Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e0dffb6-c969-3cfd-8b57-dd99aa550c2d.roa
File: 1e0dffb6-c969-3cfd-8b57-dd99aa550c2d.roa (raw, json)
Hash identifier: 5+jLdDcP035Scd4kHXS6yvVj6PYJO337ubv/PRbegaI=
Subject key identifier: F0:A4:01:71:26:EE:08:38:4C:E5:85:7B:DB:4A:1B:E3:33:A4:0B:66
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584A5F6C80D664612DA8BF285B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e0dffb6-c969-3cfd-8b57-dd99aa550c2d.roa
Signing time: Tue 01 Jul 2025 10:01:11 +0000
ROA not before: Tue 01 Jul 2025 10:01:11 +0000
ROA not after: Mon 29 Sep 2025 10:01:11 +0000
asID: 32043
IP address blocks: 66.227.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 04:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:5f:6c:80:d6:64:61:2d:a8:bf:28:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jul 1 10:01:11 2025 GMT
Not After : Sep 29 10:01:11 2025 GMT
Subject: CN=44dbf0ef-2d6b-4500-9a8f-cd0625bdf9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:b2:19:b7:e1:0f:25:3e:9e:d0:4e:88:54:
35:98:12:7e:54:87:75:40:2f:20:39:6f:d0:f0:96:
65:df:18:6b:85:47:c8:52:67:10:12:c7:7f:3f:57:
8f:c2:41:19:94:76:c3:7e:27:0a:f0:e8:5e:e8:a3:
a1:77:e9:c5:ea:89:fa:25:fd:68:d2:00:0a:aa:1d:
1a:da:ca:44:51:7f:4a:30:d5:a2:de:d8:61:11:80:
90:34:5e:5b:21:64:58:eb:0e:d7:ee:4a:06:21:a3:
57:d6:d7:15:8c:28:8a:c4:8a:82:50:d4:56:43:a3:
08:98:e7:27:08:73:4e:b0:42:51:d9:88:96:ee:d3:
7c:f0:fa:0f:e4:5e:55:f5:68:65:3e:96:79:ed:73:
60:fb:d4:40:1e:de:a7:10:3a:40:5a:7a:8a:57:06:
d2:6d:9e:b3:3e:d5:b2:52:56:76:c9:7b:c4:12:9e:
a8:68:04:70:22:f6:27:ac:c1:a9:10:95:75:67:9d:
0e:07:d8:91:1b:2e:fd:ed:5a:c6:35:32:f6:8c:30:
c2:45:f7:9e:d6:41:b4:57:49:a0:69:31:96:82:da:
91:7e:e2:72:ff:ac:ce:ca:22:70:76:b3:51:2e:33:
ad:14:01:d5:97:27:3d:8e:28:48:3c:76:56:07:00:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:01:71:26:EE:08:38:4C:E5:85:7B:DB:4A:1B:E3:33:A4:0B:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e0dffb6-c969-3cfd-8b57-dd99aa550c2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.227.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:1e:f9:9f:59:11:65:fd:05:c8:62:ff:07:26:e1:fd:7b:43:
7b:7b:07:a1:54:a0:14:61:6e:2e:10:88:57:d5:2a:68:d0:60:
b9:22:49:8d:c3:9c:58:cc:0c:62:e4:13:2f:f0:56:1e:89:d0:
af:22:dc:f8:8b:af:0e:07:02:43:53:19:cb:90:d4:87:f0:f5:
6b:bc:17:16:07:a2:4c:23:dc:c6:38:74:b0:6e:59:9b:9c:4e:
95:72:db:ac:95:6c:7a:6d:c7:51:d5:c6:6f:9c:54:7b:9e:71:
c7:7f:d8:91:99:52:dc:4d:b4:49:8f:a6:a1:95:55:03:ce:61:
50:49:5b:29:c5:54:a2:c3:db:7f:1c:04:08:e4:f6:84:33:90:
d0:50:c5:c2:76:ad:35:52:7e:27:d1:5a:f1:aa:d6:f7:a8:69:
5f:19:d5:7b:64:e7:93:a3:f9:9f:55:42:ef:94:96:e7:43:38:
bc:45:8c:75:30:1a:2b:8c:b4:45:80:ef:d1:72:7f:38:b8:1c:
92:38:36:e3:4f:20:37:2c:67:68:bc:4a:00:65:19:3c:bd:17:
e7:8b:24:76:5c:ff:e0:1a:ee:27:1c:7e:56:7e:cf:e0:4c:aa:
b4:a6:e9:96:06:3b:e6:03:37:45:d2:e6:e3:90:8e:23:a3:13:
a9:55:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 22:48:36 2025 by rpki-client