Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21cc0037-5eda-3977-ae63-3a65b0d78926.roa
File: 21cc0037-5eda-3977-ae63-3a65b0d78926.roa (raw, json)
Hash identifier: zsJN8DmdWQ9IaN9yxjmdrqTYLuLJCn1uvbfY3J6BJaw=
Subject key identifier: 02:0E:99:E5:B0:0F:1F:98:34:B9:35:AD:F2:43:D4:BC:24:68:CF:AF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D1F2D333196ECBB7EC00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21cc0037-5eda-3977-ae63-3a65b0d78926.roa
Signing time: Fri 30 May 2025 19:11:39 +0000
ROA not before: Fri 30 May 2025 19:11:39 +0000
ROA not after: Thu 28 Aug 2025 19:11:39 +0000
asID: 53785
IP address blocks: 152.40.0.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d1:f2:d3:33:19:6e:cb:b7:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:39 2025 GMT
Not After : Aug 28 19:11:39 2025 GMT
Subject: CN=7dc617dd-7500-44dd-8dd1-513a502a654d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:d7:3b:4a:9e:2c:2f:58:6e:32:01:e9:f6:
a2:f1:de:47:12:29:3c:dc:5f:96:bd:34:98:fc:56:
1a:43:dc:6a:be:1b:61:12:b7:17:39:e2:07:2a:a1:
de:78:4e:54:d4:85:dc:c9:0a:61:ac:4c:3b:57:90:
f0:04:cb:99:e4:3e:c8:14:c6:7f:44:ca:68:15:ab:
6a:9e:cd:c4:c4:30:cd:2f:dd:10:58:0c:47:81:1b:
54:90:61:ed:64:17:5d:fa:47:0c:73:0c:b4:c6:71:
c6:23:a0:39:df:d2:5a:95:d9:66:9f:0b:38:87:5a:
33:62:46:58:66:80:31:7c:ce:74:62:df:8a:97:ca:
0a:2d:aa:11:5e:86:93:87:14:ef:7d:e8:fb:1f:7a:
1e:8d:fe:9c:ef:0e:b1:5a:f9:17:fb:08:05:d7:ee:
c7:8f:b1:30:bf:f9:c8:7f:9b:be:e7:f1:8d:18:d9:
c2:c1:81:22:53:17:c1:73:6e:86:96:b7:46:40:ff:
77:2d:32:8a:1e:74:cd:bf:80:a9:85:9c:4a:13:1e:
4a:e2:a2:c1:de:18:3e:42:ca:8d:6a:de:f6:de:35:
24:a7:7f:91:93:03:4d:25:32:e4:61:e4:8d:7c:80:
61:bb:27:74:7d:b2:3b:21:7c:fa:c5:a6:7e:3c:e2:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:99:E5:B0:0F:1F:98:34:B9:35:AD:F2:43:D4:BC:24:68:CF:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21cc0037-5eda-3977-ae63-3a65b0d78926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.40.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:30:df:eb:94:2d:c4:eb:38:d3:f0:75:51:80:21:66:b1:c7:
77:f5:46:56:01:01:3b:5e:70:b4:80:f2:7f:7e:a9:03:ba:19:
59:a9:e8:92:e0:6b:03:3c:2c:8b:ce:d4:d3:a4:bc:69:a1:2b:
d6:67:86:37:15:58:d6:d8:f7:87:0a:07:a4:16:9b:7b:8d:3b:
89:97:57:34:83:49:8c:ca:1b:2e:8f:14:c8:9f:da:a4:37:b9:
3b:7d:70:73:d3:38:63:e2:d9:e0:25:54:ad:ee:75:0c:95:5c:
4e:3c:e9:11:8f:bd:e2:94:f6:32:a4:fe:b8:d5:14:97:d9:80:
4f:48:35:78:d2:c5:bb:6d:67:c9:37:a6:63:da:27:e9:85:3e:
69:81:9b:80:e0:24:f1:27:81:69:ed:c0:c1:00:2f:d3:20:75:
22:06:53:b5:0a:dd:0e:5e:01:77:ba:40:47:c9:c1:34:58:98:
a9:43:a7:2b:d6:00:a1:f3:fe:57:21:65:d5:02:20:bc:82:08:
5d:0d:7f:1e:66:03:18:25:10:ee:47:7b:a0:e1:5a:4a:85:25:
b4:55:e0:da:7f:d3:90:09:33:bf:b4:dd:30:2b:af:bd:ba:0b:
de:65:04:71:2e:25:94:ab:6f:ff:a1:1b:af:ca:3e:d1:93:25:
cc:6f:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:12:33 2025 by rpki-client