Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
File: 42b9e44c-659d-35fa-8da3-8f2339416b02.roa (raw, json)
Hash identifier: Ad6iaLEclFJdAN/41vW5jCEYqEPt5TydK9QavKa0P0Y=
Subject key identifier: F6:51:C3:6F:55:E8:EB:5F:1C:F1:CF:67:56:6C:E9:AD:28:F9:D3:4A
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285849D42FB1C887A2CB28669D2D40
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
Signing time: Mon 12 May 2025 13:01:00 +0000
ROA not before: Mon 12 May 2025 13:01:00 +0000
ROA not after: Sun 10 Aug 2025 13:01:00 +0000
asID: 3477
IP address blocks: 140.90.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 19:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d4:2f:b1:c8:87:a2:cb:28:66:9d:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: May 12 13:01:00 2025 GMT
Not After : Aug 10 13:01:00 2025 GMT
Subject: CN=386e3b60-ec0f-47b6-bfe2-e397cb8d2dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:c0:c1:a1:80:ff:f3:30:30:75:cf:92:ab:
23:83:33:ac:c8:1d:d7:d1:83:ed:db:c2:e9:2b:d6:
b8:9d:cc:b7:d7:f5:e4:81:3b:e7:e8:b7:7d:e0:c2:
41:ae:cc:17:55:9b:49:99:8b:db:25:4d:6a:0a:08:
e8:8b:5a:79:ee:23:07:da:99:ff:48:70:63:a0:f2:
c6:23:8f:ec:15:ac:28:3b:cd:4a:a5:aa:b5:dc:b5:
50:21:24:c4:fc:ec:8c:a4:c5:af:f2:2f:34:44:43:
b1:72:41:55:51:3a:e6:3f:09:f0:a1:49:e1:5c:9e:
65:75:72:af:73:87:38:d0:ae:2f:7b:7b:59:52:57:
fe:83:1b:94:34:03:f7:fd:a6:14:33:d1:2b:b2:66:
d2:23:6a:e3:df:cc:8b:8a:cc:97:c3:92:d0:45:ed:
24:3e:9c:c0:c1:ee:0e:47:d7:61:ff:9c:71:9f:62:
d2:d5:ca:1d:36:12:ab:d3:c6:be:51:be:9d:4f:a2:
52:0e:c0:e3:07:54:08:45:15:67:ad:23:03:12:3b:
e0:47:6c:8c:ff:bc:59:75:c6:bd:39:f7:df:59:70:
0a:62:ee:a7:c9:39:1b:a8:3d:1f:d9:d6:ee:ff:32:
d1:b0:6e:fa:dd:5b:55:b1:6a:95:c5:94:14:22:f2:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:51:C3:6F:55:E8:EB:5F:1C:F1:CF:67:56:6C:E9:AD:28:F9:D3:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
140.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:09:e0:ac:bb:4c:78:83:66:42:99:e2:e0:b4:c6:c8:86:7c:
0f:a7:63:55:66:1a:46:c1:a3:ff:6d:cc:d4:f3:69:5e:c5:c3:
61:1b:49:07:b2:b8:25:29:9c:6e:fd:71:d9:7e:56:de:22:24:
dd:bd:32:35:af:a9:c4:f8:bb:f6:a5:73:39:ac:d2:8d:72:10:
01:06:19:8d:ca:12:73:c5:bc:f5:5b:a9:e4:59:05:34:05:ce:
5d:0f:b9:41:7c:f7:50:d1:8f:0a:c9:64:95:c7:90:13:7e:33:
f0:d4:b1:7d:a1:5e:82:9d:1c:24:cb:32:f2:e8:5c:66:e1:c5:
17:35:d4:10:c2:61:4e:5f:85:2a:c3:c8:8c:ab:55:fb:60:79:
8a:70:11:60:cf:a4:5a:ed:56:05:d3:0f:21:65:9a:00:da:cf:
9a:ab:0f:bc:7c:5b:83:04:bd:45:13:5a:8a:af:95:fc:b0:b6:
16:6c:ce:cb:fc:78:39:fc:50:81:c9:66:e2:14:f2:da:0f:8a:
fa:72:c0:2d:c6:28:cf:2e:c4:7c:b9:b7:7f:8a:cb:c7:90:a1:
57:f9:ee:b2:d6:93:50:6f:d1:5a:2e:23:ff:08:6a:dd:8f:eb:
f5:80:c2:98:d7:81:99:65:d8:7f:67:34:53:9a:34:58:00:92:
5c:b0:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:36:22 2025 by rpki-client