Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/57151ae1-9867-4573-8a66-2e5d1bfda8be/3cedc354-7abc-325c-a13c-7fda25879051.roa
File: 3cedc354-7abc-325c-a13c-7fda25879051.roa (raw, json)
Hash identifier: iBVjjLYg3GFrEc/qE2s8cUo4BclWpCUpPh8pbqfOXBk=
Subject key identifier: 15:B2:44:CC:F9:C2:83:BF:1E:E7:85:BC:AD:58:0E:DC:66:4D:CE:4F
Certificate issuer: /CN=57151ae1-9867-4573-8a66-2e5d1bfda8be
Certificate serial: 010D0C9F4328584A4C3B0D0672EE7D5FD7E49780
Authority key identifier: A2:8C:82:10:87:A8:9B:1B:E1:65:7E:AB:FB:63:EB:B1:37:EC:07:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/57151ae1-9867-4573-8a66-2e5d1bfda8be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/57151ae1-9867-4573-8a66-2e5d1bfda8be/3cedc354-7abc-325c-a13c-7fda25879051.roa
Signing time: Tue 24 Jun 2025 13:01:03 +0000
ROA not before: Tue 24 Jun 2025 13:01:03 +0000
ROA not after: Mon 22 Sep 2025 13:01:03 +0000
asID: 18474
IP address blocks: 192.147.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:4c:3b:0d:06:72:ee:7d:5f:d7:e4:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57151ae1-9867-4573-8a66-2e5d1bfda8be
Validity
Not Before: Jun 24 13:01:03 2025 GMT
Not After : Sep 22 13:01:03 2025 GMT
Subject: CN=f25f76f9-886c-449e-bf1e-e8143b86f391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:6d:3a:76:28:f3:47:53:f3:04:0c:a4:eb:
3d:77:75:6d:f6:91:92:0a:70:93:80:cb:86:b1:ba:
31:0d:fc:df:90:77:31:18:3e:f7:c4:2d:aa:c9:5d:
55:68:2e:04:fb:3a:ec:87:08:63:91:3e:1a:26:58:
2b:f3:1e:0c:e3:88:37:95:ad:e0:9d:07:76:3e:8d:
03:d7:8b:37:5f:af:38:73:9c:f1:5b:64:b4:dd:8a:
be:b7:5e:a6:41:69:f8:fb:f1:d3:81:7b:a5:13:b5:
a9:7d:c2:d9:91:69:7d:14:47:eb:23:5d:d1:43:25:
3a:6d:ed:52:53:e4:28:1c:9c:da:f8:38:9e:d2:ad:
06:8f:06:bc:da:d5:80:c4:88:2a:2d:49:60:46:7a:
17:61:6c:e9:6f:3e:ef:56:45:b5:52:28:9b:91:4a:
b1:3e:ae:81:44:8d:61:46:cb:a9:91:ce:d1:f3:9b:
82:2d:13:e7:f9:25:f1:2f:20:20:05:2f:d6:6f:04:
e0:81:83:0f:51:14:76:31:f6:70:5c:08:1a:14:7d:
6b:19:da:27:1c:a6:de:b4:ef:66:4d:d0:dd:06:f2:
60:a3:73:a9:65:22:af:23:15:d9:c0:14:a0:09:dc:
a4:05:db:4b:91:f0:75:96:b2:85:dd:d6:c3:d8:fd:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:44:CC:F9:C2:83:BF:1E:E7:85:BC:AD:58:0E:DC:66:4D:CE:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/57151ae1-9867-4573-8a66-2e5d1bfda8be/3cedc354-7abc-325c-a13c-7fda25879051.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/57151ae1-9867-4573-8a66-2e5d1bfda8be/57151ae1-9867-4573-8a66-2e5d1bfda8be.crl
X509v3 Authority Key Identifier:
keyid:A2:8C:82:10:87:A8:9B:1B:E1:65:7E:AB:FB:63:EB:B1:37:EC:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/57151ae1-9867-4573-8a66-2e5d1bfda8be.cer
