Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3069175-aef0-3edf-ac4b-ff3742b1f6e1.roa
File: c3069175-aef0-3edf-ac4b-ff3742b1f6e1.roa (raw, json)
Hash identifier: GAG2JU73DQ/A3WGQneCfGTllECO5OZKXfyQvTtTvK0M=
Subject key identifier: 8C:A1:33:75:5C:C7:9F:43:58:6A:01:9E:2A:21:0E:DF:33:23:07:31
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849F61CB9A3091540CE05733B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3069175-aef0-3edf-ac4b-ff3742b1f6e1.roa
Signing time: Sat 24 May 2025 16:40:33 +0000
ROA not before: Sat 24 May 2025 16:40:33 +0000
ROA not after: Fri 22 Aug 2025 16:40:33 +0000
asID: 213238
IP address blocks: 172.120.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 11:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f6:1c:b9:a3:09:15:40:ce:05:73:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 24 16:40:33 2025 GMT
Not After : Aug 22 16:40:33 2025 GMT
Subject: CN=1967c6fe-f150-4225-83bb-20bd42912e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:6d:f2:86:88:f7:54:e0:c3:a5:7e:6c:12:
8b:79:df:ac:9a:e9:25:1a:f2:ac:e2:7f:cf:72:f8:
d0:d6:ea:a4:69:7f:27:22:d1:d7:41:71:40:ed:ae:
c0:0d:dd:41:f1:d5:a8:47:dd:d6:93:89:c0:ce:a9:
4c:db:85:8b:d8:dc:3f:28:cd:ba:01:ad:70:4b:e6:
d3:b5:87:04:df:67:82:19:25:16:8f:bc:89:8b:7f:
48:e8:27:95:cf:8b:b7:ed:7b:d9:ae:3e:1d:8b:b7:
61:d6:14:25:2b:bf:76:e1:ee:af:25:09:19:5b:91:
b2:e5:d9:eb:28:5c:1a:66:ac:1c:9e:3f:c2:7c:f4:
0d:c1:65:0d:54:73:07:d8:f7:6a:78:d5:f7:14:77:
31:1c:30:03:65:ec:b6:8f:e5:53:18:a2:be:16:6a:
1b:eb:c5:bc:07:a8:09:38:33:a5:e0:89:42:35:c6:
19:00:03:f4:46:90:db:27:7a:43:7a:f9:c1:ba:f3:
f0:0d:a0:f1:b5:5e:05:8c:1a:de:c6:cf:f7:d0:fb:
4b:22:f4:e2:ed:94:8c:19:b0:78:a8:15:dc:64:73:
89:d3:e9:27:7b:c1:40:1d:96:4f:64:b7:84:f7:ca:
f1:e5:d9:29:be:5d:83:5a:af:f3:69:49:d1:19:4a:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A1:33:75:5C:C7:9F:43:58:6A:01:9E:2A:21:0E:DF:33:23:07:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3069175-aef0-3edf-ac4b-ff3742b1f6e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:f8:e5:c8:53:1b:83:69:c2:68:ac:78:28:db:5f:ed:1d:20:
ea:96:82:db:47:48:9c:35:54:6c:a8:48:56:51:97:ed:6a:a0:
21:27:d9:be:4e:3e:21:73:ec:4d:a8:27:fb:a6:7a:d1:a8:fe:
43:de:86:7e:2c:3a:4e:51:00:d9:33:aa:a8:8a:c2:7d:e0:fb:
75:cf:73:c3:37:d6:a4:f4:31:0e:4b:d5:95:e1:07:6e:ce:c5:
7d:a0:f1:ce:1e:6f:59:51:4b:71:8f:5b:cc:ec:c1:a9:6f:32:
da:5b:21:5e:18:60:12:99:86:2d:76:7c:8e:08:43:4e:cc:fe:
7e:dc:f5:35:5a:c1:12:39:5f:3d:2a:e9:83:e7:15:89:ff:b8:
19:94:79:09:ed:46:08:52:ea:b6:01:11:a5:5d:fc:22:6a:49:
78:4b:16:75:61:58:5f:7c:20:0d:0d:cd:6b:b9:18:81:91:b0:
a2:7e:80:53:7d:18:25:37:96:a1:bb:1a:2f:47:11:44:af:25:
d3:cc:69:67:1f:3a:10:bd:72:74:6e:6c:26:c5:7d:4a:46:be:
df:d5:c9:6c:4c:56:9d:94:7c:fb:9e:fb:ce:cf:44:3b:0e:bf:
ed:c8:67:33:b4:03:2e:60:1b:e5:a2:9b:6f:2b:ab:46:02:4d:
fa:73:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:15:10 2025 by rpki-client