Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6f232e9f-07ce-3e93-b01d-1d89887d1f96.roa
File: 6f232e9f-07ce-3e93-b01d-1d89887d1f96.roa (raw, json)
Hash identifier: SVmOk/Q/DLCVvJoVpwUIX0ggz7XtmP5P2YY0T57teBE=
Subject key identifier: A9:9D:5D:0C:2F:B8:CC:3E:F2:F0:36:A7:DE:40:00:4D:32:46:34:62
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727CE62760B748558E9DC40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6f232e9f-07ce-3e93-b01d-1d89887d1f96.roa
Signing time: Fri 30 May 2025 19:11:38 +0000
ROA not before: Fri 30 May 2025 19:11:38 +0000
ROA not after: Thu 28 Aug 2025 19:11:38 +0000
asID: 13371
IP address blocks: 152.16.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:ce:62:76:0b:74:85:58:e9:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:38 2025 GMT
Not After : Aug 28 19:11:38 2025 GMT
Subject: CN=fad33791-efec-46aa-96d6-5b93c65e038f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:52:7a:c5:4c:ab:97:fc:17:4c:df:06:a9:
7e:77:d9:f3:51:26:52:cb:c4:75:3c:0f:fd:3f:a1:
94:94:24:20:42:16:ea:08:f6:b8:73:e5:6f:77:89:
5b:7f:ad:cb:55:de:00:9e:1e:58:03:48:bb:09:1d:
e3:0a:a9:8d:08:f1:00:3c:13:ca:d6:a9:a1:05:ec:
87:f1:ad:98:f1:6c:d8:c8:c9:65:d2:d4:c2:93:9e:
8a:10:56:12:d4:09:1b:dd:db:4e:4c:fe:0a:62:88:
b5:4c:20:bf:c3:6e:f4:96:f0:da:4b:32:95:33:2d:
ac:c4:2b:db:66:80:d7:e1:f3:88:7b:86:02:25:8b:
02:2c:a1:ce:4a:28:7b:48:61:17:6c:51:b2:3b:70:
48:34:61:8e:2d:57:e7:56:94:96:0c:ba:28:54:61:
8a:9b:71:5a:94:8f:a7:d5:06:c3:82:9b:9b:14:81:
18:64:ea:e2:05:9e:70:bc:11:48:20:22:b6:fc:9b:
87:bb:76:1e:35:c7:ec:47:01:6e:6f:85:14:ad:5a:
e9:2f:c9:3e:59:fb:4a:66:ec:86:01:98:f1:52:45:
1b:a3:aa:1c:5f:83:1d:a9:7c:2b:0b:12:17:4e:d4:
a7:7b:d4:ee:16:88:4d:6e:d2:67:13:ae:60:e2:8e:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:5D:0C:2F:B8:CC:3E:F2:F0:36:A7:DE:40:00:4D:32:46:34:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6f232e9f-07ce-3e93-b01d-1d89887d1f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:32:fb:ff:e5:69:6e:8e:bc:dc:79:6b:4d:59:e1:e1:78:20:
4d:bb:19:e2:8a:9b:68:08:7a:26:e8:9b:14:2d:58:f2:b1:e7:
01:c9:4a:97:58:5f:e2:44:b1:9d:6c:2b:6e:8a:72:56:16:ff:
de:bc:9a:9f:35:f1:ae:f6:13:1d:20:1c:1d:ea:51:56:cb:fa:
cf:7c:fd:63:3b:34:10:f4:be:4d:0c:9f:88:75:6a:c4:61:d9:
26:be:a0:c0:79:8e:1b:27:3f:c5:17:ef:4f:7a:78:99:81:56:
8f:7b:98:88:21:f6:84:85:8b:37:b2:76:05:d8:8e:15:dc:07:
dd:df:19:12:d8:b3:9f:17:5e:ae:54:46:87:5b:cf:f2:59:1f:
47:f3:f2:3e:2d:60:9f:24:5e:6f:c0:3f:d4:ff:58:23:cb:75:
bc:82:9e:88:e7:25:43:f2:42:b1:38:58:c6:49:bf:17:d6:f4:
95:6e:3f:76:5e:8e:05:14:10:46:6a:68:07:de:b0:db:ff:88:
0a:fd:7c:7e:07:6d:52:dc:c0:4e:a1:04:09:bc:0d:34:16:e9:
fa:ac:b3:6c:24:62:d0:db:e7:d0:75:7e:d8:06:9f:80:ff:80:
e2:d8:ef:17:be:80:f2:3d:38:67:7a:d3:f9:a5:a8:03:69:61:
89:76:0c:e8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoHJ85idgt0hVjp3EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzOFoXDTI1MDgyODE5MTEzOFowLzEtMCsGA1UEAxMk
ZmFkMzM3OTEtZWZlYy00NmFhLTk2ZDYtNWI5M2M2NWUwMzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLVSesVMq5f8F0zfBql+d9nzUSZSy8R1PA/9
P6GUlCQgQhbqCPa4c+Vvd4lbf63LVd4Anh5YA0i7CR3jCqmNCPEAPBPK1qmhBeyH
8a2Y8WzYyMll0tTCk56KEFYS1Akb3dtOTP4KYoi1TCC/w270lvDaSzKVMy2sxCvb
ZoDX4fOIe4YCJYsCLKHOSih7SGEXbFGyO3BINGGOLVfnVpSWDLooVGGKm3FalI+n
1QbDgpubFIEYZOriBZ5wvBFIICK2/JuHu3YeNcfsRwFub4UUrVrpL8k+WftKZuyG
AZjxUkUbo6ocX4MdqXwrCxIXTtSne9TuFohNbtJnE65g4o4fTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKmdXQwvuMw+8vA2p95AAE0yRjRiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNmYyMzJlOWYtMDdjZS0z
ZTkzLWIwMWQtMWQ4OTg4N2QxZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHDL7/+Vpbo683HlrTVnh4XggTbsZ4oqbaAh6JuibFC1Y8rHnAclKl1hf
4kSxnWwrbopyVhb/3ryanzXxrvYTHSAcHepRVsv6z3z9Yzs0EPS+TQyfiHVqxGHZ
Jr6gwHmOGyc/xRfvT3p4mYFWj3uYiCH2hIWLN7J2BdiOFdwH3d8ZEtiznxderlRG
h1vP8lkfR/PyPi1gnyReb8A/1P9YI8t1vIKeiOclQ/JCsThYxkm/F9b0lW4/dl6O
BRQQRmpoB96w2/+ICv18fgdtUtzATqEECbwNNBbp+qyzbCRi0Nvn0HV+2AafgP+A
4tjvF76A8j04Z3rT+aWoA2lhiXYM6A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:29:18 2025 by rpki-client