Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/068fa5a5-7650-3e58-9a27-b436f88b80f6.roa
File: 068fa5a5-7650-3e58-9a27-b436f88b80f6.roa (raw, json)
Hash identifier: N665RjSp4T/MQmwx1SIj9a/TJOMEJju5Fw5Iq+lJcPM=
Subject key identifier: E9:A5:39:95:45:A5:56:80:17:D1:EE:9D:67:49:81:C0:FA:55:2A:6D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849F61D5B658C2B593D4731E130
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/068fa5a5-7650-3e58-9a27-b436f88b80f6.roa
Signing time: Sat 24 May 2025 16:41:50 +0000
ROA not before: Sat 24 May 2025 16:41:50 +0000
ROA not after: Fri 22 Aug 2025 16:41:50 +0000
asID: 213238
IP address blocks: 172.120.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 11:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f6:1d:5b:65:8c:2b:59:3d:47:31:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 24 16:41:50 2025 GMT
Not After : Aug 22 16:41:50 2025 GMT
Subject: CN=b22e1045-f724-40fa-be70-7ec8f086f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:07:18:c5:b1:8c:9c:40:23:96:1c:18:ca:
ed:04:9e:ce:88:fc:6c:a5:e3:e3:aa:48:5f:32:98:
8d:17:16:71:7a:44:60:45:3a:eb:60:fb:96:0d:7d:
11:b3:43:35:cb:32:7a:29:30:4c:53:12:7d:0d:92:
aa:e4:e0:43:7a:84:18:de:07:73:c1:e4:2e:c1:b7:
9e:34:e4:9d:90:cf:29:1b:dd:97:9e:9a:cb:c8:2f:
ab:db:ea:8b:de:4e:cb:35:e2:36:37:d4:2a:88:2a:
30:54:a6:3d:8d:7f:e0:8f:71:2f:3d:7c:3a:58:b6:
1a:0e:dc:ad:c4:ec:a2:05:d6:79:b1:3f:e1:3c:77:
55:c6:85:59:fa:11:65:de:be:76:30:62:f6:4a:58:
d9:3a:82:f4:04:e7:7f:d9:c3:21:81:52:94:3a:ee:
25:eb:fa:dc:1d:b5:24:28:0b:14:bd:7c:fd:72:45:
11:a9:e7:31:77:48:ba:ee:9a:6a:8f:9a:28:9f:14:
5e:2f:3c:72:b7:23:c8:1c:7c:a4:b6:31:d8:1c:4d:
d7:17:78:80:84:b2:31:b5:59:02:eb:8c:77:1d:5d:
9f:31:53:36:c8:fe:15:a7:6a:ce:ee:57:48:f0:bb:
06:74:91:8a:a7:b5:84:9f:b7:b3:ef:bd:80:a7:fd:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:39:95:45:A5:56:80:17:D1:EE:9D:67:49:81:C0:FA:55:2A:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/068fa5a5-7650-3e58-9a27-b436f88b80f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:2c:d4:c9:97:3c:69:6d:58:8e:85:76:a2:50:d5:22:90:2c:
a7:bc:a2:1b:3a:54:9a:84:16:e1:b5:0e:0a:29:c6:a3:f8:41:
42:40:91:b7:e6:ef:67:db:47:1c:95:3f:b1:08:7b:d5:a1:9f:
96:b8:02:58:38:8c:94:71:82:1f:d6:ad:09:a7:ec:4d:12:df:
fa:21:9f:97:62:d9:4d:6a:d7:48:37:86:d8:cf:23:50:88:21:
50:e0:3d:ba:d2:c8:a7:50:fd:22:42:cf:da:bd:cd:b1:ef:4c:
2d:f6:b7:04:a2:aa:4c:d2:7b:fd:95:2d:4c:8f:f9:d3:68:47:
d4:59:39:96:a1:63:15:0e:15:60:50:dd:78:cc:83:c8:95:de:
b7:5e:f0:fc:a3:b1:2e:55:d6:a1:10:8a:26:8d:39:42:1b:50:
07:9f:73:03:3b:85:23:73:30:41:35:8f:df:ef:53:19:af:81:
c8:d1:5c:ec:4c:b2:aa:95:1e:7f:17:3b:7d:cc:77:54:20:79:
f4:a9:97:28:80:de:25:eb:30:4e:70:7a:c1:df:9c:67:fe:a9:
7b:e2:14:c6:c1:0f:a4:77:95:73:14:4e:da:3c:f3:06:df:19:
3f:9c:c1:a6:1f:63:67:46:46:1c:33:bd:77:9f:20:cb:c0:0b:
67:dd:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:39:49 2025 by rpki-client