Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa
File: e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa (raw, json)
Hash identifier: KdQ0RXvU+Y/KQQHLxYKY48T5I6Av6uopl6AWqCDoqAw=
Subject key identifier: B2:9E:6B:78:D7:6D:A0:47:D9:4C:CF:79:B0:63:04:7F:A1:35:59:3F
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285849D42FB22B351A2129D121D400
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa
Signing time: Mon 12 May 2025 13:01:00 +0000
ROA not before: Mon 12 May 2025 13:01:00 +0000
ROA not after: Sun 10 Aug 2025 13:01:00 +0000
asID: 3477
IP address blocks: 161.55.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 19:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d4:2f:b2:2b:35:1a:21:29:d1:21:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: May 12 13:01:00 2025 GMT
Not After : Aug 10 13:01:00 2025 GMT
Subject: CN=a6235624-0404-43ca-b453-2d7e03f35ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:2d:02:f6:58:9e:09:79:e6:a5:65:f6:6b:
52:60:13:e9:eb:e7:62:4f:05:15:04:7a:d7:4a:71:
9a:e7:d1:e4:e0:3f:13:17:bc:7d:7d:95:7a:9b:c4:
a0:b7:c6:81:f2:7f:55:88:cc:fb:db:d3:20:16:c8:
aa:d9:8b:c7:b2:0f:d8:46:ee:4b:26:53:92:67:a6:
32:43:d6:c7:f7:22:45:51:bc:54:7d:bc:cd:26:9f:
0c:62:83:52:a4:1c:fb:b7:21:d7:90:99:5b:ba:0d:
e5:96:06:a2:47:62:3a:f3:71:84:83:24:e6:03:3b:
dc:7d:e5:82:ff:fb:ac:d7:44:97:85:9f:e1:9b:0c:
6f:47:68:dc:8e:1f:13:e4:c4:08:51:7b:29:12:e7:
2e:cc:b1:60:21:49:cb:d9:09:2f:32:ad:34:86:34:
e0:cc:33:81:6b:83:22:1f:f4:83:7d:c2:d7:9a:0b:
c1:ab:a5:51:28:90:18:25:92:2a:d0:2d:28:b8:ff:
1e:c7:11:30:a3:91:8d:21:c2:16:17:11:98:f9:e5:
d0:18:18:d3:68:ce:75:f0:71:4b:3f:a5:49:e3:a6:
92:7f:50:32:8e:af:84:0b:ef:97:fd:0d:da:07:dd:
54:32:ab:cd:82:01:ab:23:20:b4:ab:1e:ec:0a:d1:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9E:6B:78:D7:6D:A0:47:D9:4C:CF:79:B0:63:04:7F:A1:35:59:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
161.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:1a:74:ab:52:90:e6:7b:0f:f6:df:52:a5:b9:45:72:be:d4:
57:e0:80:bf:41:0b:36:b3:f4:01:bd:d6:d0:8b:02:d4:d6:39:
0e:d2:7a:96:16:19:ed:ad:1c:49:47:b1:d3:35:4e:ec:5c:df:
1b:af:e8:fb:20:0d:7e:44:6c:03:09:d4:06:45:01:56:6b:50:
a7:0e:79:e3:d7:8f:71:56:2a:dc:3e:34:e4:4c:1e:ad:20:ed:
42:6a:8f:19:7f:ef:1d:61:31:d9:d1:ea:56:7b:86:d2:d4:58:
a8:09:42:a3:93:d6:1d:3a:de:5e:5d:fd:11:c3:83:60:16:f7:
40:8a:9c:e2:f8:9b:b7:06:b1:36:6c:e1:b7:b9:72:cf:dc:87:
39:b7:77:3b:e1:e9:f4:2e:bd:52:f6:62:76:20:31:f1:47:a6:
40:d3:3c:e6:79:04:5d:6f:9f:d6:65:9e:64:0b:86:67:2c:6d:
b9:e5:df:42:95:4d:87:bb:96:99:11:35:5a:a9:43:74:17:01:
31:fb:b6:7f:9c:63:64:38:f1:c9:a7:e2:e9:8c:fb:cd:68:8d:
08:df:19:34:f4:2d:57:38:f6:af:6a:93:05:81:40:27:82:97:
70:d9:4e:07:3b:b1:19:5c:e3:27:d4:64:11:7e:63:3d:cd:4e:
c6:3e:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:32 2025 by rpki-client