Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/69b3956e-d546-38ce-bd80-21b10e73df9a.roa
File: 69b3956e-d546-38ce-bd80-21b10e73df9a.roa (raw, json)
Hash identifier: GzYaYp6W0zJeqxfr9oOk5WKPfcyxa4neHVlLIF5DvaU=
Subject key identifier: DE:B0:CE:93:26:E9:8E:8A:EC:C5:42:B5:BB:9B:BA:20:C8:87:34:71
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727CC61A24CB676F1772140
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/69b3956e-d546-38ce-bd80-21b10e73df9a.roa
Signing time: Fri 30 May 2025 19:11:37 +0000
ROA not before: Fri 30 May 2025 19:11:37 +0000
ROA not after: Thu 28 Aug 2025 19:11:37 +0000
asID: 81
IP address blocks: 152.48.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:cc:61:a2:4c:b6:76:f1:77:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:37 2025 GMT
Not After : Aug 28 19:11:37 2025 GMT
Subject: CN=1412f3b1-a890-4ca3-939b-1dac19c97a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:b6:5d:3e:79:66:da:51:22:f4:e2:a2:c7:
28:60:2d:e3:7a:27:91:98:ad:e3:e0:70:2b:7d:12:
1b:b9:a9:7a:bb:b7:7e:79:ec:ba:ed:9c:fa:08:b4:
80:58:61:77:04:be:7f:88:3b:10:98:61:99:af:39:
66:e9:dd:d5:69:35:71:9f:39:20:aa:47:d9:52:4c:
89:2c:f2:13:a2:65:a8:aa:80:86:cc:6e:77:da:f5:
f6:bb:a9:52:16:7c:ea:b3:94:85:b0:de:ed:0d:41:
a8:3f:ad:53:a6:0f:0e:92:2e:15:cd:ec:3f:70:1f:
cc:d6:fe:f7:56:84:07:f0:a4:5a:2d:12:0c:70:1c:
6b:de:2d:4e:9b:68:8e:56:de:92:77:fa:a3:00:4a:
24:ad:20:70:70:ff:4a:7c:e4:26:62:eb:3b:12:03:
35:37:f8:91:de:e2:c2:bf:43:f9:cb:05:ef:ae:82:
11:75:50:98:11:b5:fe:b1:50:82:ca:b0:14:11:77:
a4:da:e0:2f:ac:0a:50:8c:05:44:b5:81:97:3e:ed:
28:60:7f:e5:d7:b4:af:93:0b:c6:2d:73:25:89:88:
2a:78:b6:f8:fd:c4:c7:41:96:f2:c4:46:e7:65:1b:
d0:20:07:14:ac:6e:5b:7c:7b:a3:3b:65:2c:68:a2:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:CE:93:26:E9:8E:8A:EC:C5:42:B5:BB:9B:BA:20:C8:87:34:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/69b3956e-d546-38ce-bd80-21b10e73df9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:3a:3f:e9:0e:8e:93:5d:55:4f:58:3a:18:0e:e3:38:d2:ff:
c8:92:3a:9b:87:43:5a:ad:85:ff:dc:87:ad:d2:24:2b:c2:a3:
94:68:3e:71:1b:2d:53:e7:6c:b1:ec:41:44:3a:d7:e5:b5:50:
53:e2:f9:8c:18:73:24:9d:f9:e5:29:d1:2d:4e:29:cc:7b:82:
60:11:21:bf:9a:7a:be:f6:5c:e3:32:50:8c:f7:ee:62:09:6a:
81:39:06:06:19:24:ee:31:89:3c:b5:d4:7c:20:ed:49:67:dc:
47:1c:d4:cf:bf:bd:86:e0:90:56:aa:00:ee:a7:53:8f:73:2e:
65:b3:da:be:08:c6:3a:bb:2e:23:cf:b3:55:99:9f:fe:d6:6e:
df:ba:ca:b3:60:6c:10:16:b1:cb:1e:50:29:0c:db:09:a1:52:
bf:c8:33:33:d2:b7:6b:b3:90:a7:20:85:8f:66:38:62:64:bf:
af:76:8a:9d:1b:f2:63:b3:38:25:dd:5a:91:58:88:76:61:af:
f5:18:d7:65:31:e9:17:73:85:dd:91:2c:44:00:f4:56:ca:d0:
0d:11:49:ce:2a:f6:4f:3a:6b:5c:91:d5:53:9d:6f:3d:92:f0:
d8:09:46:04:5a:bf:80:e0:87:9b:ca:8c:27:dc:49:9b:14:15:
0b:a6:7d:f9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoHJ8xhoky2dvF3IUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzN1oXDTI1MDgyODE5MTEzN1owLzEtMCsGA1UEAxMk
MTQxMmYzYjEtYTg5MC00Y2EzLTkzOWItMWRhYzE5Yzk3YTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8y2XT55ZtpRIvTioscoYC3jeieRmK3j4HAr
fRIbual6u7d+eey67Zz6CLSAWGF3BL5/iDsQmGGZrzlm6d3VaTVxnzkgqkfZUkyJ
LPITomWoqoCGzG532vX2u6lSFnzqs5SFsN7tDUGoP61Tpg8Oki4Vzew/cB/M1v73
VoQH8KRaLRIMcBxr3i1Om2iOVt6Sd/qjAEokrSBwcP9KfOQmYus7EgM1N/iR3uLC
v0P5ywXvroIRdVCYEbX+sVCCyrAUEXek2uAvrApQjAVEtYGXPu0oYH/l17SvkwvG
LXMliYgqeLb4/cTHQZbyxEbnZRvQIAcUrG5bfHujO2UsaKKhqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN6wzpMm6Y6K7MVCtbubuiDIhzRxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNjliMzk1NmUtZDU0Ni0z
OGNlLWJkODAtMjFiMTBlNzNkZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdjo/6Q6Ok11VT1g6GA7jONL/yJI6m4dDWq2F/9yHrdIkK8KjlGg+cRst
U+dssexBRDrX5bVQU+L5jBhzJJ355SnRLU4pzHuCYBEhv5p6vvZc4zJQjPfuYglq
gTkGBhkk7jGJPLXUfCDtSWfcRxzUz7+9huCQVqoA7qdTj3MuZbPavgjGOrsuI8+z
VZmf/tZu37rKs2BsEBaxyx5QKQzbCaFSv8gzM9K3a7OQpyCFj2Y4YmS/r3aKnRvy
Y7M4Jd1akViIdmGv9RjXZTHpF3OF3ZEsRAD0VsrQDRFJzir2TzprXJHVU51vPZLw
2AlGBFq/gOCHm8qMJ9xJmxQVC6Z9+Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:52 2025 by rpki-client