Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a468b64c-b312-37c9-a20f-014007225515.roa
File: a468b64c-b312-37c9-a20f-014007225515.roa (raw, json)
Hash identifier: 6a5NBY8cpcFue0XsduMG51SAiiscYvLxySzJjz1553E=
Subject key identifier: F7:0E:F0:32:71:0A:95:DD:64:B3:14:00:17:1F:F6:DA:20:D5:13:FA
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849F61BBEF1CFFF3F063B3BE7A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a468b64c-b312-37c9-a20f-014007225515.roa
Signing time: Sat 24 May 2025 16:38:35 +0000
ROA not before: Sat 24 May 2025 16:38:35 +0000
ROA not after: Fri 22 Aug 2025 16:38:35 +0000
asID: 213238
IP address blocks: 172.120.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 11:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f6:1b:be:f1:cf:ff:3f:06:3b:3b:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 24 16:38:35 2025 GMT
Not After : Aug 22 16:38:35 2025 GMT
Subject: CN=fcb9e67c-4ff6-4641-864f-cb4804325734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:75:57:8a:8b:b4:c9:c7:8f:d7:a1:34:01:
5d:d8:92:3b:e7:0c:61:fd:e0:17:a4:20:bf:6d:36:
33:ec:ed:a9:a6:76:b2:13:ec:0d:8d:0c:41:55:a2:
cd:74:a9:89:0b:8e:b5:94:fa:d5:d3:93:1b:31:61:
91:17:f7:df:52:89:70:08:3e:c4:91:5b:e3:f1:45:
f1:d4:5c:9b:2b:45:49:89:3f:08:9d:c7:e6:af:9b:
af:23:c2:08:be:d1:74:28:31:fc:a3:a7:7f:7b:0f:
6d:48:f8:97:61:78:80:62:69:00:93:fc:4d:92:39:
8a:2b:64:aa:a7:17:0c:0a:39:aa:c4:84:1d:ae:74:
1c:6d:92:93:4c:6e:98:e5:3b:b4:16:af:c8:9d:f0:
7e:2b:8e:fd:cf:3c:67:e9:87:5b:17:c2:5f:7a:d5:
53:79:9c:f6:e0:0e:1a:8f:c9:28:5f:13:02:b3:89:
f4:c9:3f:b9:d0:3a:88:51:29:7f:12:32:0f:6c:ee:
35:ab:11:75:3d:a2:ca:a8:d0:9c:80:e6:0e:76:32:
86:8d:06:67:c5:d0:48:29:85:2c:11:f1:46:14:77:
b9:3c:65:6c:98:37:52:30:3a:99:c8:e1:06:c4:d3:
c4:80:89:ba:77:0a:be:fa:55:e8:1a:99:82:0d:ef:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:F0:32:71:0A:95:DD:64:B3:14:00:17:1F:F6:DA:20:D5:13:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a468b64c-b312-37c9-a20f-014007225515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:14:ed:96:49:96:0b:9d:e1:d2:29:3c:57:95:b2:34:86:1c:
6b:59:e0:40:da:81:66:03:f2:d2:67:7e:6e:40:ba:f1:cd:21:
90:f8:c9:c4:7e:eb:a8:78:02:cf:f3:56:1a:84:18:40:6c:f9:
5c:84:c6:6b:3c:eb:5d:c4:06:7e:8b:be:0a:98:c2:af:06:f8:
a8:70:f4:fe:50:e4:66:70:55:6e:e7:22:6b:b8:22:94:57:5e:
f0:42:bf:52:18:39:cd:85:6d:90:d1:ad:45:ce:d6:3e:9e:93:
b5:a7:17:86:ea:8f:96:41:d8:8b:6c:29:4f:0d:38:60:17:ea:
e0:91:6e:d9:96:7d:2d:a9:c8:aa:6e:62:5b:78:5d:ab:28:6a:
e4:37:43:2d:8b:9b:e9:2e:18:e0:9c:bf:66:0f:68:c8:50:29:
6b:dd:63:c2:60:5c:0b:39:8a:2d:2c:cf:5e:0a:7c:a1:b6:71:
09:2c:ef:bd:92:d8:c7:cc:60:3b:18:ab:d4:58:a2:69:7a:c2:
e4:a4:62:44:d6:e3:32:0e:a0:54:d1:9b:76:11:84:3f:e1:80:
30:9f:66:de:26:22:1a:7a:66:b1:be:2b:b9:e7:1b:d8:4c:e1:
a0:84:35:eb:30:0f:93:9d:ff:98:fd:ca:bf:65:85:06:0e:cc:
97:05:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:40 2025 by rpki-client