Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/a06671aa-8a42-3af5-a494-1a0571d48769.roa
File: a06671aa-8a42-3af5-a494-1a0571d48769.roa (raw, json)
Hash identifier: /HRPpXuUHhIlVDz/fN5JshQYZNI/jZ4yH/ERRKdhy+Q=
Subject key identifier: C1:5E:85:10:0D:71:75:A4:D2:44:7D:AA:E0:A5:C7:57:64:31:9F:06
Certificate issuer: /CN=de519df3-4594-450e-ac51-a7e085408381
Certificate serial: 010D0C9F4328584A7C88A72CB74744D0023B0480
Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/a06671aa-8a42-3af5-a494-1a0571d48769.roa
Signing time: Fri 11 Jul 2025 20:16:20 +0000
ROA not before: Fri 11 Jul 2025 20:16:20 +0000
ROA not after: Thu 09 Oct 2025 20:16:20 +0000
asID: 16589
IP address blocks: 209.205.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 14 Jul 2025 22:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:7c:88:a7:2c:b7:47:44:d0:02:3b:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de519df3-4594-450e-ac51-a7e085408381
Validity
Not Before: Jul 11 20:16:20 2025 GMT
Not After : Oct 9 20:16:20 2025 GMT
Subject: CN=2fc0346c-8782-4c4a-976b-d7a33d88e4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:ee:c8:18:09:9c:21:b5:c7:ec:ae:60:33:
7b:f9:37:6c:77:51:1c:0e:c4:0a:11:0d:cd:7e:8b:
59:9d:b8:ab:c3:c2:6c:4c:9a:32:ea:fc:38:05:c2:
d0:7a:1d:f4:28:94:c5:0d:4c:b5:68:ab:de:df:9e:
f7:7d:11:b2:9a:ef:b5:54:5a:a4:b8:5f:9a:a3:dc:
ac:81:13:31:51:dc:4b:6e:e5:f2:ef:02:c2:45:9c:
18:b9:8a:88:27:1b:ca:a8:71:72:62:fe:2f:4d:86:
1d:76:47:07:02:43:1f:23:d6:2d:77:64:40:e4:3d:
c9:34:51:a3:6d:08:6c:49:fc:85:ef:d6:26:37:3b:
e4:15:a1:5e:55:a8:5c:e2:c3:a3:f1:01:46:b5:a7:
eb:8c:3d:f8:ed:2d:df:cf:da:8e:ed:0f:32:65:eb:
0d:9c:3e:1c:3f:1b:a2:b4:52:8a:72:a7:a3:62:5f:
e2:f5:7a:58:32:43:e5:80:fd:9a:94:e9:b0:fa:95:
53:c4:2b:8c:ad:d8:58:89:d5:16:bd:61:6c:0d:5c:
28:62:e0:c2:25:43:3d:c4:88:28:3c:a3:6c:b5:80:
46:c6:18:63:a2:6e:08:ce:f8:ad:6d:d4:07:fe:43:
cb:b9:3d:af:ef:3e:e0:7d:72:cf:62:66:f2:21:56:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:85:10:0D:71:75:A4:D2:44:7D:AA:E0:A5:C7:57:64:31:9F:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/a06671aa-8a42-3af5-a494-1a0571d48769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl
X509v3 Authority Key Identifier:
keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer
sbgp-ipAddrBlock: critical
IPv4:
209.205.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:06:d8:ae:e7:d3:c5:01:df:73:9a:c9:ad:2a:54:64:3c:50:
