Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9da9b881-68e0-3f2a-8a02-5b70835e4c40.roa
File: 9da9b881-68e0-3f2a-8a02-5b70835e4c40.roa (raw, json)
Hash identifier: a8PteI5bU37/x9I/hccP7V0ZEmOniYF7bNn2OUnQbzM=
Subject key identifier: EE:68:EA:CC:95:5E:47:CE:72:33:61:F0:F8:E9:51:C8:85:9F:9B:20
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D74DCD5FCD539AB5DC80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9da9b881-68e0-3f2a-8a02-5b70835e4c40.roa
Signing time: Fri 30 May 2025 19:11:42 +0000
ROA not before: Fri 30 May 2025 19:11:42 +0000
ROA not after: Thu 28 Aug 2025 19:11:42 +0000
asID: 36850
IP address blocks: 204.85.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d7:4d:cd:5f:cd:53:9a:b5:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:42 2025 GMT
Not After : Aug 28 19:11:42 2025 GMT
Subject: CN=7cddeab0-b2f4-40bb-8baf-3636e7bfa1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:a0:a3:b2:38:67:60:7c:83:8f:ca:24:f3:
4a:84:48:e6:e1:a4:a9:bc:b6:e0:e4:ff:a7:c0:6a:
87:0d:24:14:1e:83:13:94:a1:27:ec:cd:ca:ed:03:
de:96:24:6b:a1:9c:79:c2:84:e8:93:cd:a1:50:49:
c5:e6:4a:5b:09:b3:ca:08:1f:76:49:68:04:58:f8:
a0:d9:20:0c:b6:8e:7a:c9:b2:05:de:bc:ec:ba:f8:
5c:01:d4:f7:02:22:a0:12:1b:9e:1b:fb:b6:53:cf:
83:d5:ce:c8:ae:58:17:41:ad:4c:61:39:60:a6:ed:
87:31:48:11:04:34:c7:ee:4d:bf:f6:38:ff:17:46:
52:11:83:f2:b7:3e:92:33:6d:c6:9c:55:6c:0a:c4:
cc:78:ec:07:7a:01:f3:ba:cb:f0:bc:2e:1a:e8:6a:
3a:f1:42:99:54:75:52:cb:67:c6:69:08:b6:ec:f4:
19:c6:c7:dd:5f:0a:6d:73:8e:3a:20:45:41:c9:ee:
cf:cf:7b:f9:af:d3:f9:f8:92:f6:85:e6:88:84:0d:
00:a6:24:ac:1c:48:29:9a:d6:18:e0:05:13:27:22:
39:ff:18:37:ad:73:a9:1e:5e:d2:60:96:c3:a7:89:
6f:20:dd:c6:52:dc:23:85:45:e4:49:03:3a:d4:7c:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:EA:CC:95:5E:47:CE:72:33:61:F0:F8:E9:51:C8:85:9F:9B:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9da9b881-68e0-3f2a-8a02-5b70835e4c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:dd:a2:6b:2a:44:e9:df:75:09:5a:6f:46:be:7e:09:2c:dc:
5a:c7:33:07:eb:f7:8a:3a:d7:27:1c:20:22:2b:7c:4f:f6:d7:
93:82:ff:3a:1a:57:b8:7a:65:d4:fe:06:89:80:82:99:e1:ac:
b0:12:0d:9f:62:ba:74:f3:bd:e9:d1:f1:f1:57:02:da:2d:cf:
5a:79:87:5a:20:eb:b5:40:f2:7f:c3:98:a1:e8:7b:22:88:b0:
45:41:38:b1:cc:1e:c2:7b:77:a0:23:72:47:c6:bb:77:93:c9:
9e:49:0b:5c:d9:ed:b9:33:83:1d:28:fc:a3:82:4d:7c:dc:0c:
e9:fa:7a:90:f8:1c:60:cf:77:0b:d1:51:cd:aa:ef:61:3b:27:
0c:79:20:c8:f6:62:40:9e:32:18:f7:11:7f:d7:3c:cb:f0:65:
51:9e:08:38:66:71:0b:54:d4:10:d6:96:32:f0:e6:94:a9:98:
15:53:8b:c5:88:24:58:c2:54:40:10:f3:b0:4f:28:23:67:8b:
00:55:ec:fb:19:cf:61:ff:64:d8:91:7f:e8:af:64:c6:74:f1:
f5:a0:75:49:99:a1:cd:19:7f:f8:9d:47:1b:37:e3:9d:72:7a:
43:44:ed:c6:4f:6c:2a:cb:63:65:4f:b6:08:59:f2:23:f4:a5:
25:43:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:51 2025 by rpki-client