Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/af91cf66-8750-35c9-80cd-d7922160bcad.roa
File: af91cf66-8750-35c9-80cd-d7922160bcad.roa (raw, json)
Hash identifier: XuZ5/mGbwmCbaN6A+QTIMSXsjuTWSLjf9z5kBLg0cf0=
Subject key identifier: C8:58:62:38:96:5E:89:AB:C4:6F:E4:B5:14:41:07:5D:05:FA:6D:B7
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584AFC1BFBC131D8CF5917BEA780
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/af91cf66-8750-35c9-80cd-d7922160bcad.roa
Signing time: Tue 26 Aug 2025 13:00:41 +0000
ROA not before: Tue 26 Aug 2025 13:00:41 +0000
ROA not after: Mon 24 Nov 2025 14:00:41 +0000
asID: 9009
IP address blocks: 198.145.152.0/24 maxlen: 24
198.145.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Oct 2025 16:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fc:1b:fb:c1:31:d8:cf:59:17:be:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Aug 26 13:00:41 2025 GMT
Not After : Nov 24 14:00:41 2025 GMT
Subject: CN=a087fd57-100b-4b12-b1c8-7f9b9bd423a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:4d:b7:ec:83:48:7d:e2:91:f1:c7:cd:0a:
c2:75:df:6b:f3:e8:8d:60:4b:b8:66:8c:a2:36:d9:
03:a9:c4:e0:5f:a0:c6:5e:bf:71:5c:cd:dd:91:18:
57:f2:0a:7a:da:d5:d9:b5:bf:76:8c:8f:f0:0e:02:
03:48:0f:7a:a6:33:bc:0c:a5:01:28:ef:bf:d7:01:
d4:b2:3a:ea:df:1e:02:4b:a5:a3:3a:10:94:de:8c:
b7:9f:03:19:d2:37:7b:c8:c5:f6:ec:a1:4c:38:a9:
ab:83:39:17:3d:6a:42:d6:5c:5f:6d:f0:96:1a:f2:
de:fc:1f:18:5e:0a:cc:4c:19:da:43:47:5c:3d:65:
85:f9:1b:94:aa:04:ad:c0:e3:98:9b:a9:1a:48:4b:
af:18:96:a6:cd:63:15:47:34:f3:52:7f:45:6d:27:
fe:65:9b:d3:4f:e9:49:49:ac:f1:d9:6e:b1:d8:fc:
54:b1:6c:76:87:29:53:d6:e3:00:77:94:f1:af:54:
fb:bb:b0:be:f0:38:ef:2d:de:d9:08:32:b0:e1:08:
15:9d:c6:10:51:19:c2:90:3d:14:46:c3:89:83:3c:
eb:85:7b:33:73:9c:d2:88:fc:92:96:ce:d9:e7:0d:
2b:69:4e:77:8b:5b:28:65:d8:c4:ee:21:ee:ae:b7:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:62:38:96:5E:89:AB:C4:6F:E4:B5:14:41:07:5D:05:FA:6D:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/af91cf66-8750-35c9-80cd-d7922160bcad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.152.0/24
198.145.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:36:ab:1a:0f:21:29:2c:e4:a8:31:16:c6:ce:38:0f:ed:0c:
76:03:77:ec:07:fb:86:e0:d6:96:cd:70:4c:63:d1:2f:cb:5f:
e5:85:67:1e:fd:0b:3e:c4:5b:17:76:2f:4f:a1:4b:60:b4:51:
4d:3a:cd:6e:da:11:b5:ea:ff:62:ef:56:c3:65:25:0a:f5:1a:
c0:90:ab:f0:cd:1a:32:d9:b6:3d:f6:c0:31:c1:d0:c8:e7:8c:
67:95:7e:4c:5d:48:8a:02:cb:e3:16:59:1f:bf:fa:f0:a4:16:
bb:86:43:47:0b:04:bc:fc:fd:62:66:7f:76:0a:e8:63:96:77:
6d:b4:c8:d2:c5:b6:39:ba:93:c2:8d:c5:e5:3d:95:8c:ad:1c:
eb:cc:3c:ce:63:e6:04:89:60:6d:d2:14:45:4f:f9:5a:72:a4:
da:13:65:7d:5b:ef:b4:42:64:96:d6:92:63:c8:24:42:9c:ab:
be:90:bf:87:92:5b:ea:79:8e:8f:3f:8e:f7:09:64:94:51:c2:
e6:92:b0:f8:61:d7:3e:87:a8:6b:0a:d1:9e:4d:4d:48:0f:3d:
f5:bc:1c:e5:82:34:54:6b:4b:89:42:13:7a:05:39:f4:a6:aa:
ee:f0:24:74:e0:52:f9:8b:8c:f6:46:5b:80:4d:6c:5d:b7:11:
cd:82:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 23:26:12 2025 by rpki-client