Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4874aa7c-56a8-3e01-bea2-ce2e1eb0081c.roa
File: 4874aa7c-56a8-3e01-bea2-ce2e1eb0081c.roa (raw, json)
Hash identifier: 49jVSf59Y9qkpsXR9t10vmroYDCbXqR8onEdIK6idng=
Subject key identifier: 68:57:ED:05:7F:04:1B:30:11:29:47:FC:C5:41:59:30:37:50:B4:8F
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584A2E2C8A60C84D08743216FF00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4874aa7c-56a8-3e01-bea2-ce2e1eb0081c.roa
Signing time: Fri 13 Jun 2025 18:37:41 +0000
ROA not before: Fri 13 Jun 2025 18:37:41 +0000
ROA not after: Thu 11 Sep 2025 18:37:41 +0000
asID: 6621
IP address blocks: 2001:5b0:7100::/40 maxlen: 40
2001:5b0:7500::/40 maxlen: 40
2001:5b0:8800::/37 maxlen: 39
2001:5b0:a800::/37 maxlen: 44
Validation: Failed, certificate revoked on Mon 16 Jun 2025 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:2e:2c:8a:60:c8:4d:08:74:32:16:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jun 13 18:37:41 2025 GMT
Not After : Sep 11 18:37:41 2025 GMT
Subject: CN=aefa9bad-f669-4b9b-9ff3-a8598b1080d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:3a:3c:69:9c:7f:03:e6:a8:b9:92:f1:9a:
d7:20:37:8e:2f:8d:29:f0:8a:23:d9:cc:50:b9:34:
84:e0:68:52:82:77:b1:3f:cf:dd:5a:45:4a:29:70:
92:a1:ac:2a:67:38:a8:84:f3:f0:ed:5c:e1:74:c4:
be:9e:74:37:4d:74:90:6a:71:ca:f9:30:a2:6b:71:
c4:76:d6:2a:77:d0:99:5a:10:fa:e0:8d:eb:56:c6:
b9:f5:65:8f:20:0c:21:3c:ce:64:d7:f2:88:2b:79:
c7:30:29:e4:ab:48:a9:01:48:94:bf:24:db:3f:50:
9b:9a:41:06:04:9e:04:a7:e8:9b:2c:3f:90:a5:bc:
b2:2f:98:e4:45:95:e4:1d:56:76:ca:fb:0d:94:24:
bf:05:2c:3f:b1:61:85:9e:c5:13:e7:3c:86:a3:50:
4b:35:59:1c:6f:be:fd:5e:e4:bd:15:72:81:12:b4:
32:52:55:08:54:51:42:f5:45:42:25:16:1e:b5:26:
04:84:dc:3b:09:9c:90:06:29:10:29:69:ce:be:11:
66:73:c7:b7:ba:82:04:96:a2:82:f8:60:3c:e9:53:
09:51:34:a1:e2:46:da:be:53:ce:3e:e9:cb:d8:dd:
59:96:d8:db:3a:95:79:d5:cb:06:ed:36:43:1f:02:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:ED:05:7F:04:1B:30:11:29:47:FC:C5:41:59:30:37:50:B4:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4874aa7c-56a8-3e01-bea2-ce2e1eb0081c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:5b0:7100::/40
2001:5b0:7500::/40
2001:5b0:8800::/37
2001:5b0:a800::/37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:81:56:1e:d5:d3:5f:78:29:56:39:33:70:c1:c9:08:c5:1b:
c6:53:e2:3e:d5:30:4b:c8:8d:c9:7a:7a:99:4b:e4:e4:46:fd:
8e:7c:d4:e1:25:d9:04:8b:21:ae:13:ae:20:48:1b:0e:9b:99:
14:31:61:08:07:ab:79:2e:92:16:9d:ba:b7:72:80:fb:60:ef:
93:1f:69:32:10:11:66:80:e7:41:03:6b:ec:77:f5:c5:c4:31:
33:a2:58:ca:aa:87:73:b0:e7:29:42:44:0d:4e:b0:3a:1c:fa:
ac:7e:c3:b9:a5:5f:de:aa:99:13:6b:38:02:bc:12:9c:cb:35:
2a:48:1a:a8:d6:2e:b8:8d:91:20:25:b7:63:19:da:dc:fa:19:
27:ba:ea:a3:36:19:e8:51:0c:20:a2:77:5b:fc:5d:a9:8e:d3:
7a:b4:ea:4c:ec:06:5e:40:5e:70:88:29:71:0d:7f:d5:3f:fb:
dd:de:d2:07:94:4e:81:5c:9c:db:79:47:df:f0:95:c8:a6:03:
c9:fc:3e:f3:7e:a8:cd:b6:04:94:19:0a:fe:35:2d:d1:34:87:
a6:d8:5c:8f:97:bb:5a:ce:96:73:93:e9:e0:c0:c1:95:2b:ff:
87:6f:b4:57:e9:8c:7c:56:3f:57:56:f3:66:d9:d7:4b:a4:0b:
40:f4:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:25:52 2025 by rpki-client