Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bdce7f31-c78a-333f-8b1a-20886533d6d8.roa
File: bdce7f31-c78a-333f-8b1a-20886533d6d8.roa (raw, json)
Hash identifier: JKQASGYBKPZfBGAuvFYk2gfqmA4KzI8j/jFHonQqPCQ=
Subject key identifier: B0:BE:D9:C0:D7:D9:2F:CF:1D:00:28:A4:3B:6B:BC:5A:39:69:FD:00
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D6F3CE663C7BDA783700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bdce7f31-c78a-333f-8b1a-20886533d6d8.roa
Signing time: Fri 30 May 2025 19:11:42 +0000
ROA not before: Fri 30 May 2025 19:11:42 +0000
ROA not after: Thu 28 Aug 2025 19:11:42 +0000
asID: 20197
IP address blocks: 204.84.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d6:f3:ce:66:3c:7b:da:78:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:42 2025 GMT
Not After : Aug 28 19:11:42 2025 GMT
Subject: CN=2f49101a-0b66-43aa-87b8-51d33ee20ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:d9:32:ba:31:6e:59:40:50:44:97:fa:39:
0c:a6:fb:d7:74:81:8d:5b:30:f3:52:9a:4b:ff:d3:
f8:eb:0f:5a:71:b3:62:f9:ef:36:70:d9:a1:7b:81:
e1:36:9c:5d:9a:2a:e3:da:cf:4e:ec:58:2c:31:ad:
5d:09:a6:68:e0:af:5a:30:5f:98:40:df:b7:0d:4d:
c7:3d:7c:57:de:3b:ad:b9:c5:a4:fb:bd:20:b6:50:
6f:41:34:1b:3c:ef:fa:6c:c9:1d:ce:6f:b6:9b:da:
6d:0a:d5:75:eb:17:4c:f9:6f:c5:6b:24:42:95:12:
c5:25:fd:10:bd:0e:ab:15:ea:21:4b:e6:37:f9:d7:
14:62:d9:91:20:9b:65:c2:98:d1:ff:24:b8:a7:c8:
3a:65:03:f6:eb:3f:f5:b1:0f:24:84:06:ac:e3:8a:
d0:0b:b2:92:6f:88:e7:95:3d:01:9f:37:30:59:63:
fe:1b:44:f4:34:ad:bf:46:95:76:7f:66:96:47:eb:
dd:88:c0:7d:ff:fd:15:4e:c1:b8:54:7c:e6:b8:61:
b5:cc:94:92:b2:5e:b8:77:4b:50:00:be:d8:63:92:
4f:a0:ae:7c:aa:75:49:5d:07:d9:15:24:d6:fa:39:
86:e2:a4:f0:05:07:47:f8:9c:18:e0:fa:2c:ac:c7:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BE:D9:C0:D7:D9:2F:CF:1D:00:28:A4:3B:6B:BC:5A:39:69:FD:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bdce7f31-c78a-333f-8b1a-20886533d6d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:07:01:86:68:fc:a0:d3:cf:64:eb:91:52:83:eb:7c:5b:59:
b8:5f:6b:ee:57:4d:c6:3c:6e:64:cf:0f:74:45:2d:25:3c:9b:
82:4f:c0:1b:45:64:0b:a9:b2:31:39:c3:39:28:de:8a:10:fa:
bf:08:ed:12:a6:c0:92:f0:e8:41:3a:c9:54:0e:b5:a4:53:11:
ed:83:1a:db:c7:49:01:fb:6a:dc:49:07:20:27:5a:d8:9c:51:
9b:b4:34:a1:fb:9c:84:63:fd:a1:91:2e:23:9e:a6:b7:b5:7e:
37:c4:d8:85:5c:0d:fb:13:af:84:94:45:a2:42:25:62:3a:8c:
ff:18:80:66:80:7f:ba:c2:96:7a:71:63:60:b2:ea:18:74:91:
fb:8b:5e:5d:fd:a6:c9:cc:73:c7:d1:ed:c6:32:1c:2c:88:b6:
88:6e:7c:cd:9d:c0:15:4a:c3:cc:fe:3f:b9:63:10:7a:4f:cd:
fa:dc:d0:bb:0a:af:b9:07:c4:78:c5:7a:31:dc:c7:d5:02:d1:
26:e3:2d:eb:7b:78:ea:8b:14:e0:e7:eb:ad:c0:ea:6e:18:8c:
c6:43:66:c0:c0:d5:cd:d0:17:c6:d1:dd:a0:1d:f8:92:f5:aa:
84:8e:55:4e:49:9f:81:8f:7b:3e:9f:5e:ec:d9:84:2d:98:f5:
d0:7b:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:02 2025 by rpki-client