Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd41c4bf-f778-37d4-9a05-c46983387f80.roa
File: bd41c4bf-f778-37d4-9a05-c46983387f80.roa (raw, json)
Hash identifier: VAK/wk8FKGWEgBn7u+c0PY5pZyrZoN+DsDOnc2gXfrc=
Subject key identifier: E6:0E:1A:D4:8B:88:46:6D:6B:46:9E:74:7D:EB:ED:70:5C:34:FB:F6
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584A0D6A9476F77A69CEAA49B5C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd41c4bf-f778-37d4-9a05-c46983387f80.roa
Signing time: Mon 02 Jun 2025 01:00:49 +0000
ROA not before: Mon 02 Jun 2025 01:00:49 +0000
ROA not after: Sun 31 Aug 2025 01:00:49 +0000
asID: 54600
IP address blocks: 107.149.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 13:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:0d:6a:94:76:f7:7a:69:ce:aa:49:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jun 2 01:00:49 2025 GMT
Not After : Aug 31 01:00:49 2025 GMT
Subject: CN=687bbd76-3dce-453e-aebc-ef4db0c96093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:f4:ad:dc:bb:1c:d0:7a:b9:ff:44:bd:5e:
30:a8:4d:0d:58:36:23:6b:b2:83:f8:1f:f8:e4:55:
54:8f:e7:31:99:b4:39:6f:83:4a:23:81:b3:94:b3:
3d:0b:9a:cd:49:cd:22:f2:fc:37:b9:51:23:f4:d2:
71:99:f4:b3:96:7f:45:06:8a:c1:9b:12:61:a5:28:
97:3a:a2:5a:68:d4:e8:2c:51:0f:29:a2:0c:9c:a2:
18:7c:0f:20:c0:1e:fa:cd:3d:83:dd:5c:b6:92:fe:
08:8b:1d:b9:49:98:61:f5:17:d7:45:23:52:4c:e1:
ed:e0:0e:b8:3d:e8:1c:8d:88:54:53:66:01:21:e1:
e0:30:f6:da:17:4c:e0:78:4b:07:13:98:8a:95:be:
ad:16:35:e4:03:32:d4:2a:eb:5b:ee:9d:a4:68:24:
27:b4:c2:e4:6a:6b:83:8a:f8:25:63:71:fa:8a:4f:
6a:7d:36:35:70:33:58:23:b2:27:c1:c4:c3:f6:62:
7c:e0:68:b9:3f:33:bb:3c:89:59:41:dd:b8:61:c1:
d5:d8:78:96:38:e6:ed:d2:70:f2:27:33:b8:26:c5:
5a:41:dc:5c:a0:73:db:13:8f:f5:61:f3:ce:fe:19:
89:2d:24:db:54:0c:e5:8f:61:31:f9:57:a8:b8:07:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:1A:D4:8B:88:46:6D:6B:46:9E:74:7D:EB:ED:70:5C:34:FB:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd41c4bf-f778-37d4-9a05-c46983387f80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:86:ef:49:06:c0:50:02:25:68:98:f4:f1:13:40:4f:26:34:
0c:41:c5:c9:a3:72:18:32:52:5d:2e:88:42:8a:2a:53:b0:1f:
0c:94:ed:83:2e:a8:c3:7e:81:4a:b3:88:b6:f7:4d:f3:45:9d:
6e:53:fa:20:ae:bc:0b:50:74:cf:0f:ca:c8:03:17:89:26:05:
bb:40:ec:d0:02:b4:32:6b:80:9d:d5:c7:08:1d:35:8d:4e:44:
05:35:34:f4:25:a4:02:c8:e1:10:93:df:a4:20:0f:7f:20:8a:
31:d8:e4:7a:4e:18:99:37:18:10:8e:00:2d:d0:a9:32:25:3a:
75:6c:48:48:5c:fb:c7:94:2e:3f:cc:f0:b6:9f:aa:51:09:6d:
d3:5f:f2:57:cd:d9:2c:93:ec:63:a8:20:bb:56:74:75:2c:10:
72:8a:1f:60:97:21:97:2b:80:d6:81:3d:4f:4c:c9:c7:50:64:
d8:91:13:20:fb:f2:81:67:a1:a6:55:42:3c:2f:8d:eb:d3:b1:
c0:2d:70:ac:ce:e0:f8:a1:62:c9:16:39:b2:85:74:f2:a6:de:
c5:d6:0c:18:59:16:13:ee:17:a2:5a:5a:12:6b:9b:66:26:70:
71:d7:35:fa:a3:0e:55:8b:37:cf:ac:55:b0:53:c0:b5:05:3b:
7d:82:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:45 2025 by rpki-client