Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/17f92a71-d7a6-3320-98f0-fd0ce3f2dd44.roa
File: 17f92a71-d7a6-3320-98f0-fd0ce3f2dd44.roa (raw, json)
Hash identifier: x8mkyn362LikoCm49kISgeIKLYZtseRATSflCUx8lE4=
Subject key identifier: 45:05:87:5C:27:DE:BE:D9:03:22:0E:3E:C2:56:96:09:15:FF:B8:38
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285849D42FB2ACC123EC444C8CBAC0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/17f92a71-d7a6-3320-98f0-fd0ce3f2dd44.roa
Signing time: Mon 12 May 2025 13:01:00 +0000
ROA not before: Mon 12 May 2025 13:01:00 +0000
ROA not after: Sun 10 Aug 2025 13:01:00 +0000
asID: 3477
IP address blocks: 199.242.232.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 14:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d4:2f:b2:ac:c1:23:ec:44:4c:8c:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: May 12 13:01:00 2025 GMT
Not After : Aug 10 13:01:00 2025 GMT
Subject: CN=6f8974c3-35c8-4bcc-a9bc-b646e5931da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:01:26:c0:7c:2d:c2:3c:b2:54:4f:c9:5a:
57:0e:83:26:80:90:8e:01:1a:db:f6:dd:2c:56:13:
42:77:0e:bc:16:64:9f:74:2f:38:d4:a1:42:e5:7c:
e8:11:87:a5:fe:e0:03:ee:45:b9:d5:bf:11:66:56:
ea:8d:b0:c4:dd:f7:c1:c4:32:08:c1:91:aa:bb:b3:
63:24:f7:88:9f:80:5f:03:9b:61:63:20:53:0c:0f:
79:eb:c4:44:19:8f:e7:5e:63:52:e3:44:48:d4:0f:
be:0e:cb:ec:5f:02:4d:ac:a0:b8:ba:f9:24:c0:2f:
e5:4f:5f:d8:86:5a:1e:dc:2a:07:07:6f:12:62:25:
34:86:c4:d5:60:e1:9f:9e:fc:37:0a:4e:d7:9e:04:
a4:78:83:b3:8e:36:cb:5e:66:20:ed:0b:6a:e6:c0:
80:7b:83:75:72:0d:99:ff:88:b7:41:c8:61:7d:0e:
24:b4:68:c7:0e:8e:0d:e7:1b:47:2e:e3:89:a4:d4:
1c:86:43:ea:d3:39:1f:60:5c:6e:d9:9d:01:cc:a2:
15:9d:30:07:c1:d9:45:c9:96:07:4c:e3:c0:1f:56:
29:6e:00:ba:9d:ab:8c:cb:0d:02:ed:cf:6a:1b:1d:
d2:b4:e5:0e:f4:ad:4a:db:4e:98:8b:89:d4:6a:3e:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:87:5C:27:DE:BE:D9:03:22:0E:3E:C2:56:96:09:15:FF:B8:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/17f92a71-d7a6-3320-98f0-fd0ce3f2dd44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
199.242.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d1:53:2a:f3:f0:80:eb:84:37:c7:e3:0c:b7:0f:56:d4:ee:
98:a9:23:ed:6d:8a:c1:06:92:13:f8:4e:a5:3d:88:e2:95:db:
02:89:64:33:52:e0:26:1b:ac:5e:e0:50:45:1d:6a:44:c8:43:
84:ee:58:c2:cb:5d:18:f4:14:ed:86:27:d6:a7:38:2d:f9:3d:
06:2f:99:f5:80:3c:20:b3:5b:53:6e:81:05:6c:61:67:68:57:
3d:7a:95:60:25:14:c1:95:83:70:39:06:bb:f5:12:6c:84:1e:
14:1c:80:0a:17:ae:39:b5:44:8e:a5:f9:22:9e:79:01:96:03:
76:9b:e5:1a:16:a0:f5:33:ed:bc:c6:39:9c:f0:78:08:5b:c3:
9b:92:11:f3:7e:da:7c:75:54:30:f7:57:d3:99:44:ed:d6:24:
ea:66:55:4a:6e:ac:db:4c:31:9d:d9:36:89:cd:5e:6a:6b:cc:
7d:84:01:53:83:16:05:7e:ed:7e:06:8b:68:a2:d3:a8:32:c0:
d5:e6:47:b3:aa:99:93:82:6c:1d:a3:d8:35:dc:80:4d:e5:c7:
3e:92:b7:47:4f:ed:c9:21:99:4d:b2:01:41:91:25:61:15:d6:
96:3d:c1:83:b7:99:60:da:ee:45:36:04:fb:02:c6:08:c5:a1:
18:03:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:15:31 2025 by rpki-client