Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3a7c31ee-a8b7-3e06-a13d-a40324b9f1f5.roa
File: 3a7c31ee-a8b7-3e06-a13d-a40324b9f1f5.roa (raw, json)
Hash identifier: 413Gw6q93WpUsCXeiWY8DKZ5Ww2WPbs3rCAh79vWnZo=
Subject key identifier: E5:E7:97:BA:AE:86:F9:22:7B:3C:75:09:55:E5:2F:FB:17:AB:B7:1B
Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial: 010D0C9F4328584A0BE4AAE349DAA7DE4A389980
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3a7c31ee-a8b7-3e06-a13d-a40324b9f1f5.roa
Signing time: Sun 01 Jun 2025 11:55:23 +0000
ROA not before: Sun 01 Jun 2025 11:55:23 +0000
ROA not after: Sat 30 Aug 2025 11:55:23 +0000
asID: 834
IP address blocks: 208.123.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 20:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:0b:e4:aa:e3:49:da:a7:de:4a:38:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Validity
Not Before: Jun 1 11:55:23 2025 GMT
Not After : Aug 30 11:55:23 2025 GMT
Subject: CN=ceb81eaf-079f-4fb6-a0a8-c407af925e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:cb:5c:aa:ed:30:f1:1e:8b:c7:6a:fc:63:
bf:56:b1:c2:e3:b1:0e:3f:2c:9f:75:98:65:d2:3e:
d1:d0:ee:12:12:94:f1:eb:5b:3a:85:23:8e:e7:bf:
dc:c8:e3:13:81:db:76:aa:28:94:eb:6a:08:03:3f:
a0:d4:2f:a3:47:7e:2b:4d:9c:87:57:4d:48:5a:08:
ff:2f:1e:e7:d5:66:c0:56:6e:9c:11:65:60:77:c5:
0b:db:54:e2:01:cd:a4:82:14:af:4c:bf:98:06:91:
0e:7b:2c:49:39:19:a2:bd:f8:4b:a9:10:84:b6:55:
23:b3:c0:dc:03:62:34:e2:82:64:1c:ca:fb:08:ec:
8e:72:aa:44:85:6d:33:42:1a:1d:9e:98:93:c1:40:
fc:83:a9:44:92:1e:a9:dc:a4:cc:43:53:39:d9:95:
5e:b8:42:8f:4b:9f:83:30:36:80:cc:28:23:27:1a:
be:28:8f:a3:7c:0b:35:96:b4:4d:1b:5a:4b:0c:b7:
2d:aa:5e:43:50:42:ef:fe:91:ee:03:5b:83:00:ae:
90:21:b9:9b:23:89:3e:2a:69:f1:c8:a3:7e:99:e2:
09:06:71:70:81:b6:46:ad:39:e7:9f:14:7e:ac:a0:
24:e0:af:58:8c:3b:eb:ba:f0:e1:ee:55:ff:ea:e0:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E7:97:BA:AE:86:F9:22:7B:3C:75:09:55:E5:2F:FB:17:AB:B7:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/3a7c31ee-a8b7-3e06-a13d-a40324b9f1f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
X509v3 Authority Key Identifier:
keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
208.123.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:86:3d:fd:eb:68:00:1c:4d:d2:b3:06:61:9f:a8:70:1d:9f:
d2:3e:50:a8:e7:54:2a:97:e7:81:fe:6e:c1:c2:4d:a8:60:78:
9d:c5:be:dd:af:76:0b:5d:54:25:74:d5:3c:65:b2:69:be:a9:
13:6c:00:d2:90:8e:23:63:ec:87:a3:2e:c3:55:cc:15:c4:cb:
0a:2c:ed:6d:79:f3:c4:98:d6:07:58:94:cb:ec:8b:5c:63:09:
81:e9:0b:5b:e8:b6:66:81:03:cb:d7:2d:54:55:88:d0:a8:0a:
5e:1b:20:58:1f:6b:e9:07:21:97:e6:b5:80:7d:b7:c0:d6:db:
ed:49:ac:26:5a:8e:5c:43:26:de:c8:e4:55:31:e8:17:cd:df:
3a:25:2a:ab:45:37:f7:28:c6:b1:77:2d:50:4d:af:e8:27:36:
f5:52:39:34:ad:c4:71:28:8f:c6:e2:bc:4f:13:f9:cf:3e:24:
4e:a9:62:1a:e3:a0:91:2a:56:f7:9d:12:56:26:41:ef:ce:7c:
8e:6c:cc:f8:2b:9f:c3:c5:d1:db:fe:18:1e:8c:8a:99:c2:54:
ea:10:70:ad:0b:29:4c:37:87:cf:58:3a:9c:be:03:7c:70:db:
eb:44:68:84:c7:8c:41:bf:3d:e8:28:43:f9:50:e0:13:69:36:
98:86:b0:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoL5KrjSdqn3ko4mYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MDYwMTExNTUyM1oXDTI1MDgzMDExNTUyM1owLzEtMCsGA1UEAxMk
Y2ViODFlYWYtMDc5Zi00ZmI2LWEwYTgtYzQwN2FmOTI1ZTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNrLXKrtMPEei8dq/GO/VrHC47EOPyyfdZhl
0j7R0O4SEpTx61s6hSOO57/cyOMTgdt2qiiU62oIAz+g1C+jR34rTZyHV01IWgj/
Lx7n1WbAVm6cEWVgd8UL21TiAc2kghSvTL+YBpEOeyxJORmivfhLqRCEtlUjs8Dc
A2I04oJkHMr7COyOcqpEhW0zQhodnpiTwUD8g6lEkh6p3KTMQ1M52ZVeuEKPS5+D
MDaAzCgjJxq+KI+jfAs1lrRNG1pLDLctql5DUELv/pHuA1uDAK6QIbmbI4k+Kmnx
yKN+meIJBnFwgbZGrTnnnxR+rKAk4K9YjDvruvDh7lX/6uAjYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXnl7quhvkiezx1CVXlL/sXq7cbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvM2E3YzMxZWUtYThiNy0z
ZTA2LWExM2QtYTQwMzI0YjlmMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HvfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaGPf3raAAcTdKzBmGfqHAdn9I+UKjnVCqX54H+bsHCTahgeJ3Fvt2v
dgtdVCV01Txlsmm+qRNsANKQjiNj7IejLsNVzBXEywos7W1588SY1gdYlMvsi1xj
CYHpC1votmaBA8vXLVRViNCoCl4bIFgfa+kHIZfmtYB9t8DW2+1JrCZajlxDJt7I
5FUx6BfN3zolKqtFN/coxrF3LVBNr+gnNvVSOTStxHEoj8bivE8T+c8+JE6pYhrj
oJEqVvedElYmQe/OfI5szPgrn8PF0dv+GB6MipnCVOoQcK0LKUw3h89YOpy+A3xw
2+tEaITHjEG/PegoQ/lQ4BNpNpiGsPA=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:14 2025 by rpki-client