Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9c3c7664-591d-321c-abdd-49f7b9f18509.roa
File: 9c3c7664-591d-321c-abdd-49f7b9f18509.roa (raw, json)
Hash identifier: JySZjeJrAaAEPNUSJG/tWdLN5/KkieWHeuXLpfVrO+8=
Subject key identifier: 10:17:1A:5E:92:79:82:43:43:8E:ED:5F:9D:CB:DC:1C:6D:88:FC:33
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727CE51A2EB6A1B8AEF6AC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9c3c7664-591d-321c-abdd-49f7b9f18509.roa
Signing time: Fri 30 May 2025 19:11:37 +0000
ROA not before: Fri 30 May 2025 19:11:37 +0000
ROA not after: Thu 28 Aug 2025 19:11:37 +0000
asID: 11442
IP address blocks: 152.14.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:ce:51:a2:eb:6a:1b:8a:ef:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:37 2025 GMT
Not After : Aug 28 19:11:37 2025 GMT
Subject: CN=5515b899-e246-4f84-8778-ba26f931288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:5f:4e:6f:94:1a:0f:28:0e:e8:33:bb:27:
d7:56:a9:8c:6b:33:9e:8c:35:d5:40:74:d3:29:79:
dd:09:d3:01:1b:aa:e1:0b:d1:36:47:27:20:24:5a:
be:5d:b4:f8:e2:68:93:cc:b1:4a:86:02:e9:11:20:
42:f3:6c:6a:5b:70:1f:77:fa:aa:d8:db:d0:69:87:
d3:41:ce:d6:05:97:bc:93:4a:94:6e:02:a2:58:af:
8b:6a:75:d1:ad:e8:63:be:4a:be:0a:0c:07:0a:4d:
ff:e5:1f:a1:ac:72:ca:79:5e:f7:07:14:1f:fc:3b:
46:41:29:64:98:68:f3:57:bb:c9:21:0f:b3:d0:6a:
56:f6:da:e7:19:4e:6a:62:f0:b5:a6:ef:cc:d6:f0:
99:66:ec:a8:e6:f1:41:c8:cf:72:cc:dc:3a:fd:20:
a3:e3:74:ee:bf:f6:17:df:f3:49:44:8b:90:3b:9f:
a1:94:43:f0:3a:ef:9b:ba:8a:09:83:eb:ca:79:1c:
61:59:1f:ed:69:af:b8:3a:4e:85:21:40:40:9f:16:
a0:2e:cf:69:03:d9:6b:4e:8b:bd:8e:86:ab:35:40:
1e:bc:be:c1:58:35:54:bc:66:8c:1e:c7:6e:c6:58:
c4:08:eb:5a:d3:cb:85:42:2d:4a:94:ec:7a:e9:6a:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:17:1A:5E:92:79:82:43:43:8E:ED:5F:9D:CB:DC:1C:6D:88:FC:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9c3c7664-591d-321c-abdd-49f7b9f18509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.14.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:cb:ba:15:ac:fe:a0:6e:57:95:ca:59:29:9e:6d:37:f8:bd:
a0:a8:fb:1a:dd:ba:44:dc:0e:bb:14:f9:5c:b1:38:c0:2f:9e:
64:78:8f:e9:64:88:b5:79:0f:d6:e2:17:cc:82:ee:f4:1a:23:
f3:23:01:96:09:ed:d7:d7:12:01:6f:d6:2f:67:16:68:4e:a3:
f1:8a:bb:ef:d2:e6:43:ec:a2:cb:72:b8:3f:de:c6:22:44:f3:
d3:9c:75:a5:d8:cb:61:59:aa:cf:e9:dc:84:36:30:a6:96:c0:
b6:17:65:b0:e5:95:b1:d7:6c:7f:1e:80:20:8b:4d:3f:26:19:
74:c8:3f:93:68:8a:6e:7b:df:b4:6f:e5:e5:c3:a1:1e:d8:ce:
f7:d1:ee:9c:e2:7a:cf:12:3c:09:e7:12:a1:9b:c0:d8:b6:0f:
fb:17:9c:7c:ad:87:44:e3:bf:9a:92:a6:54:7a:b7:76:a9:98:
dc:75:3b:af:78:4a:f2:98:6f:2d:6a:d1:2d:c2:b1:16:4e:bb:
53:95:90:02:86:94:c4:78:ce:7b:93:29:a2:37:79:5a:6f:0e:
2e:7c:4b:10:c5:15:72:2c:61:e3:43:f1:6c:78:f8:ef:c7:3d:
2f:cd:d1:40:79:8b:2a:2c:ad:91:f6:36:6e:d8:73:8c:90:68:
69:24:bd:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoHJ85RoutqG4rvasAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzN1oXDTI1MDgyODE5MTEzN1owLzEtMCsGA1UEAxMk
NTUxNWI4OTktZTI0Ni00Zjg0LTg3NzgtYmEyNmY5MzEyODhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitpfTm+UGg8oDugzuyfXVqmMazOejDXVQHTT
KXndCdMBG6rhC9E2RycgJFq+XbT44miTzLFKhgLpESBC82xqW3Afd/qq2NvQaYfT
Qc7WBZe8k0qUbgKiWK+LanXRrehjvkq+CgwHCk3/5R+hrHLKeV73BxQf/DtGQSlk
mGjzV7vJIQ+z0GpW9trnGU5qYvC1pu/M1vCZZuyo5vFByM9yzNw6/SCj43Tuv/YX
3/NJRIuQO5+hlEPwOu+buooJg+vKeRxhWR/taa+4Ok6FIUBAnxagLs9pA9lrTou9
joarNUAevL7BWDVUvGaMHsduxljECOta08uFQi1KlOx66WqqlwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBAXGl6SeYJDQ47tX53L3BxtiPwzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWMzYzc2NjQtNTkxZC0z
MjFjLWFiZGQtNDlmN2I5ZjE4NTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmA4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKsu6Faz+oG5XlcpZKZ5tN/i9oKj7Gt26RNwOuxT5XLE4wC+eZHiP6WSI
tXkP1uIXzILu9Boj8yMBlgnt19cSAW/WL2cWaE6j8Yq779LmQ+yiy3K4P97GIkTz
05x1pdjLYVmqz+nchDYwppbAthdlsOWVsddsfx6AIItNPyYZdMg/k2iKbnvftG/l
5cOhHtjO99HunOJ6zxI8CecSoZvA2LYP+xecfK2HROO/mpKmVHq3dqmY3HU7r3hK
8phvLWrRLcKxFk67U5WQAoaUxHjOe5Mpojd5Wm8OLnxLEMUVcixh40PxbHj478c9
L83RQHmLKiytkfY2bthzjJBoaSS92w==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:55 2025 by rpki-client