Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa
File: d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa (raw, json)
Hash identifier: WoAiE7DJnbUhuLTvNvqfipNYuNJ1/6S2woZ3EUMIFqw=
Subject key identifier: EB:79:45:AD:3B:7A:1A:EA:BF:86:11:BD:A5:AF:9C:A1:15:FB:29:44
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285849D42FB2CA0B7799C476A16380
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa
Signing time: Mon 12 May 2025 13:01:00 +0000
ROA not before: Mon 12 May 2025 13:01:00 +0000
ROA not after: Sun 10 Aug 2025 13:01:00 +0000
asID: 3477
IP address blocks: 205.167.24.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 19:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d4:2f:b2:ca:0b:77:99:c4:76:a1:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: May 12 13:01:00 2025 GMT
Not After : Aug 10 13:01:00 2025 GMT
Subject: CN=cb7b4950-99fd-4047-881f-e5265229bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:f2:a8:61:41:a4:96:12:72:a1:43:61:af:
c8:c5:2e:ba:f4:51:72:cf:a7:51:5b:ae:6f:b2:7b:
2e:79:2a:89:1f:f4:6c:97:63:f6:2b:54:c5:41:d2:
ee:14:d8:fa:1e:16:71:f7:5b:21:b5:ed:62:7c:a9:
a3:24:ca:45:62:ad:b5:66:e7:91:ba:c7:1b:cf:ff:
65:34:de:05:b8:83:30:1e:94:3f:fe:18:85:55:fa:
89:a3:fb:2f:65:d9:c5:b4:7b:f3:8b:fd:33:78:62:
c9:b3:f4:9d:bc:fa:77:29:b8:32:c6:90:e8:f1:9c:
e3:42:43:56:12:17:33:a7:a1:7c:56:20:6f:e2:bf:
3b:9f:c0:e2:a0:61:0b:4d:bb:7b:37:f0:76:d6:17:
8b:bd:8a:97:97:61:e8:8a:d2:a5:c0:a7:48:46:50:
1c:67:03:1a:36:5e:4c:ba:f0:52:54:20:6e:cd:c6:
b8:67:26:e1:c2:a0:45:9c:36:4e:dd:2c:12:fe:ff:
20:a3:4c:d2:d3:f0:ef:15:ce:78:35:fd:54:c4:1a:
89:1a:75:11:f4:1b:08:1a:82:ef:51:54:55:9c:00:
1d:13:3f:b8:51:b5:84:65:cd:e3:76:04:8c:53:52:
fd:52:96:53:9d:8c:8e:db:62:00:0d:cc:c1:14:7e:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:45:AD:3B:7A:1A:EA:BF:86:11:BD:A5:AF:9C:A1:15:FB:29:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
205.167.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:f1:6e:fd:d3:ac:05:a2:c7:f9:3f:34:d3:98:21:75:10:30:
01:b9:85:44:67:84:a4:8b:37:01:ea:72:9c:81:15:98:1a:e6:
32:51:48:de:2d:4f:e9:af:27:44:aa:10:68:10:32:12:55:5c:
f5:01:a5:37:15:85:c8:af:31:59:58:ac:33:d0:bb:1f:8e:6b:
cf:43:fd:3e:27:c4:f5:fb:1f:76:e1:f4:dc:6d:de:7e:dd:59:
56:5d:e2:94:3d:39:ea:75:2c:fa:95:9b:c5:2f:9f:8f:f8:5a:
a4:9a:f2:f1:56:44:90:62:55:ad:f6:ba:20:88:f9:dd:3d:a0:
8c:3b:dd:c0:33:e6:72:5c:92:96:8f:3c:31:50:c5:26:95:74:
a5:89:1e:ed:2f:c3:27:78:7c:89:f7:da:16:d6:ea:85:27:3c:
d1:78:c2:ae:9b:af:3c:4b:47:f0:31:a6:2c:81:b4:f0:27:85:
73:f6:cf:05:a0:33:9a:29:6f:07:c1:01:7b:96:53:c8:e5:93:
25:ab:bf:ac:04:ce:71:fa:9a:82:bf:10:f0:63:2a:be:d4:d6:
1a:ab:69:4c:97:d6:06:5e:c8:b8:c7:f5:a7:77:30:f4:9c:39:
80:5d:85:a4:44:14:1a:b1:04:58:fa:58:55:c4:68:11:1b:cf:
4e:0e:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:56:51 2025 by rpki-client