Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/aab540b6-650d-36de-a59c-4dc3dc3e7368.roa
File: aab540b6-650d-36de-a59c-4dc3dc3e7368.roa (raw, json)
Hash identifier: 81KvQr1wzRWQAZau7r6BXFm9zKFTggPlX4TWW81brnw=
Subject key identifier: 24:D7:77:CD:59:86:D7:D7:BB:C8:6A:65:2F:2D:54:88:A9:A2:3C:B7
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584A38F3F9A0C74F2E599FA68040
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/aab540b6-650d-36de-a59c-4dc3dc3e7368.roa
Signing time: Tue 17 Jun 2025 15:17:37 +0000
ROA not before: Tue 17 Jun 2025 15:17:37 +0000
ROA not after: Mon 15 Sep 2025 15:17:37 +0000
asID: 1358
IP address blocks: 69.35.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:38:f3:f9:a0:c7:4f:2e:59:9f:a6:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jun 17 15:17:37 2025 GMT
Not After : Sep 15 15:17:37 2025 GMT
Subject: CN=95c2d1a7-f7a9-42f8-9f76-2f948080a90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:e5:2d:73:b9:8d:02:eb:21:30:db:4f:f5:
f4:78:ad:36:0a:29:99:f0:cd:78:93:93:3b:7a:98:
63:54:7f:df:cc:c4:e5:9b:62:5f:af:53:eb:04:78:
e2:ce:01:41:05:28:4e:ce:f3:63:36:92:2a:9a:4f:
96:b2:2d:77:43:96:cd:b6:a5:c7:f3:2c:d8:fa:ee:
45:13:fa:b6:4c:ae:69:3b:ae:ee:d2:1b:55:60:8e:
d9:da:f5:b2:9b:b7:80:4c:1f:34:95:ab:14:7c:54:
13:2d:64:e7:b1:44:e3:b2:e8:94:a2:0d:23:b1:e4:
ea:04:69:a7:9a:db:a1:ae:8b:4e:e0:0e:f9:9e:80:
20:e6:16:75:54:65:c5:b6:a3:35:57:10:5c:aa:ac:
a3:c6:a4:93:92:d8:02:d3:aa:ed:91:b9:5d:cf:f3:
3e:44:bc:1d:18:17:96:61:6a:1f:ee:fc:70:ab:6c:
f3:d7:b8:37:08:0e:ca:1c:5f:cf:3b:89:9b:34:ee:
1f:c8:cc:5a:e7:06:8b:7f:8e:25:1f:3e:fa:74:8b:
f8:0c:92:70:1c:2a:dc:85:3e:3e:c5:ce:14:af:5d:
83:3b:0b:fa:7b:74:3b:0c:95:a8:d5:d0:e6:02:06:
b8:8b:95:e4:52:2d:2a:ec:5e:04:1b:cf:4f:27:ab:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:77:CD:59:86:D7:D7:BB:C8:6A:65:2F:2D:54:88:A9:A2:3C:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/aab540b6-650d-36de-a59c-4dc3dc3e7368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
69.35.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:66:0c:93:59:48:d4:00:74:e4:3a:90:dc:ff:41:5b:25:1b:
bf:58:39:38:70:81:65:10:fa:d1:d9:4a:19:81:fa:68:0e:0f:
a0:31:29:54:ca:4d:4f:d1:66:36:23:57:c0:81:8f:62:27:65:
0b:44:fb:4e:22:8c:3c:ca:ea:57:1f:58:b6:77:71:60:bb:8e:
40:0c:82:24:23:64:c9:8f:6b:bc:c7:17:1c:89:14:9e:2b:82:
39:1d:46:3f:2e:c8:83:2b:f5:51:87:57:e1:cd:e2:c5:a6:d2:
68:f7:01:5b:5f:e6:65:58:a8:f9:78:74:c2:69:81:20:91:0a:
02:2f:5f:f7:f2:07:49:29:b7:5e:cb:81:88:19:e4:dc:a7:af:
c5:c2:30:37:28:96:e8:d0:ee:a0:b5:fe:65:2c:f7:f5:59:0b:
fc:6e:c0:7c:38:b5:1b:4b:56:73:0e:0d:57:1f:74:30:7c:67:
77:b7:64:61:10:12:52:af:b3:98:30:c7:20:9f:ff:fa:3c:02:
0e:6e:d1:81:03:d2:0d:07:5a:f0:95:38:fb:db:61:bc:04:d3:
b0:82:8d:25:79:4b:0a:24:d2:d4:d7:9a:d4:36:70:3b:33:21:
15:84:d6:3e:05:a9:a6:ff:dc:60:44:1f:3f:32:1d:7b:2c:b8:
5c:5e:c1:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo48/mgx08uWZ+mgEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDYxNzE1MTczN1oXDTI1MDkxNTE1MTczN1owLzEtMCsGA1UEAxMk
OTVjMmQxYTctZjdhOS00MmY4LTlmNzYtMmY5NDgwODBhOTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYXlLXO5jQLrITDbT/X0eK02CimZ8M14k5M7
ephjVH/fzMTlm2Jfr1PrBHjizgFBBShOzvNjNpIqmk+Wsi13Q5bNtqXH8yzY+u5F
E/q2TK5pO67u0htVYI7Z2vWym7eATB80lasUfFQTLWTnsUTjsuiUog0jseTqBGmn
mtuhrotO4A75noAg5hZ1VGXFtqM1VxBcqqyjxqSTktgC06rtkbldz/M+RLwdGBeW
YWof7vxwq2zz17g3CA7KHF/PO4mbNO4fyMxa5waLf44lHz76dIv4DJJwHCrchT4+
xc4Ur12DOwv6e3Q7DJWo1dDmAga4i5XkUi0q7F4EG89PJ6ukoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTXd81ZhtfXu8hqZS8tVIipojy3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvYWFiNTQwYjYtNjUwZC0z
NmRlLWE1OWMtNGRjM2RjM2U3MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSMoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5mDJNZSNQAdOQ6kNz/QVslG79YOThwgWUQ+tHZShmB+mgOD6AxKVTK
TU/RZjYjV8CBj2InZQtE+04ijDzK6lcfWLZ3cWC7jkAMgiQjZMmPa7zHFxyJFJ4r
gjkdRj8uyIMr9VGHV+HN4sWm0mj3AVtf5mVYqPl4dMJpgSCRCgIvX/fyB0kpt17L
gYgZ5Nynr8XCMDcolujQ7qC1/mUs9/VZC/xuwHw4tRtLVnMODVcfdDB8Z3e3ZGEQ
ElKvs5gwxyCf//o8Ag5u0YED0g0HWvCVOPvbYbwE07CCjSV5Swok0tTXmtQ2cDsz
IRWE1j4Fqab/3GBEHz8yHXssuFxewWE=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:40:52 2025 by rpki-client