Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/de9c8308-f59e-3fe7-b601-b3a3be689eee.roa
File: de9c8308-f59e-3fe7-b601-b3a3be689eee.roa (raw, json)
Hash identifier: D+ozIJwvVdWrIPqdRI7yDe4I5fmLif5zKdAK0LqroZw=
Subject key identifier: 9A:8F:02:50:55:F5:D4:49:EF:B6:E6:34:5C:84:63:B3:91:EB:5F:C5
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584A2E25EB8C3A415E6E29D1AF00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/de9c8308-f59e-3fe7-b601-b3a3be689eee.roa
Signing time: Fri 13 Jun 2025 18:24:21 +0000
ROA not before: Fri 13 Jun 2025 18:24:21 +0000
ROA not after: Thu 11 Sep 2025 18:24:21 +0000
asID: 6621
IP address blocks: 184.52.64.0/22 maxlen: 22
184.52.79.0/24 maxlen: 24
184.52.112.0/22 maxlen: 22
184.52.116.0/22 maxlen: 22
184.52.120.0/22 maxlen: 22
184.52.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 13:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:2e:25:eb:8c:3a:41:5e:6e:29:d1:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jun 13 18:24:21 2025 GMT
Not After : Sep 11 18:24:21 2025 GMT
Subject: CN=688de544-6f86-4632-9694-9416ebdf2647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:e0:2b:e9:75:41:7d:7d:4b:91:39:09:b5:
4f:79:bd:34:7c:da:43:aa:0c:2b:c2:5f:cf:ae:e5:
42:e3:3c:fd:ce:83:7e:3e:94:ce:87:26:a3:b7:75:
73:a7:1f:94:a6:10:e4:04:ab:75:4b:60:86:19:a9:
a1:ed:3d:65:1e:41:48:9a:74:2f:77:69:f5:56:2a:
97:4a:ab:91:98:cf:6a:31:bd:c1:51:d4:9a:3f:f8:
21:74:f4:b9:10:c7:a2:83:1a:47:ea:6c:49:89:fa:
58:39:07:d0:99:f6:6e:49:b9:d0:7a:ba:cf:f9:57:
5b:b9:fe:87:4b:04:1c:25:88:23:95:59:eb:fd:1c:
be:de:00:da:dc:fe:62:ae:04:80:36:89:1d:4d:15:
32:20:fa:50:17:ee:95:62:27:45:3b:e1:a2:0d:ae:
0f:73:42:07:f0:3a:16:23:5b:3d:f9:6f:f4:91:73:
5c:53:7e:38:76:f1:f2:fb:62:29:97:ad:60:ef:73:
2b:e3:30:ac:52:c3:06:b0:65:5d:0d:e7:1e:82:74:
ec:60:5e:69:5e:c9:d9:1c:56:b9:32:b5:6b:0e:3d:
2a:4f:30:00:93:eb:55:d8:36:5e:c6:f1:62:70:e2:
01:f6:7b:86:dc:9d:d9:d8:d9:78:d8:db:64:92:6c:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8F:02:50:55:F5:D4:49:EF:B6:E6:34:5C:84:63:B3:91:EB:5F:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/de9c8308-f59e-3fe7-b601-b3a3be689eee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
184.52.64.0/22
184.52.79.0/24
184.52.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:39:e3:c4:98:84:5e:47:94:98:62:1c:e0:c2:ad:d5:c6:53:
fb:cf:77:25:c6:eb:f7:db:09:d5:77:15:27:d8:b9:73:a7:48:
f3:e2:54:f3:fc:cc:a5:16:43:47:19:b8:28:88:da:d6:24:ad:
a1:d0:a8:b8:29:60:fe:09:29:da:8e:cc:b8:30:f8:0e:97:08:
e5:4a:07:bc:f1:d5:e0:c6:9b:11:dc:ab:4d:09:1e:eb:27:51:
73:a6:42:5f:d8:0b:15:b4:2f:a7:06:b9:ec:7f:51:a8:a8:d9:
70:64:14:b0:8c:cb:0c:96:10:2e:dd:11:d3:af:a8:85:a9:8b:
a0:95:9a:6a:9d:bc:49:9e:a6:0d:63:c8:f8:d9:eb:88:05:ca:
d4:d4:35:e3:56:b1:ad:45:16:fa:15:52:22:c2:24:83:a3:56:
9e:ec:84:69:d5:34:49:68:69:f5:d3:97:70:59:b9:c1:9b:c4:
82:17:12:8a:ef:6b:44:69:25:41:54:ed:86:d3:e2:50:03:c2:
a0:0c:b1:26:df:81:db:9d:f9:ae:18:44:29:55:a3:39:c0:52:
f8:c4:1e:ba:47:3a:5d:c1:b3:75:27:7e:33:ea:b3:9e:9e:c3:
57:b2:87:91:88:a8:e2:f4:ec:b6:9a:ea:b9:4c:2d:12:c4:66:
02:ec:6d:7f
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEouJeuMOkFebinRrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDYxMzE4MjQyMVoXDTI1MDkxMTE4MjQyMVowLzEtMCsGA1UEAxMk
Njg4ZGU1NDQtNmY4Ni00NjMyLTk2OTQtOTQxNmViZGYyNjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3XgK+l1QX19S5E5CbVPeb00fNpDqgwrwl/P
ruVC4zz9zoN+PpTOhyajt3Vzpx+UphDkBKt1S2CGGamh7T1lHkFImnQvd2n1ViqX
SquRmM9qMb3BUdSaP/ghdPS5EMeigxpH6mxJifpYOQfQmfZuSbnQerrP+Vdbuf6H
SwQcJYgjlVnr/Ry+3gDa3P5irgSANokdTRUyIPpQF+6VYidFO+GiDa4Pc0IH8DoW
I1s9+W/0kXNcU344dvHy+2Ipl61g73Mr4zCsUsMGsGVdDecegnTsYF5pXsnZHFa5
MrVrDj0qTzAAk+tV2DZexvFicOIB9nuG3J3Z2Nl42Ntkkmy9owIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJqPAlBV9dRJ77bmNFyEY7OR61/FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZGU5YzgzMDgtZjU5ZS0z
ZmU3LWI2MDEtYjNhM2JlNjg5ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuDRAAwQA
uDRPAwQEuDRwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAg548SYhF5HlJhiHODCrdXGU/vPdyXG6/fbCdV3
FSfYuXOnSPPiVPP8zKUWQ0cZuCiI2tYkraHQqLgpYP4JKdqOzLgw+A6XCOVKB7zx
1eDGmxHcq00JHusnUXOmQl/YCxW0L6cGuex/Uaio2XBkFLCMywyWEC7dEdOvqIWp
i6CVmmqdvEmepg1jyPjZ64gFytTUNeNWsa1FFvoVUiLCJIOjVp7shGnVNEloafXT
l3BZucGbxIIXEorva0RpJUFU7YbT4lADwqAMsSbfgdud+a4YRClVoznAUvjEHrpH
Ol3Bs3UnfjPqs56ew1eyh5GIqOL07Laa6rlMLRLEZgLsbX8=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:44:07 2025 by rpki-client