Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c36ad6f3-1ac2-3b86-8513-279c98f52ff5.roa
File: c36ad6f3-1ac2-3b86-8513-279c98f52ff5.roa (raw, json)
Hash identifier: 5xBdcOn5x1/jTfOm/CDo92ltBjMWdKZhed1NqArNntY=
Subject key identifier: 69:E4:2E:18:C1:1B:96:2D:83:26:89:4B:06:26:F5:5B:C8:6D:0D:AF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D1DEBF4F689A10F55680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c36ad6f3-1ac2-3b86-8513-279c98f52ff5.roa
Signing time: Fri 30 May 2025 19:11:39 +0000
ROA not before: Fri 30 May 2025 19:11:39 +0000
ROA not after: Thu 28 Aug 2025 19:11:39 +0000
asID: 6559
IP address blocks: 152.34.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d1:de:bf:4f:68:9a:10:f5:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:39 2025 GMT
Not After : Aug 28 19:11:39 2025 GMT
Subject: CN=1ff0418b-7257-4099-b02c-45dc861c5335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:c5:70:68:2b:00:b9:4e:b6:04:59:08:12:
e3:e2:86:83:de:ca:59:a6:da:89:68:ae:3d:d6:9a:
a2:83:d9:78:43:34:d4:50:26:27:a6:8f:42:c6:ff:
f5:a5:25:ba:e8:ae:8f:69:4a:23:38:d5:08:91:ef:
80:71:90:ea:a7:f4:b2:cd:ef:1d:06:ae:82:fa:f3:
53:8d:52:ab:7f:34:cc:16:f6:56:63:b0:0d:c4:f7:
79:d2:3a:48:9f:a1:60:c8:2e:ee:77:82:66:f5:a5:
97:b1:22:16:8e:5a:b7:b9:5b:cb:31:68:66:5c:15:
ed:9f:50:32:3a:a0:26:f7:cc:26:3a:3b:0e:dd:b7:
d2:43:99:35:0c:61:71:12:1a:b6:42:eb:79:4d:af:
b9:5e:63:fc:e3:55:f3:eb:3a:b9:35:dc:eb:a9:0b:
ab:c8:13:f1:4a:33:65:ec:1e:7d:a5:9f:bf:59:6e:
3a:a9:9f:f7:c9:f4:4d:d0:14:2d:68:14:95:72:95:
66:60:02:b8:b8:ce:1e:8d:9c:e4:7c:45:2f:ad:e4:
93:21:b9:f2:0c:3e:0c:03:d1:bd:71:ac:2a:38:fa:
88:5f:d3:b0:c9:49:01:8d:99:b4:21:33:38:90:f1:
85:06:00:c8:bb:dd:d4:91:b5:e6:05:f0:4d:bb:50:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E4:2E:18:C1:1B:96:2D:83:26:89:4B:06:26:F5:5B:C8:6D:0D:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c36ad6f3-1ac2-3b86-8513-279c98f52ff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:2b:0d:ba:e4:a3:8d:3e:bd:d5:65:f8:b0:6e:9a:e3:52:39:
7c:ad:95:a0:97:3a:45:7f:b8:93:5b:57:2c:3f:34:4c:4b:de:
38:8a:1a:25:e8:2a:ea:7a:6e:fc:24:36:11:9a:a5:5a:c1:49:
d8:8a:fd:6e:3a:11:1c:89:da:9c:4b:fd:90:82:69:cd:d0:4b:
2d:44:1e:2a:fe:79:74:a3:3e:aa:11:8f:60:36:3a:2f:ed:6b:
b2:bf:9e:62:61:1c:1e:a8:4c:32:d7:61:b8:33:2b:52:6c:69:
c6:bf:98:58:36:b2:1f:62:6b:0f:66:d4:43:4c:d9:03:a6:38:
85:89:c6:c8:44:43:e2:7e:fd:af:cf:44:01:ad:d9:b3:76:d1:
58:c7:5e:20:7a:0b:1d:2a:20:a5:48:e2:2f:27:9f:92:e7:01:
9d:c9:24:1b:01:ff:78:23:b0:c9:40:a9:91:16:0c:fe:83:08:
14:be:a9:fc:25:51:f2:bb:d8:1f:cf:59:39:67:93:cd:28:43:
df:25:bd:9b:f5:77:f5:1f:9a:0b:75:e5:3f:65:d5:de:9b:59:
89:6c:3b:78:51:f0:6b:e7:22:80:dc:e8:a7:42:50:a7:e9:7b:
a2:3e:e1:c5:3a:a4:d2:47:00:31:a5:26:8c:0b:fd:d5:fa:37:
89:04:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:59 2025 by rpki-client