Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ace3bbff-4564-489b-ba93-ee7bc0ac7f60/7f8a5e1f-7a4e-3738-bd76-17dc0172fa70.roa
File: 7f8a5e1f-7a4e-3738-bd76-17dc0172fa70.roa (raw, json)
Hash identifier: ZS8scBNVWbV7+fx1wLo7x4vzl19S76Tb3MxcE8Qvstc=
Subject key identifier: 4A:F9:CA:69:D0:57:A0:85:F3:98:FC:7B:B1:1A:6A:91:1D:46:E2:24
Certificate issuer: /CN=ace3bbff-4564-489b-ba93-ee7bc0ac7f60
Certificate serial: 010D0C9F4328584A734E0EC7A38304C7D3F299C0
Authority key identifier: C4:D3:0C:CE:10:12:C9:B3:94:02:2A:25:40:34:58:4E:6D:14:D1:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ace3bbff-4564-489b-ba93-ee7bc0ac7f60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ace3bbff-4564-489b-ba93-ee7bc0ac7f60/7f8a5e1f-7a4e-3738-bd76-17dc0172fa70.roa
Signing time: Tue 08 Jul 2025 12:56:00 +0000
ROA not before: Tue 08 Jul 2025 12:56:00 +0000
ROA not after: Mon 06 Oct 2025 12:56:00 +0000
asID: 14618
IP address blocks: 206.168.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 13:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:73:4e:0e:c7:a3:83:04:c7:d3:f2:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3bbff-4564-489b-ba93-ee7bc0ac7f60
Validity
Not Before: Jul 8 12:56:00 2025 GMT
Not After : Oct 6 12:56:00 2025 GMT
Subject: CN=355e8944-a0ef-4b48-ab16-ebed7db22b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:d4:d9:49:ee:50:ed:8e:0e:c5:b9:9e:10:
06:69:a3:ff:bb:63:f2:fd:e9:d8:b5:ee:a1:06:8a:
06:a6:2d:9a:61:00:84:38:78:83:0b:b5:fd:3a:a8:
36:0b:e1:60:b2:84:51:02:41:86:db:2f:38:f2:96:
5b:27:f6:3d:8b:58:7d:70:e8:e9:da:a0:e7:87:15:
a1:8e:f6:92:0b:cb:10:cf:3c:0a:9a:e4:59:24:a7:
94:28:c0:78:2f:d0:7e:15:ee:21:73:02:93:f8:97:
70:9d:68:0e:14:d4:cd:bd:2d:b8:94:98:0a:57:4c:
cc:4c:00:11:f3:e3:f5:e7:55:b5:47:90:a6:87:0e:
5c:46:49:cc:12:83:9c:49:48:5e:85:21:bb:00:8a:
df:7d:1e:cb:45:6c:92:18:f9:37:a4:ab:0a:d3:68:
f8:34:e8:0c:35:83:67:a9:86:73:a5:db:15:4f:ba:
75:39:4e:fb:17:48:e4:f9:4b:a2:35:23:6b:68:66:
d7:93:d3:ab:f9:63:4b:9d:22:52:07:8b:b0:ca:46:
d0:81:3f:05:3d:e3:37:2b:d1:2b:00:ae:c2:ad:0f:
eb:5d:7b:21:bd:a6:95:3f:43:81:8e:76:03:15:60:
14:80:2b:d3:4b:96:79:19:a9:47:f6:df:02:d5:5a:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:CA:69:D0:57:A0:85:F3:98:FC:7B:B1:1A:6A:91:1D:46:E2:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ace3bbff-4564-489b-ba93-ee7bc0ac7f60/7f8a5e1f-7a4e-3738-bd76-17dc0172fa70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ace3bbff-4564-489b-ba93-ee7bc0ac7f60/ace3bbff-4564-489b-ba93-ee7bc0ac7f60.crl
X509v3 Authority Key Identifier:
