Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa
File: 76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa (raw, json)
Hash identifier: biXJn/WfW+n85+ZotzfD04PIbjRpOj+Gef/P4Je24r4=
Subject key identifier: DC:50:F6:A5:A3:93:DC:07:A0:60:5A:D9:EA:19:5A:F7:59:84:0A:9A
Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a
Certificate serial: 010D0C9F4328584A9AE107CE9739559229F50F00
Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa
Signing time: Tue 22 Jul 2025 17:07:32 +0000
ROA not before: Tue 22 Jul 2025 17:07:32 +0000
ROA not after: Mon 20 Oct 2025 17:07:32 +0000
asID: 399688
IP address blocks: 2602:fb21::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Jul 2025 03:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:9a:e1:07:ce:97:39:55:92:29:f5:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a
Validity
Not Before: Jul 22 17:07:32 2025 GMT
Not After : Oct 20 17:07:32 2025 GMT
Subject: CN=87e97ff0-e793-43c0-841a-d05bef529f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:7e:f9:29:a5:f1:00:1a:eb:a6:31:54:a1:
0d:0e:07:3e:a1:f2:35:fc:d5:8a:c4:86:09:3c:c1:
11:06:f6:eb:fa:f7:90:e1:de:80:a7:4f:b9:3a:b1:
43:cb:21:d8:01:15:19:ab:29:94:e7:4d:cf:7b:fe:
3d:b7:96:95:2d:fb:35:74:7d:78:35:08:f0:a9:13:
fb:f5:a0:0e:de:a7:01:30:d4:bd:90:84:91:82:a3:
4e:b5:1e:5d:2a:c4:7d:3b:98:69:ae:ae:b8:0c:f0:
46:c6:b0:76:2a:ce:cc:44:61:ac:e1:f3:0f:b8:ab:
a1:ed:f4:b7:8b:5b:7d:c5:0f:27:fe:1b:06:ae:6e:
b5:44:c5:5e:07:64:eb:cc:82:13:43:77:64:12:3b:
aa:e1:64:5b:fb:ae:fd:da:e0:0e:87:c4:ae:07:b1:
f6:c6:54:ee:b4:8e:7e:67:cb:98:18:de:b9:89:b0:
c1:47:97:56:f1:f1:11:3b:da:3b:d3:2d:e6:43:28:
9f:13:cd:4e:72:b4:df:6e:e0:5d:66:0b:ca:9c:25:
9f:74:47:74:48:90:5a:99:4b:f9:1f:f0:88:04:42:
d0:5d:43:7b:bf:c5:ac:5b:70:e4:f7:75:de:06:32:
8e:5b:bd:31:05:cf:b8:30:32:eb:78:9d:dd:e4:d9:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:50:F6:A5:A3:93:DC:07:A0:60:5A:D9:EA:19:5A:F7:59:84:0A:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl
X509v3 Authority Key Identifier:
keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb21::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:90:ba:6d:d5:22:aa:46:f0:c9:7d:35:f6:78:26:29:01:7e:
db:08:77:4f:75:af:85:98:f6:1d:58:16:f3:79:47:4f:81:fc:
7b:7f:44:a1:de:6f:b6:28:80:a3:1b:54:79:56:fd:3d:84:54:
02:d7:a0:bd:b6:50:2c:7c:73:f9:17:7e:dc:80:c1:1d:4b:61:
07:69:26:74:34:52:e7:df:7f:ad:3c:90:04:0d:46:3b:1a:66:
5b:de:fa:2c:15:af:2c:2f:0b:42:b4:c2:51:b2:cf:ba:65:57:
b2:cf:ef:3c:c4:b5:3f:02:ae:49:9a:a1:cc:ce:30:02:95:99:
14:b7:59:cc:7c:93:7b:dd:77:8e:9c:88:6b:00:98:24:45:03:
9f:f4:d1:ac:ce:6a:58:58:6d:33:4e:b3:e0:30:54:28:02:45:
9e:9e:03:a3:33:06:d8:37:11:2b:02:03:7f:3b:1c:3a:99:aa:
60:4e:96:cd:15:f6:0a:48:04:b5:44:eb:6c:7e:bf:ce:35:cf:
b2:d1:be:d6:f4:12:d5:4c:0c:f7:92:49:54:3f:fd:cb:a5:b1:
82:41:72:b5:48:6a:23:7d:73:90:0d:63:a4:28:37:1a:58:81:
a8:da:cf:46:ac:26:b1:c7:bc:89:69:84:f4:17:66:81:09:41:
8b:45:8a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:27 2025 by rpki-client