Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/546c3cc5-cae3-44cb-b503-67f639173a0d/2243cabe-da7c-3065-a72e-e2c4589d3e81.roa
File: 2243cabe-da7c-3065-a72e-e2c4589d3e81.roa (raw, json)
Hash identifier: hcsAthFfxP1Tgq/iB2Lj5GvrGssuWrtCeHy4lu5Anv4=
Subject key identifier: D7:1A:DC:C9:D3:D2:59:91:2B:79:24:C7:76:FA:F0:EA:F3:9E:DB:BB
Certificate issuer: /CN=546c3cc5-cae3-44cb-b503-67f639173a0d
Certificate serial: 010D0C9F4328584A4C15E9F3EC73E7B641B4D180
Authority key identifier: A9:71:5A:F4:4A:28:1F:78:B7:F5:A7:E5:D2:4D:5F:4F:74:75:7A:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/546c3cc5-cae3-44cb-b503-67f639173a0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/546c3cc5-cae3-44cb-b503-67f639173a0d/2243cabe-da7c-3065-a72e-e2c4589d3e81.roa
Signing time: Tue 24 Jun 2025 11:46:21 +0000
ROA not before: Tue 24 Jun 2025 11:46:21 +0000
ROA not after: Mon 22 Sep 2025 11:46:21 +0000
asID: 397423
IP address blocks: 198.182.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jun 2025 01:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:4c:15:e9:f3:ec:73:e7:b6:41:b4:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546c3cc5-cae3-44cb-b503-67f639173a0d
Validity
Not Before: Jun 24 11:46:21 2025 GMT
Not After : Sep 22 11:46:21 2025 GMT
Subject: CN=0ec42e3f-05cf-4820-9e3c-8432d0b003eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:44:a3:93:ed:90:92:7a:8a:06:25:43:06:
bd:2c:b7:c3:ae:e8:7d:eb:1e:52:cc:0d:ae:26:9c:
28:4d:d7:e7:9c:1a:98:5e:53:63:40:6a:3e:70:e8:
27:87:1f:d5:d8:48:4b:f7:ee:99:00:4d:d0:8b:00:
6e:06:6d:b4:d0:7f:35:4a:27:8b:35:40:bd:6f:9e:
f6:ee:9d:69:a3:8e:d5:72:82:2f:1f:3c:a5:16:7d:
bc:ac:32:ff:70:a0:06:b7:be:82:93:ca:c2:a6:ea:
90:3c:b1:0b:a1:1e:99:de:c4:98:2d:f0:ec:32:ec:
24:ae:56:f2:ac:c7:ae:ba:2e:66:93:14:31:83:70:
a7:54:dc:bb:6f:ff:8e:aa:83:34:f7:2e:ba:41:3b:
d1:8f:6b:5f:d1:f7:81:a2:1d:ac:b6:c5:9d:c6:75:
98:35:5f:70:d7:2e:fb:91:f6:a3:9e:7a:d5:c0:78:
c3:a2:c4:f7:57:9a:ba:d7:f6:5e:f2:e9:96:4a:a9:
3a:00:c0:13:67:f9:03:c3:dc:a0:f6:35:13:9d:cb:
a7:62:ff:11:b0:35:25:8d:69:ba:88:aa:ac:95:a9:
c4:a2:ab:37:4a:b6:61:9d:04:9f:7f:90:ff:53:af:
3d:87:ad:7d:80:c1:64:67:f6:c7:96:7c:ae:f9:e8:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1A:DC:C9:D3:D2:59:91:2B:79:24:C7:76:FA:F0:EA:F3:9E:DB:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/546c3cc5-cae3-44cb-b503-67f639173a0d/2243cabe-da7c-3065-a72e-e2c4589d3e81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/546c3cc5-cae3-44cb-b503-67f639173a0d/546c3cc5-cae3-44cb-b503-67f639173a0d.crl
X509v3 Authority Key Identifier:
keyid:A9:71:5A:F4:4A:28:1F:78:B7:F5:A7:E5:D2:4D:5F:4F:74:75:7A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/546c3cc5-cae3-44cb-b503-67f639173a0d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.182.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:8a:93:fa:39:72:d0:ac:12:c1:6a:f8:a6:6c:50:55:71:36:
73:de:be:99:3a:a8:11:b7:d3:4c:0e:2b:4b:a9:39:08:60:9d:
c8:aa:f7:db:e0:6d:7d:de:31:52:ae:53:85:39:b8:05:22:02:
ea:d7:57:5a:0f:f4:17:3c:29:6d:40:c7:7e:df:14:3f:ea:f4:
31:37:a7:1b:fc:cc:db:0f:63:b2:89:70:1c:24:f7:a6:1b:55:
00:cb:fc:b9:5a:2c:69:97:29:f7:80:ca:33:fb:d9:97:88:1f:
b3:ee:6b:85:a3:20:2f:39:05:c6:d1:0a:c2:ab:54:0c:f1:ed:
50:6d:37:1d:52:4c:65:61:8b:84:4f:75:9d:f6:e3:b8:bd:7d:
82:27:db:fb:6a:c1:56:7c:81:2e:21:d7:0a:c6:6d:09:f3:10:
11:d4:fa:ec:47:24:e2:bd:1a:44:88:4e:3b:01:a1:d6:66:82:
60:6f:87:62:5a:bd:d6:f2:31:8c:6c:74:4d:04:5a:0d:ba:1f:
94:f8:ac:9f:62:db:75:04:4f:f9:0e:d3:b7:a1:e3:e1:04:33:
c1:f8:7d:47:a1:89:63:1c:09:11:3d:73:fc:74:49:d4:8d:b7:
26:2d:1c:49:8f:1a:74:87:4b:95:17:70:23:c1:96:f0:72:66:
32:15:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 22:59:19 2025 by rpki-client