Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/ff4d97f1-877c-33fc-9c29-2ab4ab011bef.roa
File: ff4d97f1-877c-33fc-9c29-2ab4ab011bef.roa (raw, json)
Hash identifier: DC6n1j6Gn/lIDPCN1/Ts/VS0aQr7TdyK4vXxzZOsg1A=
Subject key identifier: 32:E4:2B:8A:E9:0A:34:8A:24:7F:D6:A0:C2:30:F7:57:8A:7F:41:06
Certificate issuer: /CN=3c5f9827-df17-4814-bfc5-cfd8a8c35557
Certificate serial: 010D0C9F4328584A8721D2E5030C339311900E00
Authority key identifier: 8D:0B:95:C0:49:C5:67:C2:23:E1:DA:C2:C2:41:76:34:D5:08:71:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/ff4d97f1-877c-33fc-9c29-2ab4ab011bef.roa
Signing time: Tue 15 Jul 2025 15:23:02 +0000
ROA not before: Tue 15 Jul 2025 15:23:02 +0000
ROA not after: Mon 13 Oct 2025 15:23:02 +0000
asID: 15731
IP address blocks: 23.141.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 07:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:87:21:d2:e5:03:0c:33:93:11:90:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c5f9827-df17-4814-bfc5-cfd8a8c35557
Validity
Not Before: Jul 15 15:23:02 2025 GMT
Not After : Oct 13 15:23:02 2025 GMT
Subject: CN=8650a04d-d820-4a28-94b3-8045bdf6c742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:08:58:08:a2:ad:76:23:0c:01:b4:51:5d:
20:fe:bd:79:91:30:e6:ff:90:fc:9e:8c:f8:6c:1a:
ff:2e:52:1e:8c:03:2f:69:97:ef:7f:84:e7:7e:d2:
58:37:2f:87:82:77:02:a2:3a:a0:15:76:a7:c0:7d:
ea:81:6e:88:1e:03:8f:28:1a:ae:2a:2b:f5:61:22:
6e:35:0c:e0:1c:f3:06:6f:d2:3c:e7:ee:df:e8:c0:
bf:08:ac:fc:aa:96:05:35:17:39:b9:66:a6:90:a1:
46:ec:1a:5a:3f:c3:e6:b2:30:d1:92:bf:48:05:62:
91:ab:80:ce:de:68:b0:e3:8d:ca:1b:2f:da:d4:2a:
94:cd:1a:54:20:ab:6a:4d:da:86:d8:d4:70:7f:d4:
15:c3:34:02:e3:5e:96:27:9e:69:1d:0d:8d:13:22:
9d:76:a6:a3:24:d3:1b:49:95:03:69:81:a4:a6:4a:
5e:5c:5c:eb:dd:e5:3d:f7:d0:c0:ea:78:e2:13:52:
9a:b2:7a:88:1b:be:cd:29:c7:ee:3e:2f:a0:79:e2:
b1:2b:26:c5:9c:7e:43:0a:c4:4e:24:0e:1b:16:73:
cf:02:a3:55:e9:92:2d:36:09:85:47:1a:d0:a3:41:
cf:ce:29:61:75:a6:0a:63:07:5d:61:16:8b:17:e8:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:2B:8A:E9:0A:34:8A:24:7F:D6:A0:C2:30:F7:57:8A:7F:41:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/ff4d97f1-877c-33fc-9c29-2ab4ab011bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/3c5f9827-df17-4814-bfc5-cfd8a8c35557.crl
X509v3 Authority Key Identifier:
keyid:8D:0B:95:C0:49:C5:67:C2:23:E1:DA:C2:C2:41:76:34:D5:08:71:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:3b:81:95:c4:cb:22:e0:64:87:9a:ef:f2:20:89:12:4c:d0:
