Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/224c271f-b449-339a-b3f6-186cd13b0986.roa
File: 224c271f-b449-339a-b3f6-186cd13b0986.roa (raw, json)
Hash identifier: QN9yxyP8A8Mamg4+Zg0K/w/cEySvw9tg7RCWSahZ/pI=
Subject key identifier: F1:4A:51:EE:1C:D1:B2:8F:C4:03:DD:CE:81:CA:08:1B:1F:75:08:42
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727CEF8A3B9E4785C2AF780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/224c271f-b449-339a-b3f6-186cd13b0986.roa
Signing time: Fri 30 May 2025 19:11:38 +0000
ROA not before: Fri 30 May 2025 19:11:38 +0000
ROA not after: Thu 28 Aug 2025 19:11:38 +0000
asID: 81
IP address blocks: 152.22.72.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:ce:f8:a3:b9:e4:78:5c:2a:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:38 2025 GMT
Not After : Aug 28 19:11:38 2025 GMT
Subject: CN=b215a634-aa22-4ee7-9d77-b86b561a7c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:40:ce:74:1e:7a:8d:fe:7c:31:a1:ff:66:
3f:48:91:a9:b0:e3:78:12:d7:72:5b:26:a3:4c:bd:
ad:09:a3:c7:2c:96:00:f7:96:0a:ce:b8:d8:ea:dc:
9b:6f:8a:ca:04:53:33:e9:b8:ad:a1:70:c5:1f:8a:
3a:6c:4c:a1:bb:0f:57:55:9b:32:ed:9d:2e:3a:78:
9c:e6:2b:d0:9a:40:75:18:e8:68:9e:84:8f:0b:d0:
fd:f5:51:60:a8:d5:15:61:4a:bb:ba:50:23:e9:7f:
e0:a0:9d:18:56:55:80:e9:90:4a:89:67:3d:2d:18:
8c:f6:1c:9b:1e:47:04:fb:91:2b:67:d3:35:1b:2d:
33:ea:22:2d:f1:53:27:eb:00:17:c5:83:55:a3:c1:
a4:35:40:f5:6e:b3:a0:fd:31:d6:ee:4e:c6:53:66:
39:54:df:b4:c1:ac:29:c8:ba:81:77:06:d4:8e:7b:
d7:ad:21:98:5a:d3:38:00:60:34:1f:06:4c:29:82:
7f:60:e5:6f:21:90:3b:00:a9:64:e8:3b:42:7b:ef:
1e:a8:c9:d6:30:23:cb:be:50:cf:4a:8c:6a:c9:84:
e3:8e:87:fd:d5:b1:51:57:3e:3c:7c:e0:2c:ec:c9:
9a:2c:05:43:24:f1:38:f7:a9:8d:8c:84:ee:df:95:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:51:EE:1C:D1:B2:8F:C4:03:DD:CE:81:CA:08:1B:1F:75:08:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/224c271f-b449-339a-b3f6-186cd13b0986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:78:60:53:07:14:cb:de:dd:69:ac:d6:7a:ac:67:5b:5d:43:
c5:f8:ef:44:9c:37:c3:c9:54:3d:49:37:33:2d:77:5a:2a:60:
79:9e:6f:aa:0e:0a:ac:72:74:c7:c5:fa:36:3a:8d:66:42:a2:
bd:bf:9c:e9:f0:e2:6c:a3:79:15:22:04:f3:ba:1b:8b:7d:91:
20:99:2e:3b:4e:38:69:3c:a2:d3:a6:01:1d:ac:60:80:34:e6:
8c:a5:e8:13:fb:07:3a:ba:ba:a0:bc:3e:99:0a:c3:a0:4f:e2:
1c:17:70:d6:85:66:45:df:3a:7a:0a:09:4b:33:ea:20:00:03:
9b:9c:d1:8d:65:70:5c:d3:5b:17:db:c9:54:06:fd:6b:8f:ab:
7f:17:8f:50:30:ef:c3:a4:b5:20:e3:b2:6c:40:48:74:61:e8:
5d:f8:8e:c9:a2:c9:e9:dc:e8:5a:d9:c4:3d:e8:50:e8:59:61:
7b:d4:a2:86:16:4a:22:fc:79:d9:4d:bb:9f:c9:3d:aa:f5:be:
20:bb:69:8d:c4:a6:12:a4:66:60:9b:58:b4:aa:1c:80:b8:92:
b1:0c:82:ff:2f:db:9f:ac:e8:8e:46:dc:3a:5e:ad:38:8c:33:
80:ba:1c:24:5b:36:b4:cf:1d:c7:b7:0b:51:84:70:99:89:a4:
be:1e:05:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ874o7nkeFwq94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzOFoXDTI1MDgyODE5MTEzOFowLzEtMCsGA1UEAxMk
YjIxNWE2MzQtYWEyMi00ZWU3LTlkNzctYjg2YjU2MWE3YzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDpAznQeeo3+fDGh/2Y/SJGpsON4EtdyWyaj
TL2tCaPHLJYA95YKzrjY6tybb4rKBFMz6bitoXDFH4o6bEyhuw9XVZsy7Z0uOnic
5ivQmkB1GOhonoSPC9D99VFgqNUVYUq7ulAj6X/goJ0YVlWA6ZBKiWc9LRiM9hyb
HkcE+5ErZ9M1Gy0z6iIt8VMn6wAXxYNVo8GkNUD1brOg/THW7k7GU2Y5VN+0wawp
yLqBdwbUjnvXrSGYWtM4AGA0HwZMKYJ/YOVvIZA7AKlk6DtCe+8eqMnWMCPLvlDP
SoxqyYTjjof91bFRVz48fOAs7MmaLAVDJPE496mNjITu35XLuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFKUe4c0bKPxAPdzoHKCBsfdQhCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjI0YzI3MWYtYjQ0OS0z
MzlhLWIzZjYtMTg2Y2QxM2IwOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAh4YFMHFMve3Wms1nqsZ1tdQ8X470ScN8PJVD1JNzMtd1oqYHmeb6oO
CqxydMfF+jY6jWZCor2/nOnw4myjeRUiBPO6G4t9kSCZLjtOOGk8otOmAR2sYIA0
5oyl6BP7Bzq6uqC8PpkKw6BP4hwXcNaFZkXfOnoKCUsz6iAAA5uc0Y1lcFzTWxfb
yVQG/WuPq38Xj1Aw78OktSDjsmxASHRh6F34jsmiyenc6FrZxD3oUOhZYXvUooYW
SiL8edlNu5/JPar1viC7aY3EphKkZmCbWLSqHIC4krEMgv8v25+s6I5G3DperTiM
M4C6HCRbNrTPHce3C1GEcJmJpL4eBRA=
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:35:44 2025 by rpki-client