Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
File: e6d863c2-4fff-33de-9e33-517b9be1466b.roa (raw, json)
Hash identifier: i8feloVCCINRc1hx6XRqC62dGAXdORwvX5jmjuXOC9Q=
Subject key identifier: 5E:8A:C0:82:35:C2:14:CF:0E:4E:0F:21:9C:46:BA:DD:AD:57:50:27
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285849D42FB1D7B5FA460DE0A8E640
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
Signing time: Mon 12 May 2025 13:01:00 +0000
ROA not before: Mon 12 May 2025 13:01:00 +0000
ROA not after: Sun 10 Aug 2025 13:01:00 +0000
asID: 3477
IP address blocks: 140.172.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 14:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d4:2f:b1:d7:b5:fa:46:0d:e0:a8:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: May 12 13:01:00 2025 GMT
Not After : Aug 10 13:01:00 2025 GMT
Subject: CN=f0b219d0-99e8-4e84-b752-05b7456e7aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:0d:10:f3:bb:b2:47:82:dd:b9:31:94:03:
a9:4e:8c:f1:7f:ce:3e:48:75:03:b0:fc:92:8c:c9:
36:93:be:6b:12:dc:31:bb:43:48:cb:21:04:0d:ac:
5a:2e:02:46:0e:89:22:28:af:aa:7c:b5:fa:5f:4a:
5a:32:49:22:d4:3c:2b:5d:97:ad:79:bf:c7:c5:8e:
c9:5b:a4:c5:c8:78:e3:62:18:d7:e7:42:b5:f5:17:
e1:cc:7f:19:7e:f5:7d:8b:d4:0f:81:0e:89:46:85:
da:30:df:a5:9e:b1:80:79:c7:6a:93:ba:1d:21:60:
48:e1:f7:1f:d3:97:bf:03:f5:f7:5f:18:9f:b7:43:
0c:79:0a:2e:ec:cd:37:67:38:74:7e:04:2c:64:1f:
74:9f:78:04:6e:f1:1b:e7:90:61:82:06:64:2a:e6:
72:9d:60:d5:46:ef:36:09:74:66:23:bc:a1:8a:c5:
dc:ea:a2:98:26:ee:42:b6:92:7e:59:20:e0:1c:52:
b2:61:db:b2:38:01:49:7c:9a:83:d5:9a:38:fe:c0:
55:f2:cf:14:d9:b0:1f:22:1e:2d:69:92:b0:5e:0d:
2d:81:11:51:02:a6:5f:2d:80:89:fc:29:6f:31:f4:
d0:b4:1a:7e:dc:90:03:4e:95:10:e6:33:96:87:ab:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8A:C0:82:35:C2:14:CF:0E:4E:0F:21:9C:46:BA:DD:AD:57:50:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
140.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ba:71:55:91:a3:25:b1:0d:73:e0:b1:7c:45:e8:a7:a9:78:
77:ec:d4:85:4b:b3:0c:c4:df:74:da:dd:35:76:00:6d:89:82:
b3:15:08:30:9e:bc:c8:88:07:df:de:1a:eb:ae:4d:8a:f1:02:
3a:98:db:67:c2:28:81:28:24:2d:e1:31:c1:46:75:1f:50:22:
2c:d7:08:01:89:af:b7:73:eb:4e:81:16:98:7a:1c:36:ee:84:
e0:ed:23:bb:76:32:c3:73:fb:ee:2f:e9:93:d5:56:7b:fd:84:
1b:d2:a0:49:b8:48:97:77:f1:56:bd:f6:b5:3b:c4:44:a5:a5:
18:23:0a:b9:f9:69:25:c4:0e:a2:a0:11:dc:f9:7a:df:6b:37:
1e:36:0f:11:a1:02:20:96:8c:a3:b4:fe:96:1f:30:7b:18:b1:
98:a6:3c:b9:f4:bb:49:13:74:4f:b7:76:ff:cd:4f:b3:e1:4f:
26:db:bc:88:25:84:67:ce:c3:cb:72:7d:d5:3f:b7:d3:85:09:
bd:4c:91:23:f4:6e:23:0e:35:a9:0c:84:de:ee:cc:30:15:d6:
f6:5e:75:97:31:a9:df:06:ba:ef:72:d4:46:52:df:5b:19:00:
32:f2:eb:00:00:ec:3b:a1:4a:02:90:ea:b3:90:4f:87:75:05:
f5:22:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:43:18 2025 by rpki-client