Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cd67d10a-0880-36d5-9f0b-487697856486.roa
File: cd67d10a-0880-36d5-9f0b-487697856486.roa (raw, json)
Hash identifier: 9NVLb7WaiWDHGwyEQkcQyRfhwE+Uf/OcP+9rjBaTGz4=
Subject key identifier: A9:6A:86:2C:A7:F2:EA:FE:BC:F0:F3:D7:84:9C:DA:DE:E5:B8:42:A5
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727CDA0F12F5EA0FE87CF80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cd67d10a-0880-36d5-9f0b-487697856486.roa
Signing time: Fri 30 May 2025 19:11:37 +0000
ROA not before: Fri 30 May 2025 19:11:37 +0000
ROA not after: Thu 28 Aug 2025 19:11:37 +0000
asID: 81
IP address blocks: 128.109.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:cd:a0:f1:2f:5e:a0:fe:87:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:37 2025 GMT
Not After : Aug 28 19:11:37 2025 GMT
Subject: CN=78e1ab50-12ed-45c5-bc2e-b3b4beac7812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:76:8f:07:a1:68:46:35:fb:d1:3c:02:00:
a3:c5:9c:13:d5:ca:78:58:10:3d:5e:01:74:ac:f0:
c1:6f:80:65:62:aa:f9:66:10:26:7e:0f:e6:11:e0:
2e:8d:f9:3a:68:14:c4:62:e1:29:72:5c:1a:8b:4b:
4c:41:1b:75:c2:c9:e3:c7:54:6d:ca:29:b7:8a:be:
c1:f1:9a:a7:f6:0c:ee:76:f5:f9:ad:c7:d6:fc:8f:
56:66:fb:fa:73:b7:b1:ce:10:d6:84:a2:b0:3a:85:
7e:04:9e:17:de:59:cd:52:c0:71:e8:4b:67:7d:fa:
37:80:93:42:64:5f:cd:4f:95:6a:68:64:70:a4:f0:
fe:4f:da:e3:f9:91:12:c4:10:cd:75:c7:b0:f8:ec:
a9:d3:2e:84:c8:87:98:56:cc:c4:5f:5a:67:76:63:
65:a0:a0:e1:dc:01:9b:ee:f9:f9:6c:20:e9:67:5b:
cd:72:b5:fa:d9:28:da:46:19:b4:2a:a4:f7:13:85:
41:77:fa:23:a3:9b:4b:ed:3e:16:02:26:cd:96:66:
21:fe:54:a9:f2:6a:77:d4:ed:09:8c:8d:24:c5:71:
c9:9e:3f:c5:66:19:ad:57:ae:01:c5:93:a5:a5:78:
e9:cf:67:f3:a1:9f:39:02:02:98:86:2f:c8:ac:3a:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6A:86:2C:A7:F2:EA:FE:BC:F0:F3:D7:84:9C:DA:DE:E5:B8:42:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cd67d10a-0880-36d5-9f0b-487697856486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:7a:da:6b:9e:11:3f:0e:f2:91:00:ba:a6:5b:2b:39:d9:6f:
0c:18:a6:da:23:47:2a:5b:84:80:9e:6d:37:9b:4e:b8:23:bd:
f5:12:a2:88:a0:27:8c:8c:c5:5a:e5:52:a3:a5:43:a6:2d:e3:
b6:43:fd:87:64:f4:8f:30:f4:71:91:16:52:e5:3c:96:3f:ce:
19:0c:40:d6:05:3c:79:41:0a:0a:83:f8:eb:99:78:11:1c:51:
ad:2b:2b:8b:e5:ad:12:7e:0b:b9:ce:7c:30:6a:00:bc:54:ec:
bf:87:36:44:2f:87:08:f6:aa:c1:e9:aa:3c:0d:bd:30:58:0e:
60:e1:04:aa:28:fb:b8:4e:ea:cd:8d:ad:61:53:1c:59:ca:14:
bc:4d:a8:8f:9f:36:02:2f:d6:18:d2:cd:0b:ad:ca:87:67:5c:
91:76:b4:07:3e:7a:c9:63:81:b8:85:2c:9b:d5:75:83:a5:a3:
39:71:00:ab:bd:49:99:5d:14:06:74:ec:a3:a4:30:4a:4a:3a:
c8:21:2a:94:2a:16:02:6a:d3:f6:8b:67:55:d5:69:0b:41:5f:
52:eb:28:86:11:60:bb:6f:e1:22:ea:ff:36:8d:b1:b5:1e:51:
7a:27:2a:d7:fd:f0:8e:1b:3f:e8:59:25:dd:7b:88:03:48:34:
05:02:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:32:34 2025 by rpki-client