98:0f:3b:e3:1a:3e:2e:a3:ce:5d:c7:8f:28:dd:86:fc:c4:69:
e3:ec:21:84:29:2e:53:62:51:eb:40:61:5b:83:42:5e:81:28:
1a:39:44:48:ca:11:4b:06:d3:1c:06:b5:af:5f:f8:7f:bc:87:
34:b8:0d:3d:d0:3d:b6:ab:60:d9:ca:76:96:3e:1b:83:b0:e3:
4e:55:58:65:76:5e:0b:45:3f:e5:3d:5f:44:9c:48:4e:fe:ed:
b5:05:ae:07:ad:91:c3:fe:4a:76:76:60:40:e0:d3:d2:2a:cc:
4f:a8:78:a1:81:c7:b6:2c:df:d4:23:75:a7:ab:3c:15:01:de:
9f:dd:aa:0a:c2:2c:a4:9a:77:a1:f9:ab:84:bf:90:0b:a3:c7:
be:e0:da:0f:c1:94:fa:30:f9:29:dc:d4:8b:a2:79:fa:31:62:
8c:2f:8c:aa:4d:6a:b2:46:01:2f:55:b6:ed:ab:f2:53:ee:c5:
3e:e1:75:ad:34:85:d7:29:37:8d:86:fe:fa:cc:72:a9:59:67:
68:9d:3a:5e:f8:61:cd:5a:ba:92:3e:26:90:eb:6d:fa:f4:02:
e5:00:95:ae:f3:30:fc:fa:61:f8:77:9c:85:06:6d:a2:53:1a:
41:c6:ef:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHIdLlAwwzkxGQDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M1Zjk4MjctZGYxNy00ODE0LWJmYzUtY2ZkOGE4YzM1
NTU3MB4XDTI1MDcxNTE1MjMwMloXDTI1MTAxMzE1MjMwMlowLzEtMCsGA1UEAxMk
ODY1MGEwNGQtZDgyMC00YTI4LTk0YjMtODA0NWJkZjZjNzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9wIWAiirXYjDAG0UV0g/r15kTDm/5D8noz4
bBr/LlIejAMvaZfvf4TnftJYNy+HgncCojqgFXanwH3qgW6IHgOPKBquKiv1YSJu
NQzgHPMGb9I85+7f6MC/CKz8qpYFNRc5uWamkKFG7BpaP8PmsjDRkr9IBWKRq4DO
3miw443KGy/a1CqUzRpUIKtqTdqG2NRwf9QVwzQC416WJ55pHQ2NEyKddqajJNMb
SZUDaYGkpkpeXFzr3eU999DA6njiE1KasnqIG77NKcfuPi+geeKxKybFnH5DCsRO
JA4bFnPPAqNV6ZItNgmFRxrQo0HPzilhdaYKYwddYRaLF+gdrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLkK4rpCjSKJH/WoMIw91eKf0EGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYzVm
OTgyNy1kZjE3LTQ4MTQtYmZjNS1jZmQ4YThjMzU1NTcvZmY0ZDk3ZjEtODc3Yy0z
M2ZjLTljMjktMmFiNGFiMDExYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2M1Zjk4MjctZGYxNy00ODE0LWJm
YzUtY2ZkOGE4YzM1NTU3LzNjNWY5ODI3LWRmMTctNDgxNC1iZmM1LWNmZDhhOGMz
NTU1Ny5jcmwwHwYDVR0jBBgwFoAUjQuVwEnFZ8Ij4drCwkF2NNUIcbkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYzVmOTgyNy1kZjE3LTQ4MTQtYmZjNS1jZmQ4
YThjMzU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE07gZXEyyLgZIea7/IgiRJM0JgPO+MaPi6jzl3HjyjdhvzEaePsIYQp
LlNiUetAYVuDQl6BKBo5REjKEUsG0xwGta9f+H+8hzS4DT3QPbarYNnKdpY+G4Ow
405VWGV2XgtFP+U9X0ScSE7+7bUFrgetkcP+SnZ2YEDg09IqzE+oeKGBx7Ys39Qj
daerPBUB3p/dqgrCLKSad6H5q4S/kAujx77g2g/BlPow+Snc1IuiefoxYowvjKpN
arJGAS9Vtu2r8lPuxT7hda00hdcpN42G/vrMcqlZZ2idOl74Yc1aupI+JpDrbfr0
AuUAla7zMPz6Yfh3nIUGbaJTGkHG7yk=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:23:15 2025 by rpki-client