Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d69de2be-b168-3ae5-944b-ddc6299e8981.roa
File: d69de2be-b168-3ae5-944b-ddc6299e8981.roa (raw, json)
Hash identifier: xQCyzkhcgecsKKbZN4DngybQImEl3KsKoa+AR3gtzK0=
Subject key identifier: 5E:1A:31:E7:C7:97:C5:DF:25:81:CD:7C:1E:12:1D:B1:76:28:B2:36
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727CD90228F69794C7D4580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d69de2be-b168-3ae5-944b-ddc6299e8981.roa
Signing time: Fri 30 May 2025 19:11:37 +0000
ROA not before: Fri 30 May 2025 19:11:37 +0000
ROA not after: Thu 28 Aug 2025 19:11:37 +0000
asID: 81
IP address blocks: 128.109.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:cd:90:22:8f:69:79:4c:7d:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:37 2025 GMT
Not After : Aug 28 19:11:37 2025 GMT
Subject: CN=30cfd9a7-5884-4524-bf78-3ddaae2213cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:ee:02:d6:af:9e:96:b7:f0:2a:bd:81:c7:
43:43:ab:56:cb:8b:1e:6b:7a:db:8c:69:a6:48:44:
65:c1:cb:cd:45:1e:4e:a7:88:60:a4:18:be:29:fa:
7e:95:93:5f:ba:1f:ad:e7:c1:56:30:11:54:d7:ba:
1f:bb:35:c0:78:bd:de:3a:fa:88:7d:c0:c8:c0:31:
00:42:83:4a:e6:87:9c:ea:5c:ee:1a:82:66:30:f9:
62:cc:a3:17:5a:5d:a6:ec:59:36:78:7f:d9:2b:72:
f2:2d:c1:25:63:38:3b:07:bc:c5:c0:c2:ea:16:f9:
d0:a0:22:dd:d4:ca:aa:77:17:8a:4e:06:2b:ef:1c:
3e:cc:db:60:9f:bb:70:3a:b2:d5:9f:6d:44:8e:cc:
28:68:07:a9:60:41:db:9f:a1:e3:f7:ae:0b:b4:99:
74:51:64:91:16:66:fa:81:74:b4:01:3a:d5:e8:1d:
1b:73:50:d8:bf:bc:e9:0e:d3:fe:62:da:b6:2c:64:
7a:7a:74:c6:0a:0b:2a:a1:0e:67:78:8b:d8:66:20:
13:cc:57:b4:da:85:7d:b0:ec:16:ae:e1:5f:17:fd:
dc:33:03:e5:eb:fa:f0:d0:6c:0d:45:e6:03:a7:4e:
ff:08:c7:8a:a9:3a:5d:24:0a:fd:28:5f:7b:20:e9:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:31:E7:C7:97:C5:DF:25:81:CD:7C:1E:12:1D:B1:76:28:B2:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d69de2be-b168-3ae5-944b-ddc6299e8981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:21:fa:46:78:31:a0:2b:fd:c2:47:b8:cc:3e:aa:85:04:2a:
7b:a8:42:f7:95:10:c0:e4:d6:c7:6c:f5:b8:0e:0e:41:9a:46:
7a:df:2b:f6:02:38:da:90:2b:d8:a6:09:14:d3:3d:e6:bd:e4:
f3:81:00:95:70:dd:5a:0b:15:52:db:78:09:c4:c2:bf:e5:e6:
47:52:c7:22:2e:98:a0:cf:27:ae:a6:82:e0:33:7a:dd:7f:c7:
7c:9c:d7:90:67:ae:cb:8f:8c:24:06:fc:57:a7:44:59:25:1f:
e1:a4:ac:fa:08:0b:ea:77:80:1b:fd:42:20:d1:00:15:e8:4a:
3c:9c:96:76:3f:53:af:54:2f:17:de:cb:62:27:2d:05:f9:a1:
5e:c0:fb:18:75:70:11:c1:6c:7d:dc:d3:79:43:b9:95:03:26:
45:01:06:a5:b7:16:1e:89:f0:0a:56:d7:03:60:3b:b3:51:ae:
d3:29:cf:16:ae:38:d9:00:df:97:a3:32:a1:79:9b:45:52:4b:
77:1f:3d:e2:f4:9a:56:20:92:2e:67:90:37:fd:b5:8f:0c:8c:
27:c7:64:e4:ec:2b:a3:9a:ce:05:55:26:ef:5c:6b:d7:4a:9d:
14:10:19:ac:f0:4d:63:e9:50:24:25:be:1c:68:4a:7c:2f:57:
51:45:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:25:05 2025 by rpki-client