Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa
File: f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa (raw, json)
Hash identifier: +DI23ARbQ1B9lwXRjrwOGwivXcBC8ZhKtUn+RRLUKUU=
Subject key identifier: B9:6A:A9:83:E5:09:1B:28:26:2D:E6:5F:C2:97:A2:5C:76:61:C0:90
Certificate issuer: /CN=2c03f09b-6404-4b04-b989-df1493d00cbb
Certificate serial: 010D0C9F4328584B0A1163332E4A4EF419A42F00
Authority key identifier: 34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa
Signing time: Sun 31 Aug 2025 13:00:42 +0000
ROA not before: Sun 31 Aug 2025 13:00:42 +0000
ROA not after: Sat 29 Nov 2025 14:00:42 +0000
asID: 16509
IP address blocks: 192.230.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Sep 2025 19:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0a:11:63:33:2e:4a:4e:f4:19:a4:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c03f09b-6404-4b04-b989-df1493d00cbb
Validity
Not Before: Aug 31 13:00:42 2025 GMT
Not After : Nov 29 14:00:42 2025 GMT
Subject: CN=581a1ba8-5502-4a69-a3e6-1d7d7ffc2fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:56:73:a0:d9:76:8d:fd:ea:1e:4f:59:a9:
dd:39:e5:8f:6d:09:cc:ba:1a:30:87:83:c4:85:9c:
60:61:d2:c4:97:35:da:e0:18:f9:21:30:91:4d:08:
96:76:62:b5:c9:e7:3f:29:60:d1:4e:bd:dd:30:63:
88:91:1b:e2:5e:56:d1:3f:f8:79:a6:dd:5c:8a:28:
7a:cb:ff:1e:e6:23:9d:c5:82:28:6e:34:2a:67:6d:
bf:f4:c5:1b:a5:19:a1:c2:6f:89:4a:f7:6c:35:34:
b2:fc:ed:c6:7e:6e:17:8b:47:da:ef:45:f8:9a:d6:
25:14:b6:9b:ee:18:f6:d0:5d:4e:e5:3f:c8:57:32:
52:d0:74:dd:a8:ea:29:29:17:a7:d5:92:09:bd:9b:
9f:9b:b0:ca:d6:05:d6:d5:c0:52:a6:ca:f3:e1:9a:
1e:7d:42:a7:4b:6a:6f:2e:53:68:42:f4:ae:63:ef:
85:3f:c2:bd:9b:87:ec:f8:29:7f:fc:d6:64:90:c3:
1e:c6:ee:b1:42:54:44:a3:af:4f:f7:22:13:b8:e3:
af:31:17:60:e3:ea:58:a1:74:21:aa:f2:47:ae:d2:
d1:9b:15:31:f8:0b:c5:b2:48:64:87:5a:0b:be:07:
9b:b0:f6:40:8e:ac:32:7c:56:41:14:27:ba:f9:77:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:A9:83:E5:09:1B:28:26:2D:E6:5F:C2:97:A2:5C:76:61:C0:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl
X509v3 Authority Key Identifier:
keyid:34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.230.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a6:4c:4f:4e:19:f4:07:99:ad:c9:14:3c:c2:54:01:48:06:
78:99:82:f6:e7:96:f6:28:16:d0:f3:4c:0e:f8:ef:f0:06:be:
7a:0d:16:c6:92:83:fb:1c:d5:16:f8:01:74:9a:89:3d:2b:90:
2c:0f:bc:0d:1a:fe:18:06:bc:b9:51:d9:cb:4f:c7:b7:fb:ac:
a8:83:76:87:1d:76:32:bf:08:f5:17:aa:cf:12:0c:ea:5b:d2:
e6:82:fb:ed:7d:d6:9e:99:c9:50:25:b1:29:f3:f1:f6:c0:2b:
92:9e:e5:1a:99:58:5f:e1:6c:66:0e:7a:dc:da:e1:9b:08:64:
dc:1f:f4:c2:86:6d:b1:15:4c:b8:41:39:36:5c:4a:6a:11:e8:
be:53:0f:fb:94:fe:51:e8:ab:e6:3f:f4:03:a9:db:07:d9:00:
98:b4:26:37:82:00:a2:22:ed:4e:4d:d1:e8:40:42:bc:78:75:
24:88:2d:63:57:e1:82:9a:c7:30:be:03:9c:98:4c:09:67:37:
bf:77:2c:f9:ed:af:40:ff:6b:78:79:df:95:ce:f7:e3:be:65:
25:bb:7d:dc:d8:b1:22:0a:46:d2:cd:cf:cb:5f:48:3a:0d:2e:
7d:65:11:26:11:27:87:14:02:16:c6:23:bf:1b:a7:57:2a:71:
b5:e9:63:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:25:47 2025 by rpki-client