Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1aab3536-0a97-3b2d-9226-1bf018515827.roa
File: 1aab3536-0a97-3b2d-9226-1bf018515827.roa (raw, json)
Hash identifier: hLg+oBrELvWeivTvVCGfe6RQZ208/MyYNfvLJFfyKRc=
Subject key identifier: FB:B0:BE:D2:25:B1:3D:76:DC:F6:78:86:F4:2C:59:18:5F:42:3D:E8
Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial: 010D0C9F4328584ACAD7F32818903CE1E9B08880
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1aab3536-0a97-3b2d-9226-1bf018515827.roa
Signing time: Fri 08 Aug 2025 14:02:16 +0000
ROA not before: Fri 08 Aug 2025 14:02:16 +0000
ROA not after: Thu 06 Nov 2025 15:02:16 +0000
asID: 14618
IP address blocks: 2602:fbd0:c0::/42 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Aug 2025 12:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:ca:d7:f3:28:18:90:3c:e1:e9:b0:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Validity
Not Before: Aug 8 14:02:16 2025 GMT
Not After : Nov 6 15:02:16 2025 GMT
Subject: CN=712ffb95-f4da-4721-8c1c-cccd554409b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:03:6d:f1:4c:f5:ff:25:c3:5a:c8:d7:c1:
b3:f5:c3:23:9c:cb:a0:0c:41:27:c2:fe:a7:cf:bc:
de:04:76:5d:47:8d:37:9b:42:a7:ac:4a:75:41:59:
6e:fc:bf:1b:94:92:b6:4b:e0:0d:d8:95:66:8d:29:
84:35:d8:fe:b3:58:57:20:0f:66:52:97:12:70:1c:
99:8c:e7:3d:c1:e6:f2:16:54:b0:ec:72:1e:97:54:
06:3c:67:d1:54:60:a9:7a:5d:c0:3f:95:7c:34:8e:
fc:ae:16:50:35:18:0a:57:ea:73:61:56:b9:c0:68:
1d:02:5c:a8:ae:71:20:10:85:20:02:86:f2:6a:aa:
4c:4c:36:f5:7f:51:ec:c7:84:e2:14:4a:11:e3:db:
72:6e:d1:11:44:91:f2:19:db:83:c2:6b:14:fd:82:
07:6d:aa:16:dd:48:f6:81:55:10:0c:91:83:4b:51:
f0:4c:88:a5:7d:9b:f1:80:76:96:ac:aa:2d:57:16:
64:60:67:e4:a0:4d:af:5a:e9:b6:ef:92:e3:c3:9d:
33:0a:b9:2b:5c:33:ea:88:90:46:ad:b2:dc:62:77:
3b:50:ea:68:a3:b3:32:db:a6:f4:3c:c3:8b:17:66:
82:cb:c2:06:3b:80:11:df:9f:c6:1a:29:75:70:c1:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:BE:D2:25:B1:3D:76:DC:F6:78:86:F4:2C:59:18:5F:42:3D:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1aab3536-0a97-3b2d-9226-1bf018515827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
X509v3 Authority Key Identifier:
keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbd0:c0::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:8f:cb:df:95:f8:32:7a:4b:77:16:c4:c0:f5:01:a9:6a:d3:
fb:81:26:e9:0a:9f:3a:fe:a1:2a:fe:7b:ca:02:d8:3b:d9:47:
0e:07:83:32:c9:04:03:5a:65:11:51:93:59:a4:d5:85:de:c9:
e6:4f:ce:67:a1:1a:67:87:ed:87:05:47:0a:fa:ba:02:0f:6a:
ab:69:8c:37:44:0f:4f:4d:26:17:06:c4:dd:ca:15:df:83:c9:
2e:57:65:f9:ec:3d:61:17:94:43:c6:95:57:b0:73:28:48:8e:
02:d6:ef:79:11:66:d4:4f:8e:e8:3b:27:ab:69:63:de:4d:c3:
dc:f1:bd:48:26:4c:a0:50:70:20:32:91:35:f7:2d:c0:fe:95:
30:f4:61:5e:57:f8:55:db:eb:13:73:0f:af:dc:61:b2:d6:47:
51:73:0f:e8:aa:1e:d8:51:28:96:f1:48:0c:e5:b2:a2:8b:4c:
f5:a3:0a:9b:94:66:18:cd:8f:b4:ab:71:85:b3:a9:a4:a9:5a:
89:05:79:d3:df:07:18:89:de:17:5b:2c:3b:39:7b:32:35:0d:
65:22:d8:ac:c4:42:57:a3:17:ac:3c:1e:8e:23:e2:33:6a:bd:
fa:24:c8:0b:70:eb:b9:90:02:79:93:0c:f3:cc:91:aa:ab:2c:
c3:a9:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 22:10:58 2025 by rpki-client