Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/9be4cafe-9a4a-3f68-9d9b-eb4b25efa2b7.roa
File: 9be4cafe-9a4a-3f68-9d9b-eb4b25efa2b7.roa (raw, json)
Hash identifier: FpRN2wK8yKLTI4AiXEc0Ca7QAhUs49HlNk463tSVr5s=
Subject key identifier: 5B:B7:B0:5F:5E:0F:E3:B1:3A:7E:19:3B:B7:63:10:F6:F2:FD:B0:FB
Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial: 010D0C9F4328584A27CC1EEDE1E810AA21BC3540
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/9be4cafe-9a4a-3f68-9d9b-eb4b25efa2b7.roa
Signing time: Wed 11 Jun 2025 11:48:34 +0000
ROA not before: Wed 11 Jun 2025 11:48:34 +0000
ROA not after: Tue 09 Sep 2025 11:48:34 +0000
asID: 399970
IP address blocks: 149.112.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 11 Jun 2025 12:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:27:cc:1e:ed:e1:e8:10:aa:21:bc:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
Validity
Not Before: Jun 11 11:48:34 2025 GMT
Not After : Sep 9 11:48:34 2025 GMT
Subject: CN=664f62c6-6af5-4b27-a5b3-c8013650ae32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:fa:e0:37:d6:b3:b7:7f:d3:39:47:18:d1:
ac:b4:72:00:5e:ee:f5:d3:a4:51:ae:ff:82:68:d9:
7f:c4:06:f7:1f:c2:5b:88:9c:2a:60:05:38:1b:86:
cb:64:33:b9:09:fc:da:90:8d:73:de:d2:60:9f:d3:
3f:4f:19:2d:ac:0e:06:da:2b:4a:13:6b:88:9a:76:
15:84:4b:a2:91:90:72:26:35:be:ef:51:45:5c:ca:
c5:16:f0:76:67:76:8d:4c:16:d5:05:98:e4:85:cc:
7f:81:62:4d:77:e7:9e:2d:90:1d:48:f1:27:b4:9a:
8a:91:33:eb:06:a5:08:ca:08:e1:e8:15:bb:64:35:
da:41:c6:6f:77:5e:32:7f:42:8e:21:c1:39:35:36:
ca:44:9b:3d:2f:ae:05:22:c6:84:a3:23:16:e4:5e:
c7:0f:fe:f0:e9:8f:22:d3:d6:b3:5f:8a:99:f4:b5:
a7:bc:e3:69:97:c7:2a:c5:ec:50:be:78:51:b0:04:
85:5d:0a:00:e1:98:59:34:f3:03:7b:ab:1c:64:f3:
36:de:13:a7:e4:71:40:9b:d7:14:7f:b3:44:c3:31:
87:55:5b:40:2e:d1:93:9d:9c:d5:bb:50:a1:0d:5b:
06:31:06:92:30:9c:50:9e:d8:6d:b8:07:61:24:c5:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B7:B0:5F:5E:0F:E3:B1:3A:7E:19:3B:B7:63:10:F6:F2:FD:B0:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/9be4cafe-9a4a-3f68-9d9b-eb4b25efa2b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
X509v3 Authority Key Identifier:
keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:93:fd:54:9e:da:58:ea:0b:6b:63:6c:79:58:50:ff:58:d0:
10:21:a9:e4:7f:d5:74:36:eb:4d:e4:8c:4f:61:37:eb:14:ed:
c6:28:35:90:2f:ab:87:93:c5:d7:a6:7a:27:f7:5c:cb:c3:6b:
82:3a:f5:7e:9e:62:30:db:ef:0b:7c:15:59:ef:de:98:7b:2f:
34:03:e7:c4:89:3c:3b:5c:99:68:82:64:e9:90:7a:d7:69:b4:
26:35:24:41:26:b8:2f:ff:c2:96:1f:d0:40:57:cc:3e:a0:02:
3d:7e:da:58:e4:7d:78:6f:6f:6c:7f:89:28:d7:27:19:73:e1:
49:97:93:b9:da:51:ed:cb:ee:9b:31:c0:b6:1b:b4:db:5b:93:
ce:de:4f:84:5f:c7:7b:29:41:4c:b4:73:9a:ad:58:4d:c2:56:
fc:13:ac:3f:20:0b:8d:b9:74:ad:f4:b8:67:66:b0:57:95:37:
da:54:36:9f:91:12:96:be:1e:42:56:0a:f2:68:40:b4:5f:69:
bf:af:93:95:81:53:fd:7a:f1:a8:0e:b7:3e:fc:9f:ff:28:a6:
fa:e4:bd:68:7f:79:ad:3d:f9:96:12:12:87:c3:2e:73:92:c3:
8c:e0:73:ab:76:56:bb:b6:c2:6d:cf:58:24:1b:4b:93:22:dd:
3e:48:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:04 2025 by rpki-client