Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/01d2a089-7974-3f06-9091-08d862cf3352.roa
File: 01d2a089-7974-3f06-9091-08d862cf3352.roa (raw, json)
Hash identifier: SpafxE2urd0hruy9vHMhKTx92ATUzjfHQ3rff51I7Xg=
Subject key identifier: 15:F6:FE:25:97:14:19:DB:19:49:93:CF:D2:29:14:03:06:36:2E:48
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D5E0F91DA22F9F125180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/01d2a089-7974-3f06-9091-08d862cf3352.roa
Signing time: Fri 30 May 2025 19:11:41 +0000
ROA not before: Fri 30 May 2025 19:11:41 +0000
ROA not after: Thu 28 Aug 2025 19:11:41 +0000
asID: 394165
IP address blocks: 198.85.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d5:e0:f9:1d:a2:2f:9f:12:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:41 2025 GMT
Not After : Aug 28 19:11:41 2025 GMT
Subject: CN=d627658d-bca1-4eb5-8405-132ab79ce428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:ce:27:98:5c:c8:b8:42:a8:46:c3:81:f4:
b3:ec:57:1a:9f:a2:75:85:7d:39:09:0e:68:22:cf:
0a:a5:f1:22:8d:9b:df:66:3d:32:fb:5e:70:aa:de:
32:26:46:45:c3:0f:1e:ca:89:70:59:30:73:96:36:
11:c1:bf:d7:77:a0:10:11:23:6a:da:06:23:c5:60:
bf:c5:14:42:60:5a:39:df:62:d6:f3:82:1a:d9:31:
91:1c:91:63:bb:06:c0:e1:b2:9a:ac:d1:4c:03:90:
ec:15:3e:e2:ae:0c:79:90:df:24:35:3b:4d:8e:d2:
7a:0c:77:3b:97:ea:17:5d:c7:63:74:53:0a:d9:fa:
54:ec:f6:6c:a1:20:8a:24:36:e2:26:a1:2c:2a:b1:
4f:f3:87:5c:e8:48:87:9b:b5:fb:0e:0a:70:db:18:
d4:07:ae:66:8f:03:d7:58:27:b2:28:39:3a:a9:9b:
b5:26:04:f2:10:17:d0:30:c9:30:f2:d1:9e:05:da:
6f:0d:f8:d1:7e:78:7a:af:3a:ce:3e:0a:95:78:66:
4f:77:da:3d:64:00:db:2d:42:c6:67:48:2d:fd:be:
77:6b:22:aa:96:64:35:a8:14:81:3a:2e:e8:41:d4:
81:18:4d:8f:a8:f6:24:f8:11:a1:89:9a:88:8b:01:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:FE:25:97:14:19:DB:19:49:93:CF:D2:29:14:03:06:36:2E:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/01d2a089-7974-3f06-9091-08d862cf3352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:2a:fc:6c:35:10:87:0c:06:64:8e:fa:5b:5c:db:f1:00:71:
4c:d5:80:43:ab:79:e0:7b:f4:2d:92:70:f6:85:44:65:a8:79:
bf:90:7e:29:2b:67:3e:ba:49:65:45:f1:5c:84:5c:4e:d8:da:
6e:c0:ec:32:c7:9f:b4:ec:ea:33:82:df:7a:1a:6b:15:da:60:
7e:0f:15:d5:69:e6:cb:1f:02:88:0d:0b:96:3b:54:d5:45:d8:
6f:92:38:88:5e:da:3d:2e:62:e3:08:8b:20:e6:74:02:1d:ed:
2c:da:5f:74:b9:c5:f4:0d:08:da:8f:4c:d0:df:e7:86:18:40:
06:ea:39:0f:48:8d:f6:3a:7a:c8:1b:dd:8a:f3:90:ed:49:38:
3c:68:25:2f:3c:86:97:1e:a0:fa:d6:10:fa:cc:38:e7:81:a8:
6f:07:42:74:e9:03:4c:dc:36:40:43:52:ee:e5:c9:d1:79:59:
53:e3:71:0a:1a:e6:1b:b1:42:7b:ef:13:17:4d:b6:5c:43:a9:
35:b5:8f:fe:80:e8:ee:0e:59:7e:13:b9:f2:00:30:0c:94:9a:
43:62:73:8f:2b:10:a7:22:56:de:df:45:77:27:b1:4b:5c:94:
da:fd:a1:ca:a4:6e:e0:f3:3e:9d:34:3a:89:a3:0a:fb:66:ea:
07:76:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:26 2025 by rpki-client