sbgp-ipAddrBlock: critical
IPv4:
192.147.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:29:80:87:7e:01:13:b5:c0:7e:c3:8e:b9:60:8c:a2:71:b6:
7d:72:1a:68:aa:37:f9:c7:05:91:5c:85:2f:dd:4f:39:96:20:
a0:e9:fa:3b:13:4b:24:9d:be:82:11:51:ab:d6:03:55:b6:1c:
13:8c:b6:58:ad:7d:07:71:08:27:d0:52:a9:ab:1e:a6:f2:02:
04:f2:62:5a:51:81:dd:84:41:69:f5:06:e4:fd:cc:0c:39:80:
92:77:72:46:3b:b2:46:f7:93:ff:33:f5:2e:0a:18:3c:f4:23:
e6:6d:57:1b:2b:4a:44:b2:c7:dc:87:f7:b6:3c:ce:b3:ad:a6:
5f:54:4b:20:94:7d:d8:76:3c:c9:20:45:42:a8:dc:c4:c1:4f:
4c:9c:14:10:23:cd:bd:12:1f:9c:09:07:1c:58:76:a8:c3:20:
80:be:cf:de:db:66:5a:af:8d:c5:04:ba:7f:ae:b2:19:24:2e:
25:6f:11:b7:e0:77:eb:26:93:8a:3e:20:d1:09:75:23:9d:11:
8a:ce:31:64:43:86:91:7d:03:fc:fb:7c:69:5d:09:1c:d4:77:
39:47:8d:6b:89:19:a3:78:9e:b9:b6:35:5d:8d:1e:f8:82:78:
0c:6e:e2:70:3f:b7:6a:af:1f:e9:af:b8:8c:c5:e1:03:be:4c:
af:92:d6:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOw0Gcu59X9fkl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTcxNTFhZTEtOTg2Ny00NTczLThhNjYtMmU1ZDFiZmRh
OGJlMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
ZjI1Zjc2ZjktODg2Yy00NDllLWJmMWUtZTgxNDNiODZmMzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02FtOnYo80dT8wQMpOs9d3Vt9pGSCnCTgMuG
sboxDfzfkHcxGD73xC2qyV1VaC4E+zrshwhjkT4aJlgr8x4M44g3la3gnQd2Po0D
14s3X684c5zxW2S03Yq+t16mQWn4+/HTgXulE7WpfcLZkWl9FEfrI13RQyU6be1S
U+QoHJza+Die0q0Gjwa82tWAxIgqLUlgRnoXYWzpbz7vVkW1UiibkUqxPq6BRI1h
Rsupkc7R85uCLRPn+SXxLyAgBS/WbwTggYMPURR2MfZwXAgaFH1rGdonHKbetO9m
TdDdBvJgo3OpZSKvIxXZwBSgCdykBdtLkfB1lrKF3dbD2P1RJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWyRMz5woO/HueFvK1YDtxmTc5PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NzE1
MWFlMS05ODY3LTQ1NzMtOGE2Ni0yZTVkMWJmZGE4YmUvM2NlZGMzNTQtN2FiYy0z
MjVjLWExM2MtN2ZkYTI1ODc5MDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTcxNTFhZTEtOTg2Ny00NTczLThh
NjYtMmU1ZDFiZmRhOGJlLzU3MTUxYWUxLTk4NjctNDU3My04YTY2LTJlNWQxYmZk
YThiZS5jcmwwHwYDVR0jBBgwFoAUooyCEIeomxvhZX6r+2PrsTfsB6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NzE1MWFlMS05ODY3LTQ1NzMtOGE2Ni0yZTVk
MWJmZGE4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJMZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwpgId+ARO1wH7DjrlgjKJxtn1yGmiqN/nHBZFchS/dTzmWIKDp+jsT
SySdvoIRUavWA1W2HBOMtlitfQdxCCfQUqmrHqbyAgTyYlpRgd2EQWn1BuT9zAw5
gJJ3ckY7skb3k/8z9S4KGDz0I+ZtVxsrSkSyx9yH97Y8zrOtpl9USyCUfdh2PMkg
RUKo3MTBT0ycFBAjzb0SH5wJBxxYdqjDIIC+z97bZlqvjcUEun+ushkkLiVvEbfg
d+smk4o+INEJdSOdEYrOMWRDhpF9A/z7fGldCRzUdzlHjWuJGaN4nrm2NV2NHviC
eAxu4nA/t2qvH+mvuIzF4QO+TK+S1ss=
-----END CERTIFICATE-----
Generated at Thu Jul 10 22:18:37 2025 by rpki-client