Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e5f5819f-7b94-3a4d-8baf-71a606f0b13a.roa
File: e5f5819f-7b94-3a4d-8baf-71a606f0b13a.roa (raw, json)
Hash identifier: 1QG2yN0ArIbG6AOro+6agK5xmc03g/gIqwlFsglFtzE=
Subject key identifier: A3:26:B2:25:D3:DB:87:73:CF:A9:39:86:AD:81:B7:57:64:F5:10:F5
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727CE30922C4642453D5790
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e5f5819f-7b94-3a4d-8baf-71a606f0b13a.roa
Signing time: Fri 30 May 2025 19:11:37 +0000
ROA not before: Fri 30 May 2025 19:11:37 +0000
ROA not after: Thu 28 Aug 2025 19:11:37 +0000
asID: 81
IP address blocks: 128.109.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:ce:30:92:2c:46:42:45:3d:57:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:37 2025 GMT
Not After : Aug 28 19:11:37 2025 GMT
Subject: CN=e8433e94-bd9a-459a-a5a5-3d66b6b0be27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:7f:16:12:17:ab:24:52:85:3d:5c:e6:b4:
a9:da:6f:cd:e1:8b:d4:fe:25:29:fc:83:d4:c7:ec:
73:a9:7c:f6:be:aa:c9:63:10:26:0b:b3:48:7b:94:
0c:cd:93:f8:3b:50:96:66:2a:58:6e:e6:30:04:0d:
f9:d6:9b:cd:a8:36:a2:5a:c7:01:87:9d:45:2b:9d:
8d:7a:6e:a7:5a:d0:50:a4:83:da:6f:3f:64:59:0b:
17:ef:a9:b3:fd:10:2a:ae:d1:c1:51:47:1b:1a:d8:
13:21:f2:6d:66:82:55:00:52:6a:93:62:a0:31:b2:
67:1f:b9:b4:e1:a4:48:ce:36:d4:f5:42:b7:6f:a3:
9e:d1:d7:7d:ad:7e:ed:bb:02:4a:4b:90:85:df:d3:
54:e9:62:d0:4c:f9:73:20:77:9d:0d:ba:49:8e:9c:
2b:ac:b1:a3:5b:18:7f:a1:f8:d5:05:ad:00:06:83:
69:9a:65:c8:01:95:7f:2d:30:4a:a1:03:eb:d6:85:
33:f5:d8:bc:2a:b1:2f:ed:50:0a:fb:1d:36:89:ce:
55:5e:34:39:60:87:78:08:50:ad:14:4e:39:4a:b8:
a2:a7:e9:62:0a:14:19:6a:1b:c5:e6:97:62:4f:00:
62:27:6c:48:d1:4c:76:a8:78:cc:8a:60:06:57:57:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:26:B2:25:D3:DB:87:73:CF:A9:39:86:AD:81:B7:57:64:F5:10:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e5f5819f-7b94-3a4d-8baf-71a606f0b13a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:5a:97:21:f4:b2:99:fe:bb:a2:09:de:01:2f:95:e7:1e:5c:
d4:35:06:f5:0e:a7:42:96:dd:8d:bb:c7:a0:d2:be:89:2a:53:
4a:0b:f4:ab:4c:c8:f9:2a:6a:de:9a:fa:ed:bc:ef:69:db:70:
f7:dc:d1:1f:13:e1:69:58:fa:6f:87:18:8f:63:df:13:b5:07:
e9:54:0b:00:a4:50:06:5b:a7:60:8f:14:1a:98:b6:d5:54:42:
48:05:76:81:96:eb:28:38:15:17:7b:e8:31:b8:be:dc:b4:67:
e8:62:3b:75:13:b5:b1:c3:9d:09:00:cf:cf:3f:ca:6b:05:3a:
7e:91:84:8e:c4:78:a4:4f:f1:bd:b7:43:fe:83:b5:95:71:39:
21:a1:bf:1b:e3:e7:36:37:ed:38:fd:2b:d1:c4:c0:dd:5f:26:
fe:e4:89:7c:84:46:66:9e:ea:5a:7b:d1:80:78:15:96:dc:16:
2f:3f:5f:a1:bc:fa:de:24:d9:13:80:cd:2a:a6:ba:ee:0f:0a:
8a:85:da:81:20:f3:f6:0c:02:db:4f:65:44:33:ae:81:6d:78:
4b:71:bb:68:c7:a8:99:93:18:6e:fc:a2:71:71:cb:0c:a9:19:
d5:5b:8c:fd:8f:15:81:72:51:b7:00:cf:16:f3:75:de:78:93:
82:af:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:55 2025 by rpki-client