Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a25359c1-070d-30cf-bbd2-dfe440dd4318.roa
File: a25359c1-070d-30cf-bbd2-dfe440dd4318.roa (raw, json)
Hash identifier: N1XaL4jQQoLFzme/ICsMleybz7d/EazfSSrdDcQy4eI=
Subject key identifier: D5:2D:F8:28:FA:E1:5B:C8:33:ED:8E:49:86:E8:56:93:D1:E0:0A:87
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849F61DA0AFAF876F5B73B1D300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a25359c1-070d-30cf-bbd2-dfe440dd4318.roa
Signing time: Sat 24 May 2025 16:42:22 +0000
ROA not before: Sat 24 May 2025 16:42:22 +0000
ROA not after: Fri 22 Aug 2025 16:42:22 +0000
asID: 213238
IP address blocks: 172.120.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 11:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f6:1d:a0:af:af:87:6f:5b:73:b1:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 24 16:42:22 2025 GMT
Not After : Aug 22 16:42:22 2025 GMT
Subject: CN=f082bd46-4f6c-41fd-a854-beede3f893b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:5b:12:53:44:a8:c8:cf:72:7e:78:44:54:
80:3a:be:b3:96:3c:f0:2d:e8:43:e2:3b:f3:2c:21:
76:e5:8c:94:45:9d:e2:ce:75:e3:30:3f:ea:b9:60:
b1:3e:b2:ea:75:53:0d:63:44:86:f3:f2:d7:f1:39:
ee:00:4f:05:a5:13:c2:6a:73:bd:d6:65:c0:16:c9:
4c:ba:97:82:de:06:32:4f:29:dd:96:d1:ef:e2:22:
6e:98:a7:73:15:07:d8:50:f5:c4:cd:8f:ba:47:11:
d3:f3:63:4f:d9:8e:d7:09:6b:03:2c:89:e9:49:b4:
88:2d:97:63:de:e5:41:0f:1d:b6:55:50:6b:e9:db:
cc:16:0a:f2:b3:2d:f2:a6:53:34:f8:c6:4d:58:17:
5f:d3:a2:92:4a:55:64:2f:76:f4:59:06:e6:73:16:
65:38:ad:68:96:c9:38:33:f8:ae:5d:bb:b4:49:e5:
24:53:8a:45:b8:7c:97:9c:4a:a6:ea:4f:be:96:df:
4b:5a:c9:c8:96:5e:b1:c7:6c:06:16:c7:45:9e:d2:
d8:ea:e1:71:6d:e6:28:c3:26:6a:de:f6:4b:5c:e2:
37:3c:e7:f1:4f:b1:0b:7a:ae:97:4c:5f:86:c5:a3:
d4:8d:7f:47:2d:89:cc:73:92:2b:25:3d:62:0b:91:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:F8:28:FA:E1:5B:C8:33:ED:8E:49:86:E8:56:93:D1:E0:0A:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a25359c1-070d-30cf-bbd2-dfe440dd4318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:8b:b9:68:af:5c:4f:ec:27:92:02:9b:b9:e0:04:48:dc:ed:
5d:8a:49:75:b4:65:50:fb:12:cf:5f:eb:56:6a:29:7a:2e:7c:
51:77:75:ef:b8:cb:22:49:20:cd:bc:79:54:71:03:f4:40:c8:
38:71:40:05:4d:d9:8a:17:90:07:7b:a7:71:35:f4:c0:54:6c:
96:40:f0:41:fc:f4:fd:6e:27:da:7e:13:d0:12:0f:46:e7:5c:
28:74:21:bf:82:77:5b:36:fa:07:a3:52:e9:0a:bb:11:12:9e:
6d:80:dd:6a:99:b4:29:f8:d4:4d:d9:e2:a9:4e:93:13:b8:b6:
b1:08:f2:13:a9:22:be:50:22:1b:65:82:fc:3a:a6:64:80:d7:
aa:0a:6d:71:8a:67:97:66:ad:a9:7f:6a:e2:16:bd:ce:81:97:
03:ba:81:9e:57:b3:c1:60:67:ea:3a:bf:23:9f:f1:3d:ae:8a:
ce:3a:dd:1b:d9:47:cd:73:aa:99:69:b4:c2:93:eb:b4:9c:a7:
c5:af:6b:95:24:f7:e7:61:ba:97:d6:69:3e:7c:9f:d7:74:a0:
f5:ba:ce:5c:73:3d:02:72:83:15:e9:b8:22:84:e0:d7:9f:9a:
6e:23:61:a5:f0:d4:21:dc:67:49:6e:51:66:ee:c6:a2:74:87:
5f:bb:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:12:29 2025 by rpki-client