMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC70Sf/g0It+ZbekLmnfaq5qls75+f0caVhT1Qs3PmC7sgiPWr4A
EDaZkoPy0eCzegOK5GDSEIl39UEQY7wUpB7fsHSYndUhDXv3NbYzNelqhsjuvIAc
dGmVxKMQ2TuH7lGuy9Y2XItb5r8gOWBWjR7yRClTOt5BtjBQSMwW1KoVtI9VrYwe
foOXKcsKObqvQMonTbvkVavBT+a7gj1dXDXZTstzoTVSZjrRrwUpiEATIep+SY8b
VKjWSnb3QuUSLjCnIfZCccapm1Bgh6uutci4VChmpKLiYGMFKcJv0Mzt+VlQlwDn
vqK4Of+G05KkwJ9qLhMlhcuE+aGESDn/120=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:38 2025 by rpki-client