Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/1f3983ea-1a24-399f-898d-1c12bf402615.roa
File: 1f3983ea-1a24-399f-898d-1c12bf402615.roa (raw, json)
Hash identifier: ky35hWs0mAuBi60KEmVl/Vp2b1uiybw9Wl5SJe3IeLg=
Subject key identifier: B0:49:1A:2A:C1:5D:03:8B:45:02:2F:41:D2:82:0F:48:45:69:EC:3D
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F4328584A5521A00C24ABE7273D4DEC80
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/1f3983ea-1a24-399f-898d-1c12bf402615.roa
Signing time: Fri 27 Jun 2025 17:32:13 +0000
ROA not before: Fri 27 Jun 2025 17:32:13 +0000
ROA not after: Thu 25 Sep 2025 17:32:13 +0000
asID: 834
IP address blocks: 134.202.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jun 2025 12:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:55:21:a0:0c:24:ab:e7:27:3d:4d:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Jun 27 17:32:13 2025 GMT
Not After : Sep 25 17:32:13 2025 GMT
Subject: CN=b71f2a6b-47f5-46c5-af8b-32e502273145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7f:44:db:6d:32:a7:a9:31:56:51:83:c1:21:
09:28:61:93:fc:1f:5c:fc:df:1d:05:bc:3b:33:83:
96:18:4f:6a:81:75:ac:02:36:41:94:9d:84:e0:62:
26:27:1b:b5:dd:d3:5e:14:db:1b:14:02:39:d6:28:
3b:e7:4c:a5:56:a1:4d:74:8a:a9:a7:c9:01:1d:a4:
d6:61:35:a5:07:3c:01:54:81:b3:43:98:8f:dd:7b:
a1:0a:1e:2a:81:a1:bf:32:21:37:c1:8f:21:1d:28:
dd:ff:d1:dd:7f:14:f0:19:3e:62:ab:89:a2:52:22:
62:79:f2:1a:60:48:f8:34:f3:40:5c:4e:91:1d:14:
1c:35:4f:4c:31:d2:d3:4e:0c:38:ff:6f:5b:6d:ec:
78:2f:ba:32:67:ee:e6:8b:90:57:9e:48:58:e6:09:
bc:c5:36:c3:af:7e:59:2c:f7:2c:3d:12:c7:87:97:
98:34:cc:5d:65:3a:de:90:de:72:45:21:fb:59:1c:
2e:6b:5c:49:c4:18:b3:0e:d9:ec:fc:ce:b6:ff:34:
dd:11:b5:f3:cc:21:e2:ba:ca:31:ae:20:7a:cd:e4:
17:77:b4:18:83:4d:75:ca:67:53:ab:b2:5a:d3:f6:
0a:70:dd:8e:ba:5e:1d:71:da:48:dd:7a:72:5c:fb:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:1A:2A:C1:5D:03:8B:45:02:2F:41:D2:82:0F:48:45:69:EC:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/1f3983ea-1a24-399f-898d-1c12bf402615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b5:2a:05:a4:1b:57:c6:55:6c:54:58:4b:30:a9:2f:54:25:
7c:c1:3e:1f:10:58:8d:2d:32:00:c7:6a:03:e3:de:88:fa:6e:
36:c3:ce:79:a4:1a:13:0b:b7:11:69:8c:09:74:9c:04:11:a3:
c3:b6:2d:f1:de:13:08:25:a8:e7:1d:b2:07:86:5f:e2:8d:ce:
c9:d7:5c:1a:70:a5:8d:b5:96:0e:78:ff:7e:63:e1:b6:3c:8a:
ef:31:31:6a:43:c6:f8:ec:55:cc:47:1c:f0:63:c5:8c:71:ae:
d2:c3:1b:eb:ce:bb:44:37:af:a3:67:5e:b0:0f:42:90:f5:20:
8d:34:78:4d:fd:63:89:68:76:e8:da:2f:b2:9a:94:07:88:a8:
d9:e9:06:08:e7:bb:f7:45:e7:aa:6c:74:b2:48:69:43:f3:e4:
7b:65:0b:67:af:79:8e:e0:ef:68:b6:2a:ce:08:f4:66:2c:11:
f7:9c:64:c6:04:c2:53:35:73:1c:28:29:97:da:7b:13:52:59:
ed:0c:8f:15:42:d2:b9:d6:24:2a:69:95:3d:0e:83:06:e0:e1:
36:5d:50:8d:22:89:6e:3b:ba:8a:f8:04:c4:9f:45:1e:4e:76:
59:bc:ec:ee:d5:93:5b:3d:91:a2:59:d6:f3:7a:32:db:e2:21:
5b:7b:83:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpVIaAMJKvnJz1N7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI1MDYyNzE3MzIxM1oXDTI1MDkyNTE3MzIxM1owLzEtMCsGA1UEAxMk
YjcxZjJhNmItNDdmNS00NmM1LWFmOGItMzJlNTAyMjczMTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H9E220yp6kxVlGDwSEJKGGT/B9c/N8dBbw7
M4OWGE9qgXWsAjZBlJ2E4GImJxu13dNeFNsbFAI51ig750ylVqFNdIqpp8kBHaTW
YTWlBzwBVIGzQ5iP3XuhCh4qgaG/MiE3wY8hHSjd/9HdfxTwGT5iq4miUiJiefIa
YEj4NPNAXE6RHRQcNU9MMdLTTgw4/29bbex4L7oyZ+7mi5BXnkhY5gm8xTbDr35Z
LPcsPRLHh5eYNMxdZTrekN5yRSH7WRwua1xJxBizDtns/M62/zTdEbXzzCHiusox
riB6zeQXd7QYg011ymdTq7Ja0/YKcN2Oul4dcdpI3XpyXPuyFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBJGirBXQOLRQIvQdKCD0hFaew9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvMWYzOTgzZWEtMWEyNC0z
OTlmLTg5OGQtMWMxMmJmNDAyNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhsrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADi1KgWkG1fGVWxUWEswqS9UJXzBPh8QWI0tMgDHagPj3oj6bjbDznmk
GhMLtxFpjAl0nAQRo8O2LfHeEwglqOcdsgeGX+KNzsnXXBpwpY21lg54/35j4bY8
iu8xMWpDxvjsVcxHHPBjxYxxrtLDG+vOu0Q3r6NnXrAPQpD1II00eE39Y4loduja
L7KalAeIqNnpBgjnu/dF56psdLJIaUPz5HtlC2eveY7g72i2Ks4I9GYsEfecZMYE
wlM1cxwoKZfaexNSWe0MjxVC0rnWJCpplT0Ogwbg4TZdUI0iiW47uor4BMSfRR5O
dlm87O7Vk1s9kaJZ1vN6MtviIVt7g9Q=
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:52:54 2025 by rpki-client