Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/efb6b6e2-4818-3802-909d-30edb64cf3f7.roa
File: efb6b6e2-4818-3802-909d-30edb64cf3f7.roa (raw, json)
Hash identifier: UK2HyFJEwlw52PmbF6YYVGE84vFlU9HiIJBB4YdzJsE=
Subject key identifier: E6:D0:EE:E4:E6:2B:80:B0:2E:52:AC:DB:3C:AB:B6:35:1E:5E:4E:15
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D2B70B9CACE052FA5460
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/efb6b6e2-4818-3802-909d-30edb64cf3f7.roa
Signing time: Fri 30 May 2025 19:11:40 +0000
ROA not before: Fri 30 May 2025 19:11:40 +0000
ROA not after: Thu 28 Aug 2025 19:11:40 +0000
asID: 81
IP address blocks: 152.45.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d2:b7:0b:9c:ac:e0:52:fa:54:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:40 2025 GMT
Not After : Aug 28 19:11:40 2025 GMT
Subject: CN=e59f271a-954d-486b-aedc-fec8a29fea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:1f:80:9e:0f:0a:f6:c2:55:1e:0c:04:d0:
ad:41:ae:f5:9d:b9:d6:88:22:7b:4c:16:c3:5d:4a:
86:8d:14:74:87:8b:ff:f8:10:00:04:6c:9c:9f:2a:
5b:1d:d4:97:38:d3:08:e4:66:d2:ea:2d:91:e8:66:
03:ed:56:62:22:33:7d:d0:bb:90:e7:87:b6:61:03:
97:cf:f1:e8:b0:de:6d:8c:9f:c6:02:37:78:20:d8:
c2:66:50:e5:08:37:dc:48:be:c1:ab:8e:28:5d:e7:
10:28:34:6c:ae:e5:f1:81:fc:80:27:27:41:0d:e4:
90:ed:53:b2:ff:7f:b7:8e:af:9e:44:85:13:cd:87:
0c:53:20:0a:b0:14:fa:b6:61:c3:0e:df:13:d8:7a:
e9:9a:ff:31:fe:2b:45:86:30:2e:1f:bd:56:b8:e3:
90:aa:6e:40:3c:83:01:45:73:9a:41:21:9f:92:97:
8c:ed:1e:13:64:88:0e:59:96:bb:17:0e:6e:ee:23:
c4:5a:cb:bd:6a:d0:9d:ec:fd:8c:7f:39:01:10:d3:
62:f8:b7:32:10:0b:86:41:34:a8:26:cd:98:d8:6b:
d9:19:cf:f0:f7:00:41:22:54:de:16:6e:95:2a:56:
54:5a:93:8c:aa:72:cc:b6:46:e9:ea:04:e9:81:e5:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D0:EE:E4:E6:2B:80:B0:2E:52:AC:DB:3C:AB:B6:35:1E:5E:4E:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/efb6b6e2-4818-3802-909d-30edb64cf3f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:68:f2:82:7f:03:d0:2b:09:ff:aa:36:22:67:b9:dd:9b:f3:
b4:aa:b4:59:52:6c:37:5f:57:1b:59:1e:79:ab:e3:2e:26:27:
79:a3:3f:6d:0e:fa:8f:44:15:c0:fa:cd:8b:f3:56:75:1e:14:
61:70:6b:17:6c:49:9e:55:5e:4c:26:c0:60:6f:d1:48:07:40:
fb:14:0b:57:e4:6a:8e:64:21:33:01:0a:f8:2f:be:14:71:01:
af:9c:ff:4f:d9:09:65:32:ee:81:00:5f:40:ee:5c:0e:04:9d:
93:37:f3:7c:02:ee:88:ba:de:26:56:52:a6:65:f9:8e:10:c3:
49:e1:11:4f:ac:2b:aa:02:3c:25:7c:14:7c:ca:a1:8a:a4:88:
ef:ac:78:f7:02:6d:87:ba:6d:52:e3:c8:a8:f4:f8:71:a9:bd:
5f:f1:0d:98:f2:be:99:a9:bd:8f:d3:2d:f0:e2:fb:f5:64:15:
4b:68:7f:a6:6f:72:19:b2:d5:f1:b9:75:47:ce:f5:05:58:c4:
39:61:ed:26:bc:9b:2b:8b:f3:b8:2f:b8:5e:58:70:e0:aa:40:
57:39:13:73:c1:7d:b5:d2:df:68:c9:88:36:e6:6a:08:f8:58:
7f:ef:27:da:e1:79:77:1e:3e:ce:2c:64:03:12:7b:c8:ad:7e:
e8:c0:dd:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9K3C5ys4FL6VGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTE0MFoXDTI1MDgyODE5MTE0MFowLzEtMCsGA1UEAxMk
ZTU5ZjI3MWEtOTU0ZC00ODZiLWFlZGMtZmVjOGEyOWZlYTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokcfgJ4PCvbCVR4MBNCtQa71nbnWiCJ7TBbD
XUqGjRR0h4v/+BAABGycnypbHdSXONMI5GbS6i2R6GYD7VZiIjN90LuQ54e2YQOX
z/HosN5tjJ/GAjd4INjCZlDlCDfcSL7Bq44oXecQKDRsruXxgfyAJydBDeSQ7VOy
/3+3jq+eRIUTzYcMUyAKsBT6tmHDDt8T2Hrpmv8x/itFhjAuH71WuOOQqm5APIMB
RXOaQSGfkpeM7R4TZIgOWZa7Fw5u7iPEWsu9atCd7P2MfzkBENNi+LcyEAuGQTSo
Js2Y2GvZGc/w9wBBIlTeFm6VKlZUWpOMqnLMtkbp6gTpgeWvswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObQ7uTmK4CwLlKs2zyrtjUeXk4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZWZiNmI2ZTItNDgxOC0z
ODAyLTkwOWQtMzBlZGI2NGNmM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9o8oJ/A9ArCf+qNiJnud2b87SqtFlSbDdfVxtZHnmr4y4mJ3mjP20O
+o9EFcD6zYvzVnUeFGFwaxdsSZ5VXkwmwGBv0UgHQPsUC1fkao5kITMBCvgvvhRx
Aa+c/0/ZCWUy7oEAX0DuXA4EnZM383wC7oi63iZWUqZl+Y4Qw0nhEU+sK6oCPCV8
FHzKoYqkiO+sePcCbYe6bVLjyKj0+HGpvV/xDZjyvpmpvY/TLfDi+/VkFUtof6Zv
chmy1fG5dUfO9QVYxDlh7Sa8myuL87gvuF5YcOCqQFc5E3PBfbXS32jJiDbmagj4
WH/vJ9rheXcePs4sZAMSe8itfujA3c8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:40:00 2025 by rpki-client