keyid:C4:D3:0C:CE:10:12:C9:B3:94:02:2A:25:40:34:58:4E:6D:14:D1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ace3bbff-4564-489b-ba93-ee7bc0ac7f60.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a1:69:1b:91:63:2d:32:00:d5:dd:ad:bf:4f:3f:81:18:f6:
51:82:d1:07:8e:52:82:f2:93:0b:cb:6d:95:37:f5:20:ca:95:
07:d3:75:2f:8e:79:85:69:c2:74:2b:2b:cd:a6:72:4c:74:75:
b3:9b:87:72:79:ec:03:c5:f4:cc:82:b2:00:a8:44:1d:98:41:
47:fc:74:63:0f:b0:a6:73:fe:64:ea:52:9d:17:aa:03:80:37:
59:36:76:68:28:5b:21:f0:4f:29:eb:1e:4a:08:7c:7e:54:67:
eb:4d:d5:f0:69:74:04:9b:0b:fa:1c:bc:b0:49:34:14:d5:c8:
2a:e8:ac:a2:49:9c:32:e4:f5:c6:2f:7a:b0:64:c9:3e:38:e1:
03:6c:0e:1e:8b:fc:a5:4d:11:77:cc:44:42:12:eb:c4:1a:a2:
33:dd:47:ff:6a:18:a7:e6:31:f7:df:d1:d0:90:1d:67:b8:40:
08:46:e8:77:91:55:02:39:55:d1:4b:08:9b:fe:11:f0:3a:78:
2a:ad:50:d8:21:40:1a:bd:ae:5d:72:12:ec:14:27:cb:58:35:
d6:0d:44:49:64:64:a2:d6:87:49:92:83:9a:69:fc:c5:9e:19:
a8:f0:e8:bc:3a:3c:3d:85:08:f0:08:91:a8:cb:61:e3:ab:92:
84:35:06:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzTg7Ho4MEx9PymcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNlM2JiZmYtNDU2NC00ODliLWJhOTMtZWU3YmMwYWM3
ZjYwMB4XDTI1MDcwODEyNTYwMFoXDTI1MTAwNjEyNTYwMFowLzEtMCsGA1UEAxMk
MzU1ZTg5NDQtYTBlZi00YjQ4LWFiMTYtZWJlZDdkYjIyYjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvTU2UnuUO2ODsW5nhAGaaP/u2Py/enYte6h
BooGpi2aYQCEOHiDC7X9Oqg2C+FgsoRRAkGG2y848pZbJ/Y9i1h9cOjp2qDnhxWh
jvaSC8sQzzwKmuRZJKeUKMB4L9B+Fe4hcwKT+JdwnWgOFNTNvS24lJgKV0zMTAAR
8+P151W1R5Cmhw5cRknMEoOcSUhehSG7AIrffR7LRWySGPk3pKsK02j4NOgMNYNn
qYZzpdsVT7p1OU77F0jk+UuiNSNraGbXk9Or+WNLnSJSB4uwykbQgT8FPeM3K9Er
AK7CrQ/rXXshvaaVP0OBjnYDFWAUgCvTS5Z5GalH9t8C1VoKFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEr5ymnQV6CF85j8e7EaapEdRuIkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hY2Uz
YmJmZi00NTY0LTQ4OWItYmE5My1lZTdiYzBhYzdmNjAvN2Y4YTVlMWYtN2E0ZS0z
NzM4LWJkNzYtMTdkYzAxNzJmYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWNlM2JiZmYtNDU2NC00ODliLWJh
OTMtZWU3YmMwYWM3ZjYwL2FjZTNiYmZmLTQ1NjQtNDg5Yi1iYTkzLWVlN2JjMGFj
N2Y2MC5jcmwwHwYDVR0jBBgwFoAUxNMMzhASybOUAiolQDRYTm0U0ccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hY2UzYmJmZi00NTY0LTQ4OWItYmE5My1lZTdi
YzBhYzdmNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqi6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqhaRuRYy0yANXdrb9PP4EY9lGC0QeOUoLykwvLbZU39SDKlQfTdS+O
eYVpwnQrK82mckx0dbObh3J57APF9MyCsgCoRB2YQUf8dGMPsKZz/mTqUp0XqgOA
N1k2dmgoWyHwTynrHkoIfH5UZ+tN1fBpdASbC/ocvLBJNBTVyCrorKJJnDLk9cYv
erBkyT444QNsDh6L/KVNEXfMREIS68QaojPdR/9qGKfmMfff0dCQHWe4QAhG6HeR
VQI5VdFLCJv+EfA6eCqtUNghQBq9rl1yEuwUJ8tYNdYNRElkZKLWh0mSg5pp/MWe
Gajw6Lw6PD2FCPAIkajLYeOrkoQ1BsM=
-----END CERTIFICATE-----
Generated at Thu Jul 10 10:39:33 2025 by rpki-client