Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4209f107-a1a3-3b01-83c6-13324b186d1a.roa
File: 4209f107-a1a3-3b01-83c6-13324b186d1a.roa (raw, json)
Hash identifier: +g2d6GvbUVi0W34y2vqjFmkQYhJfNpM63btyghYB4lI=
Subject key identifier: 4A:BD:F8:A6:0B:5E:1C:E3:FC:6B:DD:8B:7F:40:A0:FF:4A:05:BC:0E
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584A28DEB2A7B663A2CDC4A0A600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4209f107-a1a3-3b01-83c6-13324b186d1a.roa
Signing time: Wed 11 Jun 2025 21:01:48 +0000
ROA not before: Wed 11 Jun 2025 21:01:48 +0000
ROA not after: Tue 09 Sep 2025 21:01:48 +0000
asID: 401152
IP address blocks: 166.88.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 21:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:28:de:b2:a7:b6:63:a2:cd:c4:a0:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jun 11 21:01:48 2025 GMT
Not After : Sep 9 21:01:48 2025 GMT
Subject: CN=d8a8b63d-36e7-479e-8148-e74064cfdc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:70:f7:10:40:93:7a:51:f1:1d:3a:9d:36:
54:28:b1:19:06:c9:42:0b:a9:5c:09:93:5e:26:33:
80:fc:4e:50:f7:7e:0b:e7:e5:98:37:e4:90:f4:31:
89:2e:af:34:76:1b:ed:87:b1:13:34:09:e3:18:52:
c1:21:f2:84:b2:f5:37:8a:92:55:c7:17:7a:83:74:
57:74:58:f8:21:db:d7:6d:d8:a0:67:0e:08:f9:68:
49:9d:22:95:59:13:3b:0e:85:c0:5d:63:cc:fb:42:
27:e8:9c:42:65:48:95:0f:f2:b4:c2:04:18:33:8a:
59:e7:14:c7:1b:2e:56:74:ff:43:82:2b:27:af:51:
53:fb:f1:b5:0f:a6:33:68:b1:53:03:50:e2:fc:57:
5f:d8:f4:7b:79:7b:97:db:1f:18:25:3c:81:a2:4a:
fb:8c:bd:9e:5d:9f:70:ec:5f:b2:91:08:ee:76:73:
a9:7c:a2:e5:94:56:c1:21:4a:16:35:00:c7:4a:30:
4d:0e:c6:a2:8f:2c:06:ec:0f:0d:a8:38:6f:1a:6a:
f2:c3:bd:fb:f4:42:7f:d4:7c:40:4e:d8:71:82:0c:
d4:88:76:b6:7a:f1:1c:2b:90:41:9e:ac:46:75:f1:
c0:96:85:35:0a:9f:95:c5:c7:02:9b:dd:b2:f8:77:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:F8:A6:0B:5E:1C:E3:FC:6B:DD:8B:7F:40:A0:FF:4A:05:BC:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4209f107-a1a3-3b01-83c6-13324b186d1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:1f:1c:27:2e:60:0a:94:1a:7f:1a:1c:03:7c:ea:fa:ea:e0:
e5:e7:89:60:9b:db:50:d3:b6:89:53:cc:9a:63:42:9e:6a:03:
3d:af:88:d0:bb:23:cd:ae:cb:d7:5a:65:62:a2:bc:8e:35:9a:
9a:8b:5c:ee:86:55:bd:77:99:a2:3b:a1:f1:ff:37:3d:d1:42:
72:73:02:4d:18:b8:f7:66:40:63:15:be:3f:ec:ce:9c:57:d5:
75:82:84:1f:03:da:36:ee:d7:3c:9c:18:86:b3:43:40:a9:da:
45:74:59:6e:4b:ee:83:79:68:1a:11:36:42:94:af:af:b3:c8:
0d:84:cb:91:e9:d4:d9:ec:a0:3c:5d:94:c8:31:92:06:4f:d3:
d1:05:ff:27:27:1e:3d:d5:d1:78:b8:b5:b0:66:86:17:08:6f:
97:f1:b1:6f:20:16:0b:42:63:df:b6:dc:a5:3b:89:b0:3a:01:
b6:eb:46:ee:48:34:23:0a:80:67:6a:67:4f:30:8c:ad:d2:dd:
86:ea:c8:54:d4:0b:1b:95:03:52:a1:28:e5:7f:f2:a4:87:6a:
f5:7a:44:d2:0b:06:95:10:b0:ba:2d:d1:78:33:b9:ec:e3:22:
a5:5c:91:4b:20:c3:e9:14:0e:a8:52:d2:0c:48:b4:05:f6:c8:
36:c9:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:48 2025 by rpki-client