Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa
File: b923e55a-93cc-35be-bb9a-bf18235d65a9.roa (raw, json)
Hash identifier: Y5TcMbCr6hali/I9+uR+tWL1klzln08V9bLvunzpNZk=
Subject key identifier: 18:CF:CE:DF:B0:2C:C9:46:C6:9A:77:19:26:D1:0E:57:C8:07:76:14
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584B2E5C4861FD4142918E685280
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa
Signing time: Sat 13 Sep 2025 13:00:41 +0000
ROA not before: Sat 13 Sep 2025 13:00:41 +0000
ROA not after: Fri 12 Dec 2025 14:00:41 +0000
asID: 14618
IP address blocks: 216.87.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Sep 2025 20:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2e:5c:48:61:fd:41:42:91:8e:68:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Sep 13 13:00:41 2025 GMT
Not After : Dec 12 14:00:41 2025 GMT
Subject: CN=eedb5487-e480-43a2-8201-01a3d416c281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:af:b7:00:30:3d:cf:6a:69:e4:72:88:f3:
16:6f:e7:26:a1:b3:90:32:5b:53:85:b0:05:d7:f2:
c0:89:68:0d:61:b6:f8:e9:5e:c7:1b:be:03:9f:f7:
62:ad:47:13:b4:0e:e3:00:48:c7:30:b4:71:42:c7:
13:19:b9:48:24:7d:2e:2c:d3:2f:45:5b:14:d2:6d:
eb:19:c9:4a:05:20:e4:a1:ad:13:a0:68:88:12:3d:
3f:87:0b:6c:6a:fd:bf:c2:a5:f7:92:13:95:e4:de:
80:b9:65:2e:e3:bd:3f:a3:d0:75:e5:91:7f:7c:45:
12:7b:aa:36:b3:0f:6e:c5:a1:99:25:cd:52:4c:a6:
f5:39:85:92:9a:ac:7a:31:0d:01:53:41:c1:c5:9b:
f4:13:35:fa:c1:18:11:58:65:01:aa:e5:82:71:8d:
14:70:dc:69:b5:e3:31:07:8b:6b:3f:16:d8:fb:52:
d5:9e:6d:42:1e:ae:58:1d:42:4f:9b:13:f2:cd:11:
c3:66:db:7c:81:c3:92:14:ea:52:81:a1:e6:74:ed:
01:e6:cc:fc:f5:05:7c:7b:f6:30:d0:4d:46:ec:8e:
9c:09:a3:85:59:bb:cb:5a:f6:da:98:34:00:05:f9:
5d:bc:ab:ea:22:7b:43:c7:4d:77:66:c0:35:1b:24:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:CE:DF:B0:2C:C9:46:C6:9A:77:19:26:D1:0E:57:C8:07:76:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/b923e55a-93cc-35be-bb9a-bf18235d65a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:61:1a:02:fd:55:a4:d2:60:7c:cc:db:35:fb:43:4a:56:41:
0c:e6:a9:e5:b4:8d:5d:75:b3:c8:4b:cc:74:1a:06:23:98:a8:
44:2a:d0:69:95:5b:1f:ea:43:a0:73:5f:85:c6:9c:ef:74:58:
8d:c1:f7:a0:59:29:11:ba:9f:28:b1:a2:a4:a8:ab:68:d5:20:
6a:15:59:90:73:59:43:03:30:69:33:93:4d:48:06:d6:87:27:
d0:de:8f:76:68:c6:76:38:c8:02:c0:3d:e4:0c:34:60:79:14:
96:9d:49:56:f8:57:92:d5:60:18:45:4e:4f:7c:6c:b8:b5:a1:
e4:0a:90:69:14:3f:8e:2e:15:c9:1b:b2:f0:d0:93:fa:a2:f3:
6e:be:ae:bf:d3:a5:6e:0c:93:89:49:4c:f4:64:d4:20:a0:49:
4f:87:ec:89:44:60:7f:f7:0b:a5:cd:42:ac:0b:c2:40:f4:31:
57:d2:cd:d5:67:6f:a6:f9:19:c0:ef:ed:87:fe:43:ce:b9:50:
65:bd:47:26:67:32:8a:d8:8d:cb:9a:b7:49:bb:4e:e8:0d:d8:
76:b6:3b:ef:da:84:6c:a3:71:37:40:36:36:7d:1b:6c:d5:e0:
48:90:bf:6e:bc:66:94:d4:2b:85:c0:18:55:84:53:18:60:b9:
79:f7:ce:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:39 2025 by rpki-client