Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89be9943-f04e-3bc2-b8f9-6a28d36eaeaa.roa
File: 89be9943-f04e-3bc2-b8f9-6a28d36eaeaa.roa (raw, json)
Hash identifier: Dm8/O4kcBQvELVWhLkGgTvCrVenDILj3VuH4WoIP264=
Subject key identifier: AC:85:32:F6:EC:2C:F5:AF:69:FC:70:68:BD:81:6D:C4:EE:A2:07:56
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849F61C8A839DCBB9EBD89DB7E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89be9943-f04e-3bc2-b8f9-6a28d36eaeaa.roa
Signing time: Sat 24 May 2025 16:40:11 +0000
ROA not before: Sat 24 May 2025 16:40:11 +0000
ROA not after: Fri 22 Aug 2025 16:40:11 +0000
asID: 213238
IP address blocks: 172.120.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 11:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f6:1c:8a:83:9d:cb:b9:eb:d8:9d:b7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 24 16:40:11 2025 GMT
Not After : Aug 22 16:40:11 2025 GMT
Subject: CN=61366a9c-5cc9-46ae-a037-7fd4e3a1bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:52:68:f0:55:7c:75:0e:e4:9a:01:12:74:
b9:72:e1:b8:80:ba:40:43:dc:df:98:19:a1:ed:ba:
01:66:66:28:85:63:c6:c3:14:62:cd:e2:8f:24:43:
7e:60:0a:e7:13:7f:d1:ff:c0:db:39:93:d1:cc:68:
6f:bd:bd:34:4c:4c:7a:c3:fb:ef:ad:bf:f0:a1:d8:
b5:98:6d:22:92:bc:90:50:12:98:b9:ba:28:9e:06:
22:06:c3:74:37:e2:d9:14:77:53:a9:13:55:3f:21:
81:c9:84:6e:6a:4e:c4:b3:ee:96:04:90:81:82:ef:
5b:47:86:09:4c:d8:24:1f:57:3c:a2:84:05:a9:39:
0e:d1:19:53:df:9f:58:f9:90:9c:79:96:7a:c5:79:
36:6c:5c:68:e0:32:72:9d:b1:82:7d:07:6f:c1:d5:
ac:73:7a:5e:cb:ab:81:ad:9c:82:db:df:b3:2f:b5:
2e:b6:13:3b:09:0d:7d:e2:7b:fb:c8:5a:90:f0:ae:
31:e1:73:d2:0b:63:34:ac:b0:fe:0b:d0:28:fa:5b:
b3:19:ea:bd:d2:d2:88:83:cc:7a:5a:c1:c4:f2:7c:
ab:ec:60:aa:ba:d8:00:39:67:50:0a:c0:eb:db:d4:
67:b4:15:79:64:87:80:97:92:a3:5a:16:b1:73:90:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:32:F6:EC:2C:F5:AF:69:FC:70:68:BD:81:6D:C4:EE:A2:07:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89be9943-f04e-3bc2-b8f9-6a28d36eaeaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:9f:f3:d6:96:1f:2b:ab:13:24:7a:33:33:55:2d:9d:ec:7f:
a7:81:b4:4f:52:c4:ab:a9:55:77:3e:92:ce:73:1f:93:00:a6:
91:cd:1a:32:9d:2a:93:de:59:25:50:84:cd:a7:67:a1:17:13:
b7:e6:a0:24:a4:7a:08:f9:82:22:0d:af:07:ac:39:02:64:35:
06:f7:12:dd:06:96:7c:7e:36:ee:dd:f4:79:28:60:bb:4b:c8:
93:b5:df:de:c2:e6:a4:59:03:7a:e2:ae:70:f6:20:bd:c2:5e:
6f:12:82:f2:71:56:01:13:1e:4a:5b:03:47:4f:ca:0c:68:ab:
0a:c4:bf:2e:78:9f:9f:86:92:7c:7b:98:dc:96:ab:65:59:f0:
78:03:40:85:f2:ae:69:bf:81:a0:cd:ee:bf:8e:e2:28:1a:65:
27:dd:84:b5:52:62:8b:60:a8:43:30:99:1e:e9:1d:11:28:3e:
4b:f0:f6:30:3c:42:e4:60:4f:79:74:53:9d:a0:66:68:27:10:
83:fd:8d:77:7d:42:d3:6b:30:13:fa:c8:96:6a:bf:ec:7e:07:
4a:c2:76:40:78:d8:87:04:a7:41:c5:a9:a5:4f:62:13:a6:c2:
d3:dd:5b:d6:af:b5:94:8d:48:9f:85:fb:d3:b6:6f:3b:fb:b1:
07:2a:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:35:09 2025 by rpki-client