Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a305ba8b-ba39-3ce5-bae9-b73a43f66bdc.roa
File: a305ba8b-ba39-3ce5-bae9-b73a43f66bdc.roa (raw, json)
Hash identifier: AAvL3pWp0nizbacajfZZA1yqksUS3EfFYqm9A/gJY2g=
Subject key identifier: 12:AE:F2:BD:DE:6F:82:28:C7:A8:85:9C:B7:0D:5B:29:E0:F1:9B:21
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584B2E5C4878C9999D4E83DB1D00
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a305ba8b-ba39-3ce5-bae9-b73a43f66bdc.roa
Signing time: Sat 13 Sep 2025 13:00:41 +0000
ROA not before: Sat 13 Sep 2025 13:00:41 +0000
ROA not after: Fri 12 Dec 2025 14:00:41 +0000
asID: 16509
IP address blocks: 216.87.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Sep 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2e:5c:48:78:c9:99:9d:4e:83:db:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Sep 13 13:00:41 2025 GMT
Not After : Dec 12 14:00:41 2025 GMT
Subject: CN=336a633f-41d4-4ad0-b208-70f6315bcd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5e:0f:ca:50:f9:04:e1:8b:fb:76:fe:9d:90:
6d:b0:39:ae:f2:20:1b:eb:d4:9b:17:63:d5:85:12:
07:85:d9:2c:94:58:8f:5a:5e:4d:48:58:34:23:46:
80:48:ac:c2:84:25:49:a7:60:be:a7:39:ca:74:08:
29:bf:15:e0:d6:d2:16:f4:08:e7:17:f4:98:23:79:
b7:d5:5d:fc:21:72:25:11:13:d2:7e:8c:41:fa:6a:
44:06:e2:5b:47:0a:91:1d:ff:c5:18:4b:21:38:07:
25:05:71:a2:cb:d4:a1:42:74:6d:e0:d1:40:61:70:
91:d3:02:ef:c5:c6:72:15:8d:96:29:50:1f:09:af:
57:94:4b:48:67:31:4f:44:90:d9:9f:75:aa:16:b4:
88:3a:92:4f:52:a1:e4:95:71:15:08:65:f1:65:9e:
50:3d:63:83:a8:90:8b:a0:11:14:ca:e9:f9:5a:07:
37:34:35:8e:35:b3:e4:52:19:19:a1:a7:3d:14:99:
6d:08:be:51:a1:4c:c7:3e:b2:75:69:25:9e:4b:1f:
ec:9e:26:85:6f:03:56:d6:af:bb:f2:81:52:14:62:
23:bf:23:00:85:0d:0f:f8:49:7a:7c:05:01:fb:9a:
cc:45:e3:34:2d:05:ce:35:9b:70:f7:ae:fa:30:f0:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AE:F2:BD:DE:6F:82:28:C7:A8:85:9C:B7:0D:5B:29:E0:F1:9B:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a305ba8b-ba39-3ce5-bae9-b73a43f66bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:da:18:58:1e:16:64:47:b6:18:07:bd:ed:b7:ab:50:f0:c2:
af:15:43:28:f2:88:9a:88:80:01:e3:c4:2f:80:53:95:a9:5f:
75:e6:42:b0:37:df:55:08:c0:f4:73:cf:20:6c:a6:96:de:7f:
e0:b6:26:28:87:e7:ee:4a:c6:1a:85:1f:b9:ba:03:b3:e9:19:
0e:ff:69:4c:f8:4d:64:11:ee:70:d7:f9:21:12:4b:a2:3e:74:
c6:95:f1:ce:df:82:f4:02:03:1b:04:58:f9:fd:e7:5b:a6:22:
53:81:6e:dd:48:86:9d:66:66:58:8a:f3:53:aa:22:db:f4:de:
d7:6a:64:64:d0:71:1c:9a:4e:2b:2d:a1:5e:9a:dc:ba:05:a5:
1f:ab:bd:f8:b9:69:31:88:ff:60:31:22:db:72:a3:4d:53:bc:
ef:0d:bc:25:b3:26:be:24:c8:4c:0d:ce:13:e4:27:2c:eb:e5:
0c:ab:f9:a4:74:94:a3:01:f7:9d:89:12:19:79:c8:bb:e9:4c:
49:b8:03:d5:0d:c4:d5:26:e6:12:c9:7e:ca:3e:fd:6d:d9:22:
c2:ea:a8:73:fb:e5:0b:e0:dd:0d:56:a1:ab:31:8a:11:9d:d8:
b6:a4:99:01:60:5d:03:d3:8e:d7:fb:8a:05:8f:63:86:44:73:
9e:d5:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:54 2025 by rpki-client