Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfdde98b-02dd-392c-97ea-32b59835561d.roa
File: bfdde98b-02dd-392c-97ea-32b59835561d.roa (raw, json)
Hash identifier: oQXQNOj87jwkGudMkX1ihskddY8yrskBoGjlux6z55A=
Subject key identifier: C1:DD:31:ED:04:15:82:85:4D:63:06:45:18:1F:CF:AC:2F:41:20:9C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D6C27E8D801A88087200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfdde98b-02dd-392c-97ea-32b59835561d.roa
Signing time: Fri 30 May 2025 19:11:41 +0000
ROA not before: Fri 30 May 2025 19:11:41 +0000
ROA not after: Thu 28 Aug 2025 19:11:41 +0000
asID: 11442
IP address blocks: 204.84.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d6:c2:7e:8d:80:1a:88:08:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:41 2025 GMT
Not After : Aug 28 19:11:41 2025 GMT
Subject: CN=dd57597f-075f-41df-98fc-27679ddb771c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:a4:cb:30:19:00:bf:e6:2a:b5:8f:3c:dc:
de:c3:2e:69:71:ca:f5:9d:73:c6:6d:de:d7:f8:89:
b2:69:32:c6:10:64:57:4c:8e:22:69:7d:bf:b3:2d:
2d:70:87:12:d6:d1:bc:5d:51:68:40:52:91:a6:03:
2b:30:aa:51:cb:96:6d:2d:61:2d:f0:11:a9:c5:2a:
56:83:33:cf:82:86:a3:62:3b:d3:cb:ae:86:35:b9:
5a:38:ff:95:1d:2c:7c:fe:41:29:4e:3f:bf:f9:84:
df:59:4e:a4:c5:01:1a:d1:78:8b:65:61:de:d0:26:
9c:7d:90:1f:96:25:b5:56:86:dc:c7:6a:e0:fd:50:
1a:ef:21:22:f4:10:1a:ff:2e:9c:3c:61:5f:de:2f:
98:9d:46:2a:d7:c9:2a:0f:b7:56:be:0c:c6:8c:4a:
0f:a4:a1:7a:c2:23:b0:cd:73:57:f0:98:c0:50:1a:
ba:e4:06:bc:b4:a4:6a:f2:1e:3b:ea:26:06:54:7d:
bb:d2:cf:33:6d:5d:2b:04:82:76:76:15:08:8f:8c:
5d:61:9d:b3:ee:ba:b5:23:33:3b:c7:fc:e3:78:ca:
7f:23:af:f6:a0:8f:f5:2d:0a:b9:ff:21:e4:8d:b4:
74:be:99:b2:6f:4d:1a:5a:6e:5d:be:ec:07:53:03:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:31:ED:04:15:82:85:4D:63:06:45:18:1F:CF:AC:2F:41:20:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfdde98b-02dd-392c-97ea-32b59835561d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:af:dc:0b:36:ea:de:fc:9d:5c:db:fd:ee:6e:16:d4:8f:35:
db:7d:29:b9:3a:bb:30:d1:84:53:8e:e4:59:25:c8:a8:30:31:
23:6e:7b:04:0f:3e:59:db:8c:6c:47:18:98:8f:4a:33:eb:dc:
63:7f:97:60:59:c5:6b:23:fd:e9:f7:70:81:f0:de:4f:07:d6:
bd:0f:16:c1:9e:bf:ff:3e:d0:97:a9:e2:90:83:ee:4a:e4:71:
3a:33:22:ac:22:ec:cf:6e:22:33:44:c0:8d:0b:ee:15:0b:5f:
89:80:a1:30:f2:75:3b:39:15:93:80:53:fd:4f:f4:39:04:86:
39:a1:ee:04:37:94:5f:61:85:05:62:2b:f2:7c:0f:9b:88:aa:
61:b2:45:f8:4a:e1:ec:ee:2f:fb:99:61:f0:b2:b7:2e:3b:ba:
a2:17:1d:75:65:b1:17:2f:6a:19:42:42:02:81:00:9d:f7:5e:
4d:32:7c:c5:74:ac:a1:3d:16:67:a9:7f:f0:75:61:91:ba:45:
fd:07:d5:d9:f3:1d:ff:14:8e:19:eb:a4:2b:3a:cf:5c:a8:ec:
94:eb:6c:0c:52:9c:ba:31:d8:bc:a1:3b:d8:54:e7:6d:26:7b:
1e:05:d9:a5:5a:da:12:27:60:84:09:fa:ea:7f:f2:d6:4c:97:
54:87:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:24:56 2025 by rpki-client