Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4166ca6e-7a8a-393a-afa6-b55e623cae07.roa
File: 4166ca6e-7a8a-393a-afa6-b55e623cae07.roa (raw, json)
Hash identifier: r0NAXC5D5vhuVtl0Ef1PAsetPvdkHJnCTjIfXBKHnw0=
Subject key identifier: AF:9C:38:C5:42:A4:BB:F0:23:BE:54:54:3F:6D:E6:F8:66:89:3C:33
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285849D42FB2DEA3383C93713514C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4166ca6e-7a8a-393a-afa6-b55e623cae07.roa
Signing time: Mon 12 May 2025 13:01:00 +0000
ROA not before: Mon 12 May 2025 13:01:00 +0000
ROA not after: Sun 10 Aug 2025 13:01:00 +0000
asID: 2648
IP address blocks: 161.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 14:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d4:2f:b2:de:a3:38:3c:93:71:35:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: May 12 13:01:00 2025 GMT
Not After : Aug 10 13:01:00 2025 GMT
Subject: CN=4cd8b4cc-eb22-415e-9c6f-e3e65e95c690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:63:c6:26:07:3a:eb:2b:44:71:54:fb:2f:
dd:cd:50:33:a0:07:fb:6e:66:7b:ee:1f:90:b3:08:
a1:23:64:aa:b5:d6:93:2b:97:21:f5:1f:8f:46:24:
d0:75:0f:c4:34:01:60:42:73:1f:12:9e:a6:ef:05:
13:56:68:f0:90:f1:b0:fc:48:17:62:88:06:1e:6f:
50:37:61:c3:10:07:99:dc:10:75:ea:c5:44:4c:9b:
95:70:41:f2:76:ff:d1:75:e1:74:df:8f:15:ef:87:
52:bd:a3:59:44:8f:01:40:f3:fe:c5:c2:90:41:e4:
03:6f:12:9e:7b:65:f1:24:81:40:fe:ef:07:6a:d3:
84:f3:e6:6d:b2:bd:ca:42:3f:3e:38:b6:00:87:f2:
ac:8a:24:17:4d:3b:a8:5c:be:fa:bd:82:e8:3b:2e:
13:4d:b5:37:c0:8f:2e:60:92:e0:dc:9a:ee:ff:e1:
b1:ff:bf:2f:57:df:3a:97:9b:50:44:99:a9:82:c1:
90:ba:77:63:11:a4:a0:d0:c3:2c:d7:ac:e7:37:c8:
31:23:8b:35:e3:90:6f:2c:17:f4:3a:42:59:b2:fa:
23:83:37:28:cb:7f:33:27:9e:56:58:65:05:ef:c9:
03:3f:5c:51:0f:3f:db:ab:90:7f:8b:2d:b6:0c:26:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9C:38:C5:42:A4:BB:F0:23:BE:54:54:3F:6D:E6:F8:66:89:3C:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4166ca6e-7a8a-393a-afa6-b55e623cae07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
161.55.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:46:16:64:48:b7:eb:49:df:73:6b:db:23:1e:18:d0:0e:3b:
c2:76:1c:8e:5f:e9:3e:07:28:b7:e8:8c:fb:ad:63:f7:d4:dd:
e4:02:dd:c0:5f:d5:56:2c:b7:c5:a8:69:97:a8:84:21:c2:62:
cd:68:33:24:a4:64:96:24:df:68:72:6a:cb:18:dc:b5:d9:98:
2e:e8:43:de:dc:3b:72:fd:ad:77:5e:be:2b:34:85:00:2f:27:
55:ea:8b:fd:aa:03:b3:27:5e:ec:bb:1b:3e:4a:e5:6e:ad:f5:
34:87:d7:1b:ba:6a:a5:e0:b4:ba:58:b8:a7:be:7a:92:a3:b1:
d6:c2:4d:f9:9f:fb:bf:6f:1b:9e:df:b3:e6:a4:48:9e:c6:3a:
13:19:15:05:1b:9d:06:92:c0:43:b6:20:f2:d7:1e:22:f4:b6:
a3:0b:40:cb:36:0a:ab:c6:f6:cc:98:c2:99:eb:d9:8b:76:1d:
b4:47:2c:de:ab:e0:38:b7:ae:ae:9d:25:2d:97:de:b8:d5:2d:
65:a9:49:92:29:e7:6a:55:12:3e:b2:8a:98:de:06:87:c0:44:
9d:52:d9:1e:6d:ee:33:ae:4c:ec:7b:5d:be:16:d4:95:1b:30:
93:70:af:30:9d:8d:44:87:19:69:8f:56:25:10:4f:9b:88:65:
42:a8:02:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7Leozg8k3E1FMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NGNkOGI0Y2MtZWIyMi00MTVlLTljNmYtZTNlNjVlOTVjNjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnJjxiYHOusrRHFU+y/dzVAzoAf7bmZ77h+Q
swihI2SqtdaTK5ch9R+PRiTQdQ/ENAFgQnMfEp6m7wUTVmjwkPGw/EgXYogGHm9Q
N2HDEAeZ3BB16sVETJuVcEHydv/RdeF0348V74dSvaNZRI8BQPP+xcKQQeQDbxKe
e2XxJIFA/u8HatOE8+Ztsr3KQj8+OLYAh/KsiiQXTTuoXL76vYLoOy4TTbU3wI8u
YJLg3Jru/+Gx/78vV986l5tQRJmpgsGQundjEaSg0MMs16znN8gxI4s145BvLBf0
OkJZsvojgzcoy38zJ55WWGUF78kDP1xRDz/bq5B/iy22DCaqGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+cOMVCpLvwI75UVD9t5vhmiTwzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNDE2NmNhNmUtN2E4YS0z
OTNhLWFmYTYtYjU1ZTYyM2NhZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoTfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRGFmRIt+tJ33Nr2yMeGNAOO8J2HI5f6T4HKLfojPutY/fU3eQC3cBf
1VYst8WoaZeohCHCYs1oMySkZJYk32hyassY3LXZmC7oQ97cO3L9rXdevis0hQAv
J1Xqi/2qA7MnXuy7Gz5K5W6t9TSH1xu6aqXgtLpYuKe+epKjsdbCTfmf+79vG57f
s+akSJ7GOhMZFQUbnQaSwEO2IPLXHiL0tqMLQMs2CqvG9syYwpnr2Yt2HbRHLN6r
4Di3rq6dJS2X3rjVLWWpSZIp52pVEj6yipjeBofARJ1S2R5t7jOuTOx7Xb4W1JUb
MJNwrzCdjUSHGWmPViUQT5uIZUKoAp4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:48:17 2025 by rpki-client