Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab8d9dcb-cf8e-32cc-ac50-813be00c44c9.roa
File: ab8d9dcb-cf8e-32cc-ac50-813be00c44c9.roa (raw, json)
Hash identifier: JbwOxeJQPrLECBQ12VWejFN4L7uC53JD0xlOZ6ZlhRs=
Subject key identifier: AA:8D:55:82:C5:97:5D:BD:0D:54:66:A0:9C:62:B0:A9:1E:2C:64:49
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285849CFFF799D3D3EC487C3DF0180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab8d9dcb-cf8e-32cc-ac50-813be00c44c9.roa
Signing time: Sun 11 May 2025 01:00:47 +0000
ROA not before: Sun 11 May 2025 01:00:47 +0000
ROA not after: Sat 09 Aug 2025 01:00:47 +0000
asID: 204957
IP address blocks: 142.111.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 14:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:cf:ff:79:9d:3d:3e:c4:87:c3:df:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: May 11 01:00:47 2025 GMT
Not After : Aug 9 01:00:47 2025 GMT
Subject: CN=b066bdbd-4567-4a14-82a6-6ce6beb1403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:4e:38:fa:76:65:3b:2f:2d:1a:92:53:ad:
31:6c:a6:aa:c9:43:62:f1:08:06:4d:fb:d7:3c:2a:
3a:84:6f:e4:37:96:38:0e:ab:ca:8a:c0:46:2d:ae:
2c:51:fa:8e:6c:18:6f:bc:d4:dd:36:fb:ba:9e:12:
47:9c:4e:b6:77:d9:0b:fe:b8:27:e4:1f:26:a1:06:
77:1f:58:49:b0:6e:eb:4a:4d:b6:37:c9:4d:12:da:
da:1c:a0:7a:9a:93:5e:4b:4d:02:92:8a:61:9c:12:
18:65:c3:bd:6f:32:c2:81:20:22:22:80:2d:da:59:
65:8f:d3:f1:d4:18:45:b1:eb:d8:f0:8b:d4:cf:ac:
86:b0:62:61:15:d2:57:53:fa:1f:ef:8a:df:c0:2f:
73:ee:ff:83:83:1a:29:ec:ac:97:d0:6e:93:06:7f:
15:d7:c2:23:d1:bc:54:1f:20:53:eb:42:c8:cb:23:
2c:21:78:26:b9:32:08:7c:fa:fb:42:9d:2b:c4:fa:
38:12:fb:cd:4b:07:df:f2:9f:fe:50:ab:2e:61:9d:
3a:46:56:60:07:96:66:4e:56:87:9e:2a:2d:18:40:
73:7c:a1:13:23:01:5d:f0:ce:e7:14:5a:1b:aa:ae:
ab:ff:55:a9:6d:9f:03:32:ee:81:1c:36:02:b9:df:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:55:82:C5:97:5D:BD:0D:54:66:A0:9C:62:B0:A9:1E:2C:64:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab8d9dcb-cf8e-32cc-ac50-813be00c44c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:09:ea:a5:2a:cd:d5:73:8c:cf:54:bc:98:14:4a:09:c8:ed:
0d:b5:d8:b5:64:44:f8:25:4f:fc:f1:65:b1:a8:e4:e5:1a:65:
33:56:74:38:eb:31:5a:00:5c:bf:b0:57:67:2c:a3:81:e2:77:
a4:b5:8d:ef:ab:bb:e8:5e:ea:39:6f:ad:b3:98:77:27:43:4c:
2e:78:88:be:08:47:93:1e:3e:70:af:74:16:5b:f1:0b:d3:4b:
4a:28:6b:b3:05:95:15:01:43:40:5e:c8:f0:c2:79:52:b1:e4:
d0:47:b0:4a:5a:fd:b6:8c:48:9b:8d:5d:36:f3:1c:5e:b8:50:
e0:94:cd:fb:ff:36:09:be:6a:95:45:21:1f:9c:d5:89:ee:23:
e0:6b:c9:f2:56:fc:c7:af:45:a4:b5:6d:a9:fc:d4:05:06:f1:
47:93:2c:f7:0f:02:27:38:08:28:c1:16:63:62:a8:e7:68:25:
80:66:84:80:14:d1:17:f8:84:7c:fd:4a:a7:c4:79:6c:38:7d:
ef:46:25:a1:45:1a:00:23:c2:16:43:ef:05:f7:13:60:b7:84:
5a:a0:09:02:60:88:7c:72:16:cb:74:1a:28:e7:55:f4:39:00:
ed:ef:62:a4:33:30:92:44:51:cc:2b:98:9d:a8:c6:43:03:72:
0a:ea:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:46 2025 by rpki-client