Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/936f4307-0324-341c-b90a-bf58d695081a.roa
File: 936f4307-0324-341c-b90a-bf58d695081a.roa (raw, json)
Hash identifier: g+At5Dx4rZ7NmG9dI/ZG8zmRBftasHXFLQJEgFv5rsU=
Subject key identifier: 38:B7:D4:4C:D3:63:32:2D:CE:B0:0E:88:A1:0C:AA:37:BE:2B:D5:0F
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D7803B82EEDBA7456C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/936f4307-0324-341c-b90a-bf58d695081a.roa
Signing time: Fri 30 May 2025 19:11:42 +0000
ROA not before: Fri 30 May 2025 19:11:42 +0000
ROA not after: Thu 28 Aug 2025 19:11:42 +0000
asID: 81
IP address blocks: 204.85.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d7:80:3b:82:ee:db:a7:45:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:42 2025 GMT
Not After : Aug 28 19:11:42 2025 GMT
Subject: CN=bd13bc64-aac7-4b07-9a84-3b82ef230b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:01:5d:cb:fc:c6:3f:11:14:46:be:34:61:
65:55:1b:ec:85:dd:5b:0c:ba:12:a1:4e:5d:93:88:
de:08:ec:9f:ff:cf:5c:a0:12:7a:69:3f:e0:ae:fc:
81:8c:f9:ac:58:52:c7:47:51:e0:23:82:4f:23:e4:
0c:12:b4:14:f9:91:17:8c:da:cd:53:4d:17:50:8a:
1b:db:5e:96:ad:19:04:d2:b5:68:85:e7:fd:68:c3:
9a:44:11:9e:2d:ac:c6:95:6b:44:00:2b:eb:d4:bf:
2c:24:3e:2b:b8:69:1d:8b:67:6c:cd:26:99:bc:b3:
02:c0:30:d1:83:9b:d1:7d:34:6b:d0:25:81:aa:45:
c6:1b:d8:fc:f8:66:96:ca:66:16:bc:69:68:e8:04:
19:cf:73:e0:9e:6d:1d:81:82:65:8b:2e:1b:37:71:
09:74:14:a2:7e:e6:55:17:8a:bf:c6:90:07:9e:a3:
04:5a:02:3c:fa:c1:83:7b:cc:6f:d5:fd:20:a5:ea:
7f:5a:1d:d3:aa:81:ac:49:04:90:1c:75:5e:e2:68:
bb:4e:db:81:5a:d9:7b:da:c3:b9:df:04:ff:57:2d:
aa:43:09:16:bc:21:53:d7:5e:60:8d:f3:9e:e9:d1:
17:74:5f:0d:79:14:89:e2:23:dc:fc:20:81:6b:22:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:D4:4C:D3:63:32:2D:CE:B0:0E:88:A1:0C:AA:37:BE:2B:D5:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/936f4307-0324-341c-b90a-bf58d695081a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:38:d9:01:8f:7f:52:a9:3a:7c:c5:d2:34:8e:25:d0:68:f6:
7b:ea:bd:db:5a:00:0b:21:06:4e:38:55:a5:c7:15:21:2e:9b:
02:91:02:8f:fc:9f:5e:49:32:fd:db:e9:b8:e5:48:5e:01:36:
e2:eb:e0:f8:9d:22:e2:10:14:8b:b2:82:cb:0f:66:c8:a1:36:
fc:70:3f:89:98:87:59:ca:08:fa:c2:f9:c6:88:00:25:1c:8f:
55:b1:37:37:bf:ff:58:dc:ea:6a:9e:81:e2:05:54:42:c3:ab:
60:91:1f:cf:75:e7:8b:18:96:9c:63:47:6a:7b:8b:17:57:7b:
33:2b:8e:e2:66:e5:85:2d:0f:e8:d6:3c:c1:6d:76:31:0e:d0:
f7:5a:21:6e:fa:4e:20:49:b8:79:07:a6:4f:b4:df:8a:0a:a3:
6c:56:b1:ab:11:4b:ed:18:7c:2f:a6:29:6e:1d:cd:e0:a1:cf:
ed:17:ab:b0:65:3d:f6:51:f9:aa:07:e0:05:2b:f3:c8:25:fb:
9c:19:cd:7e:0d:d4:15:f9:59:73:e1:9f:ee:18:20:df:82:3e:
98:a7:43:46:9d:47:fd:58:ae:79:07:d9:05:09:72:d4:4e:dc:
1b:fc:bd:8d:57:b5:a0:18:b2:c8:8c:2b:29:7c:19:52:31:93:
3d:5a:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:02 2025 by rpki-client