Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2d61012-56bd-3a6d-ae97-d395a8e453d4.roa
File: a2d61012-56bd-3a6d-ae97-d395a8e453d4.roa (raw, json)
Hash identifier: JmcOioLCMKwBaFroNzepimm0zJ8iOxfwtUuuxYrtsIE=
Subject key identifier: 10:DB:7E:BE:CF:0C:87:7A:57:11:74:D7:C1:CA:FE:93:C6:32:B8:8F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A75AD0360DEC899CF4F373900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2d61012-56bd-3a6d-ae97-d395a8e453d4.roa
Signing time: Wed 09 Jul 2025 09:18:56 +0000
ROA not before: Wed 09 Jul 2025 09:18:56 +0000
ROA not after: Tue 07 Oct 2025 09:18:56 +0000
asID: 329007
IP address blocks: 206.123.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 11:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:75:ad:03:60:de:c8:99:cf:4f:37:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 9 09:18:56 2025 GMT
Not After : Oct 7 09:18:56 2025 GMT
Subject: CN=af9ff8a6-4fdb-4f03-859a-2ff8e9116772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:e2:6f:31:28:e3:bc:6f:99:b4:fe:ea:11:
97:7e:f7:8e:76:1c:7f:9a:44:be:34:6a:24:5d:e0:
b9:29:8e:7a:a2:e5:bc:b0:8b:2e:5e:09:77:a0:3c:
f9:85:bb:28:41:00:7e:21:eb:1b:ff:8e:8b:00:69:
c0:6a:35:82:4d:cc:36:f2:24:d3:61:ad:b8:b5:5d:
ee:12:42:0e:31:ae:ee:5f:62:b0:2b:06:f5:52:af:
9a:9e:67:6b:bf:87:e8:ee:61:bf:d5:9d:c5:81:8b:
de:fe:c8:8c:f8:3a:f7:f5:46:83:68:5a:b6:5f:7f:
73:73:9c:d9:95:0d:da:d3:e4:a3:de:86:b3:30:73:
2b:f4:c8:76:c0:ea:06:cc:8b:98:22:e1:e8:c9:17:
03:d8:9a:53:d2:71:62:ff:e9:69:4b:bf:d7:fc:3b:
4e:a2:5e:f6:f4:3e:5e:77:cb:6f:4e:78:80:d2:0b:
5f:a3:75:ac:65:c9:22:9f:56:9f:a3:68:f1:73:24:
3e:83:81:95:11:fb:56:f2:e9:a3:74:03:c7:2a:08:
fe:db:bb:93:93:b3:ba:59:2c:fa:8a:44:93:10:c9:
44:01:d5:8d:c5:ad:55:b3:19:07:28:71:0e:f8:02:
3f:0c:fb:e9:d6:7b:e9:7f:6c:2f:a8:d8:67:17:d0:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:7E:BE:CF:0C:87:7A:57:11:74:D7:C1:CA:FE:93:C6:32:B8:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2d61012-56bd-3a6d-ae97-d395a8e453d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:1e:02:f5:3e:50:b5:05:8c:83:76:34:ce:ba:7c:5d:29:be:
94:93:6b:02:04:2e:f4:99:cf:38:7e:a7:c7:9b:f6:39:d6:17:
8c:ef:5b:01:40:cb:fb:c7:65:7d:12:ce:d8:09:9b:9e:74:6a:
c5:59:36:56:19:04:e6:50:a8:33:6a:a9:97:09:8e:4b:e1:b5:
db:61:60:46:65:b4:bc:67:2f:8a:d9:f5:d8:c5:3a:60:e7:4e:
68:0b:f2:48:f8:a4:ce:75:08:37:44:e5:f1:ec:4d:c4:30:d2:
cb:c6:be:60:a7:dd:c0:bc:a4:77:20:9a:d9:31:ec:07:71:cd:
ac:ef:3e:00:6d:35:c7:a8:be:9f:9a:de:e3:c0:bf:90:43:88:
0a:bb:bf:c8:f6:cc:61:af:1d:fa:38:5f:36:6d:e8:2d:07:cc:
97:9b:d8:58:fa:c7:88:54:5b:29:b6:88:ca:8d:8e:6c:47:01:
b1:1a:e4:f4:99:bb:fb:35:70:67:34:ae:81:f2:de:87:d2:64:
66:2c:f8:5f:23:eb:87:c4:10:ec:3a:6b:b8:5d:e5:6a:55:3a:
f8:00:0a:c4:9c:83:a1:ed:ae:fc:f5:f3:e3:6f:5f:81:63:32:
75:77:f6:2f:06:bd:3a:78:4e:69:1c:a5:8c:f1:68:be:ef:2d:
a1:fd:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:15:21 2025 by rpki-client