Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa
File: 410c2aa7-bb4f-3e49-bacb-d414b9074359.roa (raw, json)
Hash identifier: hWl4D+OgzDbtg7bztEJLsYemIku2PvJe9HCNUl+rSIs=
Subject key identifier: F3:57:EC:77:8A:3E:36:A1:A1:90:6B:57:FC:8E:65:00:B0:23:E6:C6
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F4328584A63F5C05BFC95E81539322300
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa
Signing time: Thu 03 Jul 2025 01:00:48 +0000
ROA not before: Thu 03 Jul 2025 01:00:48 +0000
ROA not after: Wed 01 Oct 2025 01:00:48 +0000
asID: 10737
IP address blocks: 172.96.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 24 Jul 2025 18:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:63:f5:c0:5b:fc:95:e8:15:39:32:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jul 3 01:00:48 2025 GMT
Not After : Oct 1 01:00:48 2025 GMT
Subject: CN=68016e74-fc21-4e13-ba96-8bfbe5f5b670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:07:51:df:92:7f:b7:a0:13:c4:df:a5:20:
3e:21:2f:ac:54:bd:f8:26:f1:a6:aa:50:04:26:89:
6b:99:78:23:63:e5:22:cd:a4:bd:d2:6a:53:44:4d:
63:bb:64:4a:ea:66:bc:fa:3e:d9:2b:fb:54:42:90:
2d:cd:e1:ba:3c:97:0b:91:0b:b5:13:90:78:ab:09:
42:7f:53:b2:2f:c5:ed:71:f4:68:e5:d5:63:32:df:
85:5d:c3:53:39:3f:80:f9:75:26:f6:6e:d1:17:cf:
e7:c6:10:a3:f0:0a:72:7d:92:f2:63:45:7d:22:14:
c6:f7:bc:49:02:75:67:19:e5:41:0a:27:ba:c1:8f:
04:c1:c4:7e:bf:d7:f5:ad:14:d1:21:ba:26:0f:99:
b8:01:45:22:6c:db:e2:13:00:5b:af:e4:42:c2:36:
86:af:31:16:55:67:f8:26:53:b3:c8:71:e0:6d:71:
5c:d3:32:de:6a:21:a1:d7:d7:61:ed:b4:ff:cc:50:
75:56:66:9a:96:f1:f5:86:78:31:d4:1f:d5:42:8f:
98:8f:a8:1c:0e:bc:43:b9:90:44:46:3d:e2:65:6a:
dd:7d:3a:cb:9e:95:a2:68:be:ac:85:1c:d8:93:30:
ba:64:74:fb:38:c0:9f:5e:0f:ac:b4:df:4f:27:74:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:EC:77:8A:3E:36:A1:A1:90:6B:57:FC:8E:65:00:B0:23:E6:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/410c2aa7-bb4f-3e49-bacb-d414b9074359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:cc:a0:d1:9a:75:0d:7a:56:96:79:14:8a:76:ec:c7:86:bc:
3a:47:16:44:67:23:e4:0c:32:bc:65:5e:9f:47:a8:5e:d9:d4:
ca:a6:43:69:3f:fc:d6:c9:d0:c4:b3:2b:de:80:95:f7:70:5e:
7b:f8:6b:12:04:57:96:73:08:07:bf:71:f6:b2:40:ac:a8:34:
7e:c3:c7:04:e6:f7:06:e7:a2:a2:f7:eb:5e:d7:cc:40:7b:a5:
77:e5:cb:09:7f:7b:88:66:45:6c:f6:b0:23:9d:8c:7e:09:87:
ab:d7:8c:29:3c:77:2f:b7:94:b8:98:8d:71:f7:d9:ed:d5:21:
5f:ab:9c:80:d7:4a:bb:07:49:2c:dd:10:4f:9b:78:ff:5a:84:
b5:f8:71:fc:90:f1:81:0c:4b:6f:82:30:f5:26:90:f0:09:7c:
84:ac:42:40:28:01:b0:04:9d:16:3c:43:a6:36:32:94:c3:55:
22:77:7d:b4:8d:4c:39:d9:a0:ce:78:55:14:f3:0f:ed:25:4f:
cb:ef:80:55:4f:ec:c1:c4:43:9a:f9:47:5d:f7:ff:66:30:87:
24:29:d2:2a:e6:be:27:9d:8c:ab:2c:74:8a:bd:7e:86:8f:8f:
df:ee:23:13:30:1e:e7:9c:70:03:1a:27:95:ec:5f:bf:fe:b2:
3b:5c:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:54:31 2025 by rpki-client