Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1cac0323-be4d-3c64-8184-c03331197192.roa
File: 1cac0323-be4d-3c64-8184-c03331197192.roa (raw, json)
Hash identifier: T/Z0ZnHM85JUdE5vH5rVe3yHM49qbBhw0IWrbVzN2mI=
Subject key identifier: E0:F2:09:AF:47:18:7B:68:02:39:EE:42:72:C8:AD:A0:37:3A:20:B3
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D06007628CD6E4917E80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1cac0323-be4d-3c64-8184-c03331197192.roa
Signing time: Fri 30 May 2025 19:11:38 +0000
ROA not before: Fri 30 May 2025 19:11:38 +0000
ROA not after: Thu 28 Aug 2025 19:11:38 +0000
asID: 81
IP address blocks: 152.26.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d0:60:07:62:8c:d6:e4:91:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:38 2025 GMT
Not After : Aug 28 19:11:38 2025 GMT
Subject: CN=a6c9941c-9303-44a9-a591-7683b3b489c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:5c:41:48:a8:bf:ec:6a:b7:ed:80:65:85:
76:34:93:b8:8f:0e:a8:bf:e7:b0:b3:2d:f6:20:e4:
24:65:45:2a:8a:37:20:83:59:59:36:b2:7f:70:63:
65:f5:4a:ac:ea:9b:a8:6d:43:b9:91:11:d9:2d:1a:
86:89:01:a5:5d:fc:8e:b6:e4:49:1a:e7:e6:ac:96:
b0:98:d0:65:78:86:9a:ea:f7:32:6c:cc:65:90:5a:
29:88:12:04:dc:f2:97:03:05:d8:f6:35:60:73:4f:
d3:b6:0e:8f:47:46:75:d4:e0:e1:06:18:2b:81:f3:
97:03:71:69:3e:85:d1:98:7c:0f:df:96:0c:6d:48:
e6:39:fc:56:00:00:3a:7b:5b:5e:4f:b4:4e:dc:a0:
fe:0c:8e:5f:1b:28:62:8e:04:67:75:09:d4:b8:7a:
64:31:05:60:98:d5:74:82:89:71:86:0b:75:c1:1e:
09:7d:4c:59:d2:82:cf:0b:a4:d4:3c:0b:3e:90:92:
27:97:6b:95:6c:c1:86:e2:20:1f:68:1b:a4:a8:7a:
6e:50:fa:49:3d:15:2c:92:97:f1:02:10:10:94:13:
7a:9d:8c:0b:b8:dc:2d:30:90:3d:32:0c:8a:66:61:
23:92:24:83:98:f6:97:67:eb:90:26:8e:d6:c3:f9:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:09:AF:47:18:7B:68:02:39:EE:42:72:C8:AD:A0:37:3A:20:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1cac0323-be4d-3c64-8184-c03331197192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c1:9c:35:a3:cb:96:7c:b2:bb:60:8d:76:e8:8d:b1:d4:f1:
95:2f:cb:98:ba:ea:a0:bb:85:5d:6f:76:6e:6e:76:25:dd:06:
ca:ca:07:e8:47:51:19:b2:09:f8:9e:eb:e4:73:b8:63:43:dc:
a0:b1:8a:0b:58:b3:4b:7f:9a:65:bc:94:15:99:99:eb:45:9f:
88:ec:5f:9a:27:a2:8d:86:aa:8f:05:70:5f:cd:a7:47:a4:82:
20:d8:19:c8:3f:01:ab:bc:7b:66:f9:c2:da:34:d8:0a:aa:03:
a3:9a:74:20:ca:ea:39:ee:12:b3:9e:1f:6f:73:c6:37:e2:5d:
e1:81:33:52:51:98:c4:7c:22:e2:08:9d:01:f1:64:e4:29:06:
96:7a:e5:cb:f6:5e:a6:ea:b5:d6:47:fc:b2:3f:99:9d:b9:9d:
0c:2f:b5:18:68:5a:5f:cd:5b:55:68:a7:4c:80:81:cf:58:2d:
be:31:a5:b1:1e:60:c4:26:f4:8c:fb:bd:37:c8:7f:ec:05:09:
1a:fb:39:43:ab:0a:67:ef:10:25:c7:80:51:db:3a:52:f3:a4:
f0:f4:1c:64:83:d7:02:8f:86:8f:76:79:98:f3:96:8c:9c:4f:
fa:6d:55:83:7f:88:26:c2:9c:c9:dd:83:87:e3:84:2c:32:f4:
48:07:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:00:55 2025 by rpki-client