Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ff76e402-88f3-3d82-97a5-70913a39ac25.roa
File: ff76e402-88f3-3d82-97a5-70913a39ac25.roa (raw, json)
Hash identifier: Al0gFnIPVzpAo9XBnlqAFBNA+a2FDCdbqg36ZBLGDMc=
Subject key identifier: 5A:24:C2:51:EB:17:A3:A9:2E:0F:D7:4E:B6:9C:3A:CA:66:FE:A4:67
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727CD60F4735074D56BD1C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ff76e402-88f3-3d82-97a5-70913a39ac25.roa
Signing time: Fri 30 May 2025 19:11:37 +0000
ROA not before: Fri 30 May 2025 19:11:37 +0000
ROA not after: Thu 28 Aug 2025 19:11:37 +0000
asID: 81
IP address blocks: 198.86.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:cd:60:f4:73:50:74:d5:6b:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:37 2025 GMT
Not After : Aug 28 19:11:37 2025 GMT
Subject: CN=3562f50d-2b78-44f0-848f-e1148e67426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:ac:af:23:70:5d:28:fa:5a:c8:cc:8a:6a:
0b:72:94:fd:4f:45:11:71:d4:55:9e:51:b8:b7:2d:
46:46:f0:36:32:45:79:28:1b:88:e1:8c:7d:6a:77:
09:c3:3a:2d:22:2c:f9:9a:77:85:1e:4e:c3:13:01:
43:fc:a1:1a:6f:32:76:df:a3:ee:f2:05:4e:aa:ff:
2b:20:88:8d:43:19:f4:d4:d6:f8:b2:98:3e:7e:03:
f2:b5:7b:21:91:98:a3:a6:2b:ef:b5:17:e9:51:91:
9e:47:b0:a0:07:0e:bb:56:ad:a6:14:f3:8b:ca:8f:
f4:95:3f:a8:89:ff:c6:7b:2e:95:cc:61:8c:a7:22:
f8:94:13:37:3e:da:4a:81:97:b9:a2:25:b2:78:1a:
2e:df:18:5a:7d:89:63:11:88:d3:4c:6b:6b:5a:0c:
b2:da:6a:f1:bd:7d:27:50:93:25:dd:c3:f0:ae:1a:
67:5f:a4:6e:c4:ad:5b:a4:a2:bb:ee:60:50:b9:b1:
62:d7:03:2c:49:f3:a7:fe:f1:6b:82:f9:a6:ac:cb:
af:95:90:42:57:78:33:21:b3:19:a7:69:3b:48:4d:
84:ab:bc:ba:a6:1d:43:ce:8e:7b:eb:00:2a:0d:11:
a2:4b:8c:a3:ab:8e:e0:e5:b3:28:4d:3d:52:cb:89:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:C2:51:EB:17:A3:A9:2E:0F:D7:4E:B6:9C:3A:CA:66:FE:A4:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ff76e402-88f3-3d82-97a5-70913a39ac25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:81:57:74:f5:36:d5:86:dc:d1:9a:db:4f:3d:84:b0:7d:b2:
51:7e:16:54:fc:52:2e:09:fe:d9:79:b2:7a:96:a2:21:c0:6b:
34:3b:4e:08:d7:7b:a9:2d:89:53:8a:33:62:c9:2b:69:41:f8:
74:0b:eb:fe:c8:62:64:c4:71:8f:22:e0:17:3a:32:27:1e:71:
99:32:33:3a:93:6d:dd:cb:9e:ea:70:19:fe:ae:16:0e:44:9a:
fc:2a:44:82:a7:91:2a:03:52:b1:18:5f:0e:21:af:9b:90:c6:
d0:89:3d:68:c1:c6:85:7a:9a:e1:22:c4:be:e8:88:85:72:98:
d1:ad:10:b7:8c:d0:e7:37:1a:b1:6b:68:52:d7:57:20:d2:81:
80:d5:3d:42:b8:7b:8d:12:37:f0:44:6e:1b:ba:bc:0f:77:f4:
a9:87:ba:c9:d2:c4:76:21:af:33:93:bd:16:28:72:48:1f:1b:
e5:f7:fc:69:61:82:65:53:2f:bc:8f:af:2a:08:89:4e:59:0b:
f1:b1:d4:e6:8e:22:51:46:6b:5c:f8:86:2a:fa:dd:e2:a6:2d:
a9:06:d2:49:f5:f4:c5:30:11:a2:9a:a8:80:c7:a2:f2:2e:b6:
cf:da:7d:83:3d:54:91:4a:2b:75:5a:7e:18:12:95:3d:3a:fe:
a2:27:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:20:14 2025 by rpki-client