Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0f998b3c-ca29-3130-a1f2-160a8ceb0422.roa
File: 0f998b3c-ca29-3130-a1f2-160a8ceb0422.roa (raw, json)
Hash identifier: k819Vcd/+qpezasRNivr+JcsTvLfidWfSSsNEcCQrZk=
Subject key identifier: 55:69:B4:AE:F6:7E:C2:53:C8:87:23:C4:2B:7F:C2:11:1D:AE:BB:14
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F43285849EB7052537EFFCFC4D88D1E00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0f998b3c-ca29-3130-a1f2-160a8ceb0422.roa
Signing time: Tue 20 May 2025 20:55:06 +0000
ROA not before: Tue 20 May 2025 20:55:06 +0000
ROA not after: Mon 18 Aug 2025 20:55:06 +0000
asID: 10794
IP address blocks: 171.161.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:eb:70:52:53:7e:ff:cf:c4:d8:8d:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: May 20 20:55:06 2025 GMT
Not After : Aug 18 20:55:06 2025 GMT
Subject: CN=af8e2fbe-3409-4a0b-b5bb-490868e86efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:fe:eb:2a:44:77:42:ba:58:cc:5d:2e:d0:
c9:c5:69:eb:87:75:3e:c7:f1:e9:34:c9:49:bb:c7:
c1:93:e6:00:85:29:2d:4c:8e:b8:49:61:09:03:f1:
60:e0:95:e2:55:fd:46:c3:1e:20:45:07:6a:18:a5:
6c:80:fd:48:04:55:cd:02:8f:38:bc:3b:4a:af:5f:
51:15:2c:ae:ce:fb:19:79:8a:be:f9:28:af:49:81:
66:19:16:19:23:c6:8f:f6:3b:4b:6d:99:7f:39:d1:
03:93:11:45:0a:01:95:93:1e:67:5f:01:44:f8:17:
9b:f8:65:ee:0f:79:19:08:39:4a:33:62:5f:24:3e:
b9:46:84:3f:10:3a:89:8f:63:e1:c7:c1:93:9d:9c:
47:42:bb:d6:db:2c:7d:90:75:db:c0:14:2a:36:9f:
8e:c8:25:18:ea:e2:e3:26:c5:9d:18:09:06:24:d3:
14:86:ac:65:f2:ed:e7:54:da:ca:52:65:49:07:c3:
71:ae:fd:ad:0c:17:40:04:fa:76:3d:63:fe:8c:c2:
62:87:58:f9:da:0a:ab:87:97:e3:a3:6d:55:cd:9a:
e2:4b:b9:b2:c3:38:52:52:bd:be:84:fe:0d:2f:bc:
bf:ac:6c:8a:05:c2:9b:a5:c3:04:38:d2:9a:de:30:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:B4:AE:F6:7E:C2:53:C8:87:23:C4:2B:7F:C2:11:1D:AE:BB:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0f998b3c-ca29-3130-a1f2-160a8ceb0422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.161.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:fa:de:7a:d7:79:13:3c:a3:69:2f:17:a8:2a:03:09:66:67:
38:ad:5a:39:33:20:39:11:8b:25:da:5b:88:66:16:37:95:d7:
21:06:4f:82:86:ae:a1:9b:81:57:db:27:ce:68:4d:a1:70:f4:
4d:1e:71:40:84:f2:52:dd:40:b1:8a:71:4f:bf:36:0c:7c:f9:
4d:f6:43:9f:3b:58:e3:00:21:40:da:bb:b2:f4:60:b9:40:aa:
c8:49:91:26:40:ef:5f:c2:c0:61:39:33:7c:14:fa:e8:e8:a7:
76:9f:a5:9b:91:19:f9:da:db:0f:28:7f:c3:6f:2e:e2:28:23:
c4:7c:f5:2e:68:95:2c:c7:56:61:f4:53:d6:82:34:3b:83:3b:
ca:82:14:1c:7c:cc:17:d6:6b:98:28:8b:13:40:4b:76:00:01:
8d:3e:d4:08:2d:5d:c9:be:4a:77:22:d5:96:cd:de:28:c8:a7:
db:62:80:bd:c9:fc:d8:4d:6c:bb:8b:dd:aa:f2:21:df:ca:16:
4f:03:85:80:27:15:2b:27:95:06:dd:46:80:26:5b:05:af:15:
3c:03:cc:c7:12:6f:94:72:c1:4a:d1:8d:56:8a:20:af:9c:36:
0b:65:dc:7e:cf:bb:50:2e:6d:13:3d:c5:1f:d8:51:5f:5a:73:
2c:a0:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:39:51 2025 by rpki-client