Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad3f2da9-02b4-32d8-bf12-6b6515fb600e.roa
File: ad3f2da9-02b4-32d8-bf12-6b6515fb600e.roa (raw, json)
Hash identifier: p77vlRpcKY1mRPtWHOOGj7AsFnX3wAP9U3t9UgMKJRk=
Subject key identifier: EA:75:A4:D5:0D:9D:D1:40:25:C5:6F:D4:3B:B4:CB:EA:AF:97:B9:7E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D4C5FB03BC27692F6980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad3f2da9-02b4-32d8-bf12-6b6515fb600e.roa
Signing time: Fri 30 May 2025 19:11:41 +0000
ROA not before: Fri 30 May 2025 19:11:41 +0000
ROA not after: Thu 28 Aug 2025 19:11:41 +0000
asID: 81
IP address blocks: 152.46.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d4:c5:fb:03:bc:27:69:2f:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:41 2025 GMT
Not After : Aug 28 19:11:41 2025 GMT
Subject: CN=9f7beeed-1df0-4d0c-8d58-8e51251ce2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:49:74:d2:cb:fe:c8:d1:88:3e:f1:1d:3d:
2a:8e:6f:4d:47:a3:db:f7:1d:11:d7:de:5a:70:3e:
46:f7:ad:d8:89:85:f8:b7:19:06:cf:2e:bf:e5:77:
44:05:1a:6b:77:ab:53:25:a8:10:cc:01:2a:ab:13:
fa:60:bf:ae:d4:fc:66:91:b3:70:02:ac:0f:45:a8:
2a:2b:a1:86:28:57:92:76:fd:a0:0e:b2:1d:da:21:
69:59:98:33:4b:3e:93:fd:2c:02:e6:2b:7e:ac:a9:
8f:3f:7b:66:65:e7:c4:99:5b:50:5f:14:9f:17:02:
cd:7f:3f:b0:00:5d:7d:5c:92:c5:4c:0c:a2:51:9e:
ba:e5:32:78:b6:2f:14:63:d2:7b:32:6a:bb:84:87:
ad:5d:2f:5b:4c:29:47:b8:86:79:13:cf:28:14:fb:
84:b5:f6:a0:40:19:21:8f:1c:a9:e5:55:d0:b4:81:
b3:1f:cc:0a:98:76:49:c8:2a:12:cb:ad:f7:9f:fe:
af:41:95:49:c2:a0:ac:c9:76:e0:8c:0c:0b:76:d4:
7a:cd:df:65:cc:0d:2f:a8:92:d4:6f:08:a9:74:1b:
a7:a8:ac:be:2e:54:ea:58:d7:e9:3e:36:a8:43:f3:
18:3e:ae:12:67:17:84:04:83:ba:19:5f:d0:52:44:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:A4:D5:0D:9D:D1:40:25:C5:6F:D4:3B:B4:CB:EA:AF:97:B9:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad3f2da9-02b4-32d8-bf12-6b6515fb600e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:fa:26:e0:1e:b3:78:6d:7b:ff:46:ab:70:fa:63:16:45:d8:
49:22:91:98:3f:01:57:36:e2:ea:34:97:d5:38:41:7a:6b:5b:
f8:11:16:0b:be:04:ee:aa:40:55:a7:68:aa:de:99:9c:60:92:
e5:0c:49:a5:4f:73:17:1c:12:1a:0f:d0:5a:0b:a1:dd:bd:29:
0d:bf:08:13:ef:c3:fb:f6:ea:a6:97:54:35:ed:25:21:29:e6:
92:0c:8d:3d:2d:ad:b0:ed:15:98:61:a9:33:17:20:fa:67:09:
1a:86:69:81:df:a1:92:22:5b:25:a4:f5:39:01:54:3a:c6:4d:
63:33:3c:d9:a6:74:a2:e6:1d:e6:df:b6:4d:e3:c8:60:a7:aa:
89:9a:26:b1:ae:a8:36:d5:29:1b:e7:97:08:d5:5b:7c:18:bb:
3f:14:e1:98:3a:e1:2d:da:16:3c:a3:26:15:72:a3:2d:53:3e:
38:a9:5e:42:8c:da:be:60:8c:f6:c3:31:8d:33:8d:55:c6:13:
89:34:98:85:b7:11:5c:3d:3e:8a:ba:fe:58:49:74:bc:a8:24:
81:09:a4:0d:f9:75:ba:87:75:21:7d:f2:53:cb:0c:f5:a7:34:
3b:6d:86:d5:05:99:0b:d5:09:a1:c9:87:05:9f:f5:93:b9:1d:
67:17:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:25:00 2025 by rpki-client