Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4e739b36-e954-4c0f-8b61-2dc3523b9613/90f809c4-da3a-32d4-b181-ca2aa17062af.roa
File: 90f809c4-da3a-32d4-b181-ca2aa17062af.roa (raw, json)
Hash identifier: Q+3vSwo0ef9w097tyDYvsSgdV0Y8RYlFQtNR+RWLAQY=
Subject key identifier: 31:09:53:35:A6:0A:30:A9:47:5B:B3:E3:01:1D:CB:8F:E1:B1:E7:4A
Certificate issuer: /CN=4e739b36-e954-4c0f-8b61-2dc3523b9613
Certificate serial: 010D0C9F4328584A7BF40F82724B723895059D00
Authority key identifier: CD:00:FA:01:69:BB:A3:CB:76:37:6A:D9:94:6F:BC:0D:C0:82:EC:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4e739b36-e954-4c0f-8b61-2dc3523b9613.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4e739b36-e954-4c0f-8b61-2dc3523b9613/90f809c4-da3a-32d4-b181-ca2aa17062af.roa
Signing time: Fri 11 Jul 2025 15:16:56 +0000
ROA not before: Fri 11 Jul 2025 15:16:56 +0000
ROA not after: Thu 09 Oct 2025 15:16:56 +0000
asID: 16589
IP address blocks: 172.83.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 14 Jul 2025 22:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:7b:f4:0f:82:72:4b:72:38:95:05:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e739b36-e954-4c0f-8b61-2dc3523b9613
Validity
Not Before: Jul 11 15:16:56 2025 GMT
Not After : Oct 9 15:16:56 2025 GMT
Subject: CN=25ea4964-39b5-49de-b805-adfb4d011ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:bc:4d:86:8e:1b:97:61:dc:fd:3b:82:7b:
61:34:89:0a:68:74:d5:89:45:87:79:ae:f1:99:f0:
5a:3f:3c:56:a8:23:5b:96:68:1e:da:a1:4f:ca:b6:
fc:a1:a8:ec:be:72:3d:3a:ff:0c:2a:bc:db:61:7f:
e6:f2:9b:af:1f:72:9a:f5:29:9d:1a:63:80:66:94:
68:12:b6:da:bd:2c:f1:34:fb:ef:51:ac:17:89:2f:
04:c2:b6:44:c9:fb:10:c2:9c:ad:c6:b7:5c:5a:c2:
ed:d1:3a:f1:69:40:a2:13:31:65:9f:a1:b7:bf:6e:
bc:b7:d8:ac:ba:43:df:a3:63:3d:e1:a6:a8:81:61:
86:d5:42:aa:60:35:4b:f0:b5:18:fb:ef:0a:0a:bf:
9b:5f:13:ca:f3:3c:33:f7:74:8f:55:6d:04:cf:0f:
c6:4b:27:27:76:67:2a:bd:1b:66:b1:06:d8:b1:54:
29:f4:6e:a8:53:52:e7:8d:c7:05:48:cc:cd:0c:e3:
ac:b0:4a:da:d5:f3:65:08:af:fa:29:a7:99:78:eb:
63:b5:7f:d1:f9:74:8b:32:78:9f:e3:d4:5c:07:c3:
df:7f:02:89:f7:76:ba:a0:5b:40:71:69:e9:56:e4:
d1:d3:f2:59:00:b3:23:09:02:1a:79:f4:a8:61:5f:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:09:53:35:A6:0A:30:A9:47:5B:B3:E3:01:1D:CB:8F:E1:B1:E7:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4e739b36-e954-4c0f-8b61-2dc3523b9613/90f809c4-da3a-32d4-b181-ca2aa17062af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4e739b36-e954-4c0f-8b61-2dc3523b9613/4e739b36-e954-4c0f-8b61-2dc3523b9613.crl
X509v3 Authority Key Identifier:
keyid:CD:00:FA:01:69:BB:A3:CB:76:37:6A:D9:94:6F:BC:0D:C0:82:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4e739b36-e954-4c0f-8b61-2dc3523b9613.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:c7:a4:77:5c:d2:df:4d:65:de:91:68:ba:4a:02:32:15:42:
35:e2:c7:25:e6:a8:02:95:54:c7:19:23:52:dd:a7:96:5d:24:
8a:e9:59:7a:74:c7:74:d4:55:5b:c7:f4:90:fd:78:d5:b5:74:
21:59:b8:d7:17:7e:2f:a3:c7:5a:c8:71:3b:6c:ea:51:26:c3:
a1:21:88:50:34:80:59:aa:a8:ca:86:21:50:ae:9f:27:44:8c:
be:97:79:bc:5a:4c:e9:ac:c0:90:84:50:a6:33:44:f5:9d:06:
57:86:11:0f:ea:6a:af:86:7f:fe:7b:6f:ce:e7:04:82:af:2e:
89:b5:4d:04:db:52:9a:28:d0:21:21:4f:9f:d6:b8:eb:eb:24:
4e:a9:30:d8:7e:c8:a7:b1:dd:d5:72:dc:8c:1c:d5:38:ea:80:
47:85:4c:05:2d:9a:ff:ed:9d:d9:53:d7:08:b7:e1:3c:00:85:
20:b2:c2:3e:5f:68:d8:30:e1:cf:40:35:b0:f9:e9:f2:98:2e:
1c:77:2e:21:ef:68:cc:9c:28:63:7a:51:50:bd:70:02:db:98:
f2:23:8d:46:ea:47:6f:7c:19:7e:56:bb:e7:bd:aa:04:ad:5c:
f5:f5:7e:85:2a:6c:9a:ae:12:98:e6:51:7a:2c:fc:1e:85:37:
a5:24:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:18:35 2025 by rpki-client