Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/88b22a11-2921-3fa6-99fc-84609d7bf998.roa
File: 88b22a11-2921-3fa6-99fc-84609d7bf998.roa (raw, json)
Hash identifier: kuiMBWyfmKekxJSpQNzOoKV5lZESffQGVHnPQUXZIfs=
Subject key identifier: D9:68:4B:3A:99:F3:F1:68:28:9B:1A:52:91:E3:D8:FA:4A:43:21:37
Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial: 010D0C9F43285849C11A0C71343C991925988480
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/88b22a11-2921-3fa6-99fc-84609d7bf998.roa
Signing time: Mon 05 May 2025 16:57:19 +0000
ROA not before: Mon 05 May 2025 16:57:19 +0000
ROA not after: Sun 03 Aug 2025 16:57:19 +0000
asID: 3356
IP address blocks: 170.188.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 05 May 2025 18:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c1:1a:0c:71:34:3c:99:19:25:98:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Validity
Not Before: May 5 16:57:19 2025 GMT
Not After : Aug 3 16:57:19 2025 GMT
Subject: CN=3c98d402-3cc1-47bd-a62e-c792656b918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:65:cf:8d:04:1e:b6:ad:61:23:f9:e6:87:
0f:61:6f:3b:6b:85:d5:d1:af:e2:99:42:40:24:f9:
84:d3:fb:09:42:ff:34:7e:e5:c4:13:e4:ef:bf:94:
e7:4d:cc:8c:0f:cd:88:aa:db:df:90:6c:b0:2f:8e:
df:9a:ab:02:4d:7e:1f:48:00:ef:5e:2a:bc:91:e8:
2f:70:69:db:a5:0e:9e:ac:cf:fd:7a:a7:ef:9c:6b:
fd:2e:3b:fb:76:15:b9:f4:09:0c:f4:b4:51:a3:2b:
35:38:56:91:b7:54:24:b4:53:1f:16:49:31:33:aa:
a5:b7:53:19:65:50:3f:42:bb:ce:30:b8:0f:4f:c2:
b4:3a:34:38:7b:e4:4e:6a:b3:67:80:a2:bb:1c:c8:
34:86:d5:22:49:c3:80:09:c1:4a:63:32:5f:69:c2:
68:e8:49:69:7a:a5:4e:4c:05:48:95:d8:e9:ca:7e:
79:54:fd:c7:2b:c7:a3:74:f6:27:34:d2:cb:b4:98:
d0:30:37:3a:ad:88:ac:02:7a:5b:1f:af:2a:e9:b8:
bf:9e:4b:e5:b9:5e:8f:46:e9:06:43:98:2b:83:af:
34:9c:d5:ee:51:4d:d2:21:70:72:8b:ba:15:0b:7f:
ae:69:fb:8d:74:09:e3:78:4e:95:31:f7:66:77:db:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:4B:3A:99:F3:F1:68:28:9B:1A:52:91:E3:D8:FA:4A:43:21:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/88b22a11-2921-3fa6-99fc-84609d7bf998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
X509v3 Authority Key Identifier:
keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:cc:98:42:f4:74:96:13:d6:b7:58:85:3b:af:8c:af:39:5a:
10:9e:35:1f:70:ec:dd:7c:ad:af:97:e4:26:8b:07:d8:86:12:
79:33:8c:96:93:9a:46:02:a5:90:80:d1:25:ce:12:62:bc:54:
8c:bd:f9:d1:c6:42:5f:6d:38:3a:e9:14:9e:b3:6f:48:37:06:
43:a2:b7:19:4c:fb:48:8d:af:23:77:4e:2b:dc:4c:7f:f7:8e:
ed:90:99:35:76:57:ea:c8:0b:6f:fe:94:7c:fd:7b:27:34:62:
3e:09:9f:72:98:c5:60:98:0c:26:41:85:0b:ed:31:7a:ee:44:
61:10:3e:2f:4a:2d:60:2e:da:a2:83:a6:50:db:4f:03:61:f4:
52:45:5e:c9:fe:6d:6d:e9:13:91:3f:65:7d:fd:35:2b:9a:ab:
c7:d8:47:29:04:6e:e9:9e:6f:37:28:7d:f9:fc:05:4f:6c:3d:
cd:91:ae:d7:08:09:69:33:62:1b:b4:4d:e6:d9:8e:a0:1a:65:
7e:98:e1:ba:09:99:20:bf:37:cd:14:f6:25:3f:fc:b9:25:83:
83:9e:39:3e:de:0f:d2:8b:39:72:7d:48:c2:3f:be:90:a2:ec:
74:9a:97:a7:12:a6:47:f1:aa:3f:d4:f8:e7:e9:38:56:c6:04:
cd:1d:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:45 2025 by rpki-client