Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1855fa88-8047-356c-aa79-efd5c585ae5d.roa
File: 1855fa88-8047-356c-aa79-efd5c585ae5d.roa (raw, json)
Hash identifier: EXScxk0yhagB9XWPDJa3UcANLE7jHWERU2HPhXS+km4=
Subject key identifier: DB:F2:DC:59:48:A3:C4:97:0E:F3:30:EF:82:BB:BF:F7:38:26:8A:A0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584A8F3B83C2292CE246387AB240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1855fa88-8047-356c-aa79-efd5c585ae5d.roa
Signing time: Fri 18 Jul 2025 13:01:05 +0000
ROA not before: Fri 18 Jul 2025 13:01:05 +0000
ROA not after: Thu 16 Oct 2025 13:01:05 +0000
asID: 396570
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Aug 2025 14:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:8f:3b:83:c2:29:2c:e2:46:38:7a:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jul 18 13:01:05 2025 GMT
Not After : Oct 16 13:01:05 2025 GMT
Subject: CN=5f479071-97bc-4dd2-9b8b-2865fabfcbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:ea:4e:f5:d1:98:b0:af:10:61:14:b2:f3:
3c:9a:d9:2b:3a:40:5d:7e:c1:cc:8b:e5:b4:1c:da:
67:14:25:75:55:de:81:a7:c2:65:a4:a6:fe:79:94:
01:fb:13:a7:b7:83:46:05:76:d9:a8:f9:81:42:91:
2a:7f:da:82:01:e8:ae:8c:dd:91:fd:5b:ea:57:a1:
bb:2c:90:1f:b3:8b:c7:67:b7:84:a6:db:02:ff:5c:
bc:38:ca:3f:39:12:c0:77:70:6c:c5:2e:fb:38:17:
92:68:06:27:b7:b1:d2:63:33:1c:bb:3d:00:7d:3b:
70:9f:5f:39:b8:0e:1e:fd:27:7b:1b:94:e0:48:f9:
fa:d4:c9:0a:32:d9:6c:64:72:d3:07:71:b0:41:41:
98:59:9f:8a:2b:f3:d8:be:a7:ff:ba:44:a3:83:3b:
3d:bb:1b:27:30:0c:98:59:79:69:e1:41:b1:62:be:
1f:62:fe:a5:a9:d8:0f:5f:16:5f:77:ba:32:9e:eb:
f7:3d:46:20:d1:28:6a:12:05:bd:6d:e5:89:11:4f:
38:61:5b:69:45:c8:62:cb:bc:f0:1c:f8:a9:36:01:
4a:5b:69:7f:dc:71:1d:05:78:d2:81:a7:c9:5c:08:
88:6d:21:25:8a:f0:d4:89:36:3b:8c:ea:fd:65:87:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F2:DC:59:48:A3:C4:97:0E:F3:30:EF:82:BB:BF:F7:38:26:8A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1855fa88-8047-356c-aa79-efd5c585ae5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:15:cd:c7:a6:cf:10:61:f6:01:2f:f5:62:da:e5:4e:6c:0e:
c4:d9:41:1a:47:62:16:a6:11:0b:d3:06:4c:0d:2e:9d:d6:cf:
37:60:76:ad:98:0c:92:4c:c7:73:ea:c3:9b:8c:5a:1e:30:89:
5d:80:29:5f:00:1e:ff:c5:a5:fb:21:9f:10:4c:af:fb:1a:50:
34:03:fb:2b:f4:57:7e:a3:6e:1a:a8:24:92:1d:79:31:cc:e1:
cf:a3:3f:e0:e8:bb:f9:21:1f:a7:17:66:74:ff:87:57:b8:5f:
b7:fc:16:d5:81:f2:0f:a9:5b:b8:36:99:d2:20:6c:a4:08:f7:
2c:2d:8f:a2:06:f9:c7:04:e1:af:76:b2:3c:ef:6a:be:8b:4c:
a5:9e:b0:48:ca:cd:09:b7:e0:80:95:ee:db:66:65:4d:5c:31:
60:db:84:e5:9a:64:fd:6f:5a:71:87:0b:5f:01:60:aa:67:66:
8d:69:af:a6:52:50:38:28:ef:fb:04:4d:09:52:2d:e5:06:5f:
74:1d:32:53:91:d6:37:99:24:62:65:27:a4:bb:48:8e:0f:4a:
62:de:18:f2:47:57:68:7c:07:e9:02:2b:1a:a2:dd:42:15:b8:
ea:10:d8:f9:ea:7d:0f:05:88:65:01:76:28:61:9d:64:25:9a:
e4:b0:ca:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:15 2025 by rpki-client