df:93:85:16:ab:27:af:23:bb:56:4c:a5:0b:bd:1b:ee:b2:7e:
d8:2c:49:41:05:f2:2b:20:ca:e7:d4:99:8e:80:73:37:8e:9a:
10:43:36:82:3d:0f:27:b1:a7:f9:b3:a5:73:4e:2a:be:65:42:
67:3f:c5:4e:7a:bc:51:54:12:88:ce:64:d0:52:dd:04:7a:93:
ec:93:6f:e5:46:4a:d9:c1:19:b5:90:18:f2:de:a1:dc:94:10:
e0:da:38:3b:77:f3:ee:55:f6:94:2a:ea:d0:51:31:91:4d:6d:
29:2b:78:6a:db:c7:a7:77:35:d7:55:0d:31:e6:74:b1:d9:31:
b2:9d:8f:53:5b:70:49:19:fb:32:ae:cd:19:3a:bc:92:56:f3:
9d:73:02:b2:d1:e9:d6:d8:dc:6b:92:14:90:aa:4f:7e:d8:e9:
45:2e:8e:41:99:c7:f5:ab:c8:4a:cf:4f:ae:ee:67:8b:7c:73:
d4:ea:7e:57:05:4e:fe:b5:cd:f7:ed:39:00:6b:d6:89:b5:f7:
ef:69:24:00:72:fb:50:a6:e4:8b:e8:64:d8:f8:a9:4e:eb:01:
62:3a:ce:d0:c3:27:50:87:25:0e:c4:3a:87:45:e4:3b:2c:62:
f4:4b:67:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp8iKcst0dE0AI7BIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4
MzgxMB4XDTI1MDcxMTIwMTYyMFoXDTI1MTAwOTIwMTYyMFowLzEtMCsGA1UEAxMk
MmZjMDM0NmMtODc4Mi00YzRhLTk3NmItZDdhMzNkODhlNGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcHuyBgJnCG1x+yuYDN7+Tdsd1EcDsQKEQ3N
fotZnbirw8JsTJoy6vw4BcLQeh30KJTFDUy1aKve3573fRGymu+1VFqkuF+ao9ys
gRMxUdxLbuXy7wLCRZwYuYqIJxvKqHFyYv4vTYYddkcHAkMfI9Ytd2RA5D3JNFGj
bQhsSfyF79YmNzvkFaFeVahc4sOj8QFGtafrjD347S3fz9qO7Q8yZesNnD4cPxui
tFKKcqejYl/i9XpYMkPlgP2alOmw+pVTxCuMrdhYidUWvWFsDVwoYuDCJUM9xIgo
PKNstYBGxhhjom4IzvitbdQH/kPLuT2v7z7gfXLPYmbyIVb0cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFehRANcXWk0kR9quClx1dkMZ8GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUx
OWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvYTA2NjcxYWEtOGE0Mi0z
YWY1LWE0OTQtMWEwNTcxZDQ4NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU1MTlkZjMtNDU5NC00NTBlLWFj
NTEtYTdlMDg1NDA4MzgxL2RlNTE5ZGYzLTQ1OTQtNDUwZS1hYzUxLWE3ZTA4NTQw
ODM4MS5jcmwwHwYDVR0jBBgwFoAUWZ5KRx4ypygRBMpIFYzUGC2wuRwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2Uw
ODU0MDgzODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0c3oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUG2K7n08UB33Oaya0qVGQ8UN+ThRarJ68ju1ZMpQu9G+6yftgsSUEF
8isgyufUmY6AczeOmhBDNoI9Dyexp/mzpXNOKr5lQmc/xU56vFFUEojOZNBS3QR6
k+yTb+VGStnBGbWQGPLeodyUEODaODt38+5V9pQq6tBRMZFNbSkreGrbx6d3NddV
DTHmdLHZMbKdj1NbcEkZ+zKuzRk6vJJW851zArLR6dbY3GuSFJCqT37Y6UUujkGZ
x/WryErPT67uZ4t8c9TqflcFTv61zfftOQBr1om19+9pJABy+1Cm5IvoZNj4qU7r
AWI6ztDDJ1CHJQ7EOodF5DssYvRLZ4k=
-----END CERTIFICATE-----
Generated at Fri Jul 25 06:49:27 2025 by rpki-client