Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/30636b11-8ba4-3e98-9450-4599dd69f72e.roa
File: 30636b11-8ba4-3e98-9450-4599dd69f72e.roa (raw, json)
Hash identifier: pi37q5Yp5ItjJFVtO/XHQ+KY0Ck9RwIBw6nxItKrp4I=
Subject key identifier: 06:85:5C:95:6E:95:D0:CC:31:54:D9:23:6F:70:42:DC:9E:2B:6C:B7
Certificate issuer: /CN=45718731-be33-4e2d-a8ff-5c444109d0ad
Certificate serial: 010D0C9F4328584B4B34D349027DFF1F9E197680
Authority key identifier: DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/30636b11-8ba4-3e98-9450-4599dd69f72e.roa
Signing time: Tue 23 Sep 2025 20:59:46 +0000
ROA not before: Tue 23 Sep 2025 20:59:46 +0000
ROA not after: Mon 22 Dec 2025 21:59:46 +0000
asID: 14618
IP address blocks: 149.28.0.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 23 Sep 2025 22:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:4b:34:d3:49:02:7d:ff:1f:9e:19:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45718731-be33-4e2d-a8ff-5c444109d0ad
Validity
Not Before: Sep 23 20:59:46 2025 GMT
Not After : Dec 22 21:59:46 2025 GMT
Subject: CN=0a22aa3f-c069-4869-86d6-6b0fa6a2ac88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:b6:f1:9d:e3:60:19:8e:46:d0:dd:c1:b2:
95:d1:d6:f4:41:7b:c7:33:38:cf:2b:f4:98:58:d4:
dc:da:79:d7:1b:d1:23:e5:54:6c:03:4e:ca:9a:49:
f5:37:73:3c:d2:ff:c9:91:94:ee:f4:83:7a:6d:2f:
14:68:6c:bd:ef:77:b1:35:c3:8a:b1:bc:0b:cb:b7:
b0:de:31:34:a9:f7:ae:ad:77:ef:55:32:56:d4:32:
5d:23:fd:e3:8f:40:a7:aa:7d:77:13:04:49:e1:40:
d7:06:f1:1d:b5:6c:cc:23:56:60:d7:49:b8:ae:0c:
ab:66:4c:33:d4:39:6a:1e:4a:e8:15:10:0a:31:fc:
69:94:51:b6:de:d7:22:29:a8:5f:d3:d3:18:a6:c8:
84:ad:9d:1e:74:60:51:37:48:cb:a6:00:68:b4:88:
7f:7f:e9:25:59:a8:c7:48:ce:91:52:80:53:4b:32:
15:de:eb:62:e1:53:4b:92:8f:86:3e:f5:e1:ad:6b:
d3:3d:43:93:c0:be:dc:80:6e:37:9b:57:ce:72:38:
58:06:8c:b6:90:26:cf:8c:38:d7:d0:01:cf:de:4d:
ce:56:c3:c3:a5:a4:c7:37:fc:98:98:e5:9b:5d:d8:
ef:e8:0c:7b:17:a3:48:59:6a:27:97:2a:27:73:09:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:5C:95:6E:95:D0:CC:31:54:D9:23:6F:70:42:DC:9E:2B:6C:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/30636b11-8ba4-3e98-9450-4599dd69f72e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl
X509v3 Authority Key Identifier:
keyid:DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer
sbgp-ipAddrBlock: critical
IPv4:
149.28.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:31:a7:e4:8f:21:b4:c2:ee:e2:7f:c0:27:2e:8a:d5:bd:d8:
5b:2e:95:68:c7:d6:7e:8c:e3:66:47:10:b2:d6:ef:86:c8:0c:
90:f7:3c:b4:30:a7:4d:0a:54:e0:73:46:85:17:f2:19:c7:d1:
d2:ce:28:44:ed:26:13:d9:45:e5:c9:a4:b8:25:ea:2c:93:c3:
c5:5b:fe:56:a3:92:76:78:d8:36:71:c8:a7:82:be:1a:ab:24:
4c:fa:a8:95:7c:0b:2c:dd:3e:54:99:61:c0:c9:01:ab:11:39:
34:f5:3f:5b:60:1d:ee:26:2c:1a:be:e6:19:8c:86:a2:3b:75:
82:7f:31:14:0b:dc:ec:62:6e:41:2a:a6:bb:a5:49:ce:b2:d3:
49:7a:07:fe:ee:ad:1a:65:24:43:24:3d:0f:0c:ac:e8:fe:3d:
a4:36:4b:f3:7c:79:37:b6:70:88:4b:2b:95:c4:60:5d:39:4d:
bd:f9:90:e4:85:77:f2:21:ad:77:7a:81:7d:cf:91:d3:cc:ef:
39:b7:0b:9a:87:32:f7:04:4c:0b:96:a1:77:87:35:88:fb:1d:
a9:b1:14:72:46:55:53:1a:76:e8:f6:7d:c8:e1:27:3c:d9:f2:
6f:f7:d6:24:20:32:dc:95:36:b5:c1:0d:7f:b9:88:8e:f0:b8:
cb:5a:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:32:45 2025 by rpki-client