Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa
File: d182af8f-f865-3799-883e-ff117bfac6cd.roa (raw, json)
Hash identifier: hnjdiCM329ErdfZYF0B6AFTOuyB9sMNCW06laI/FnNo=
Subject key identifier: 60:43:70:72:6F:42:81:F8:47:D3:B0:F9:7B:22:A6:1E:F4:44:FC:E5
Certificate issuer: /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial: 010D0C9F4328584A3B7AFC7B404BF4C01856AEC0
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa
Signing time: Wed 18 Jun 2025 13:01:06 +0000
ROA not before: Wed 18 Jun 2025 13:01:06 +0000
ROA not after: Tue 16 Sep 2025 13:01:06 +0000
asID: 46172
IP address blocks: 104.232.11.0/24 maxlen: 24
2602:f899:fe::/47 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jun 2025 05:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:3b:7a:fc:7b:40:4b:f4:c0:18:56:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Validity
Not Before: Jun 18 13:01:06 2025 GMT
Not After : Sep 16 13:01:06 2025 GMT
Subject: CN=a1793b72-3242-4647-979a-16866af9f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:44:10:02:ff:0b:f4:54:48:3b:e1:70:c0:
7d:d9:29:59:34:48:6a:cb:60:9f:f3:de:7c:de:e1:
58:07:e1:25:d4:d0:88:bf:ab:45:24:23:eb:a5:47:
92:ac:c9:87:ac:65:e8:9a:8e:b5:9d:c7:f3:d1:05:
f6:6e:4f:e1:5a:cc:bf:90:06:83:56:fa:3e:16:80:
9e:c3:2c:88:8e:88:2f:2c:7c:68:85:6e:ec:d7:21:
5e:1d:a6:36:0d:5a:d3:c3:e4:82:f2:72:bf:47:2e:
d8:9f:98:d5:39:8e:48:e9:ce:5d:c3:13:4a:11:dc:
c4:48:cc:6d:4f:c8:92:af:c1:f7:d9:60:e3:dd:4f:
e2:4b:93:29:15:cf:32:42:2e:d6:cd:41:cd:88:d1:
10:c5:96:34:bd:a8:75:4b:20:82:0d:83:23:51:63:
27:64:53:02:8d:63:05:2f:62:be:cb:cb:32:50:c6:
19:e3:8c:30:68:bc:0f:28:8c:58:77:d5:b2:7a:e6:
0d:be:53:26:50:49:a9:d4:44:03:13:2f:bc:26:fe:
46:90:b0:0b:23:73:50:c5:6c:89:f1:1f:f0:78:64:
fa:ff:f6:77:16:08:be:e5:32:74:7d:26:b9:f4:4b:
2a:2d:3e:c6:74:53:4a:3c:f8:ea:07:b4:af:e1:fe:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:70:72:6F:42:81:F8:47:D3:B0:F9:7B:22:A6:1E:F4:44:FC:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl
X509v3 Authority Key Identifier:
keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.11.0/24
IPv6:
2602:f899:fe::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:32:43:08:6f:cd:e2:fb:2f:28:22:d3:51:34:6f:29:28:38:
29:60:49:d7:39:0c:cc:1c:09:07:ff:ce:2e:e6:4b:32:ab:3b:
c3:2d:6b:fd:c1:25:ce:5b:2f:e9:97:9c:0e:92:1b:e3:85:64:
ed:2d:b2:2f:d2:66:6a:7e:6f:97:f4:d6:a9:3a:3e:97:b3:1a:
0f:da:0c:3a:d8:45:dc:0b:04:33:0f:58:fe:9e:60:1b:dd:4d:
0d:c5:35:11:a3:b7:b6:c6:71:19:2e:4b:0a:3c:52:65:9c:2b:
02:b9:5f:11:7e:ed:45:db:7c:22:36:af:f6:bd:2d:af:b2:33:
7d:ac:41:9a:08:2b:83:8a:03:1f:52:dd:40:d5:f3:eb:53:55:
bb:f4:a5:51:12:a4:1d:c1:80:23:71:b4:e1:1a:7e:6e:7b:44:
cb:fa:9f:d8:6c:23:16:8f:6d:a6:f6:f5:81:55:d8:e9:5f:2e:
fc:41:b0:bb:1d:bb:63:5e:b5:f1:41:a7:87:fe:ce:57:da:f3:
ee:84:ba:df:9c:bb:a5:14:3a:bf:07:b2:b0:84:0d:2c:29:9f:
da:f6:2c:04:da:4d:c1:0f:9b:89:4b:b9:95:c2:ea:9e:0a:fa:
7b:fd:9a:0f:f7:ee:96:80:7e:f0:2d:32:4e:3e:82:fb:db:a6:
59:fd:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:54:36 2025 by rpki-client