Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1b36ea78-31e9-368e-b31b-ee123fae516d.roa
File: 1b36ea78-31e9-368e-b31b-ee123fae516d.roa (raw, json)
Hash identifier: AJQ9ODG3gs04vLQUJUg+jz5R9iKMkqUP3mqKwPieEe4=
Subject key identifier: DF:73:28:E0:7C:B6:5C:4B:67:5C:44:6C:40:F2:22:FD:A3:CB:0B:9F
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584B2E5C4833ED3A4F7F76A9C480
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1b36ea78-31e9-368e-b31b-ee123fae516d.roa
Signing time: Sat 13 Sep 2025 13:00:41 +0000
ROA not before: Sat 13 Sep 2025 13:00:41 +0000
ROA not after: Fri 12 Dec 2025 14:00:41 +0000
asID: 14618
IP address blocks: 216.87.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Sep 2025 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2e:5c:48:33:ed:3a:4f:7f:76:a9:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Sep 13 13:00:41 2025 GMT
Not After : Dec 12 14:00:41 2025 GMT
Subject: CN=3e0fd6f9-7c47-47f6-8f4c-382c40092600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:b7:4e:12:74:58:02:3b:d4:51:f3:f9:e2:
31:32:34:ba:fe:8d:f7:27:16:b9:77:87:9c:2e:18:
9b:ac:b1:b0:41:02:80:82:29:73:0b:45:6a:3b:af:
e3:6b:67:1f:a1:5d:12:87:ac:6f:c6:40:d1:2c:d7:
c6:b4:82:55:a2:99:ed:5d:42:74:19:9d:f9:5b:18:
8a:65:c8:b8:29:b1:4e:8c:cf:d2:b1:00:c3:c3:7e:
ee:bf:17:4f:a3:c4:75:cd:a2:99:c7:75:69:ad:21:
06:1d:8c:fb:be:da:e3:1c:87:8e:fc:48:1a:49:f7:
d8:ee:95:1d:bf:be:a6:98:94:7b:05:d8:ae:23:4a:
cf:5b:59:cd:1c:5c:7e:e2:9f:33:8b:d2:46:df:17:
32:61:b6:95:bd:de:76:bc:de:a7:6e:79:c7:62:2e:
b2:b6:e2:ce:b1:5a:b5:e8:6a:51:69:d4:db:cb:43:
87:40:03:22:87:90:76:1b:30:82:48:98:be:8f:c7:
d2:fa:1e:64:4a:01:1c:11:ae:f3:9f:57:5b:94:5e:
46:3b:2d:56:0a:b1:04:f0:67:7f:7b:94:fc:1f:94:
dd:e3:9f:0c:fb:8d:73:fd:f8:a7:d4:fb:68:db:01:
f7:af:d1:99:53:6a:b7:3f:ab:92:29:de:90:3d:9c:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:28:E0:7C:B6:5C:4B:67:5C:44:6C:40:F2:22:FD:A3:CB:0B:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1b36ea78-31e9-368e-b31b-ee123fae516d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:50:75:d2:97:a9:e7:47:c1:62:d1:c2:7f:d1:67:95:d3:75:
fd:10:2d:84:ec:d6:03:d1:f6:d4:c9:d8:ed:dd:e8:11:24:de:
d5:30:6e:5a:83:32:0a:8a:be:13:63:8f:48:c4:72:22:65:bd:
46:e1:4f:ed:a6:70:41:f8:45:55:1f:66:e6:a6:af:05:b2:7f:
67:d4:93:ad:a1:3f:a6:04:a6:53:9b:e6:9e:ce:cc:e4:da:19:
fa:08:e9:28:42:fd:94:ec:3d:c9:b8:cb:a7:69:2f:4a:01:a5:
26:f9:a3:08:8b:e6:49:a4:41:b2:31:a7:9c:1c:37:76:87:3e:
4b:14:aa:e4:b9:9c:04:ed:52:f2:d9:85:2f:03:af:bf:54:c6:
46:a7:97:4b:87:e7:24:e9:3a:c3:a5:4a:16:89:9a:66:07:b7:
cb:0b:55:50:33:26:e9:70:ee:6f:3c:8a:81:7a:a8:74:f7:35:
c2:2d:49:bf:22:4c:a2:3b:32:30:bd:5e:12:0f:4c:cf:bf:87:
1c:db:f1:c5:a7:5b:ea:f4:db:22:40:69:5c:6c:4e:a2:3e:72:
ee:b1:c3:02:5b:60:40:38:b6:9b:4f:af:49:fb:a5:16:bf:00:
15:b0:c4:ee:88:1e:94:7c:6e:1c:59:ca:66:81:31:95:f6:a0:
62:73:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:45 2025 by rpki-client