Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5261458-6ad1-3040-9e71-49d1a52abc9c.roa
File: a5261458-6ad1-3040-9e71-49d1a52abc9c.roa (raw, json)
Hash identifier: 7px5lmQj4f0zqx9lleapkbWx9jp2cAqduCf5TCiCYN4=
Subject key identifier: 86:44:AC:AE:FA:E1:95:F2:0E:52:A0:09:8E:2B:8B:A5:BA:32:A0:52
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849F61CC548072AB25F8451ADC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5261458-6ad1-3040-9e71-49d1a52abc9c.roa
Signing time: Sat 24 May 2025 16:40:39 +0000
ROA not before: Sat 24 May 2025 16:40:39 +0000
ROA not after: Fri 22 Aug 2025 16:40:39 +0000
asID: 213238
IP address blocks: 172.120.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 11:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f6:1c:c5:48:07:2a:b2:5f:84:51:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 24 16:40:39 2025 GMT
Not After : Aug 22 16:40:39 2025 GMT
Subject: CN=ee3abd9c-2592-4a01-a832-6aff4c95ab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:52:2e:3c:3b:84:22:41:a2:a1:f3:3e:4d:
a1:3e:74:08:99:a3:d5:3d:8b:fd:c2:46:93:0f:aa:
36:fe:56:ca:98:0b:93:66:fa:5d:21:fb:c4:ee:12:
ba:a5:fc:57:82:e2:e7:26:e9:92:66:a4:0f:92:e9:
be:96:ea:59:ad:14:df:3b:d3:e7:06:8b:18:ad:cb:
9a:e4:40:5f:dd:22:a2:96:da:b4:55:d5:e5:1f:c0:
71:26:f7:5d:75:45:ea:fc:c1:cb:97:2f:92:35:3c:
5e:13:08:69:ae:a4:ab:a8:0e:07:88:5b:d4:4b:5b:
c6:53:9b:d3:0a:7b:63:0b:9e:72:13:32:d1:85:b9:
c9:d9:ce:ae:5c:ea:9b:52:c0:ec:6d:98:a7:5c:74:
76:a0:76:d0:de:f9:32:54:46:ab:c6:91:21:cd:87:
fa:46:3f:e8:bb:8f:b4:c2:55:be:c4:8c:5c:fd:e8:
8b:24:cb:30:f7:f7:37:15:2c:9b:2c:d2:d6:cd:1c:
f0:55:da:4b:4f:68:7c:7c:d4:22:18:3e:45:66:5f:
25:3e:99:c0:36:3a:ee:3e:c5:a8:2a:4c:01:01:65:
e3:5d:07:fc:bc:5a:b5:e7:04:13:78:99:05:28:4e:
0a:c4:5c:c7:06:28:47:dc:05:d0:e2:c1:dd:bd:ca:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:AC:AE:FA:E1:95:F2:0E:52:A0:09:8E:2B:8B:A5:BA:32:A0:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5261458-6ad1-3040-9e71-49d1a52abc9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b0:de:27:f1:c5:e6:b8:ff:fb:66:fc:11:d1:a5:c0:94:56:
1a:63:85:79:ce:b1:00:3b:db:21:01:a7:62:17:44:57:84:59:
67:60:21:64:e1:4f:31:67:c7:f7:33:80:ab:6a:7e:ae:06:3c:
ad:bb:a6:ba:d8:80:f1:83:17:0b:d7:1f:23:b1:cc:96:3c:fc:
af:e6:7b:bc:16:48:e6:67:9e:4a:07:dd:5d:04:4b:b4:75:ea:
04:58:5d:0e:0b:e3:9e:e1:a1:3c:41:43:b8:cb:70:18:7e:67:
45:3b:70:33:4c:56:bd:bf:27:b8:7a:7a:da:ad:70:ef:dc:0c:
fa:97:d4:6d:56:e4:26:dd:42:36:57:a7:6e:f8:3d:e1:e5:bf:
25:5e:2f:6c:09:76:8a:4c:98:87:16:28:17:fc:4f:f9:bf:c3:
a8:5f:d5:aa:85:a3:41:91:3e:3a:a5:be:90:1d:96:8a:66:f2:
fb:9a:23:91:a7:92:17:3b:c8:7c:9f:97:30:1b:bc:ab:1a:55:
64:91:a5:ec:4e:7d:d8:eb:74:45:93:d4:d9:84:52:11:ca:c4:
69:17:15:d8:64:b7:5d:1f:6b:3a:b6:b1:08:0c:cb:d8:bf:4e:
b3:1b:08:1a:9a:e8:76:4a:a5:a0:56:9d:76:83:18:79:45:68:
4a:37:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:20:08 2025 by rpki-client