Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2dfc821a-d16d-3edf-acd4-94f5ab5f46a4.roa
File: 2dfc821a-d16d-3edf-acd4-94f5ab5f46a4.roa (raw, json)
Hash identifier: 20I68afWd6ZC15WF1SVWZ24Miv2BLVVZJ8v1w3+tRg4=
Subject key identifier: D9:94:92:31:6E:34:5E:E8:71:8E:E1:3D:B1:38:DF:54:62:D5:52:88
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285849C68DA5C28000652C98CD1400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2dfc821a-d16d-3edf-acd4-94f5ab5f46a4.roa
Signing time: Wed 07 May 2025 15:49:17 +0000
ROA not before: Wed 07 May 2025 15:49:17 +0000
ROA not after: Tue 05 Aug 2025 15:49:17 +0000
asID: 19157
IP address blocks: 23.86.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 07 May 2025 22:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c6:8d:a5:c2:80:00:65:2c:98:cd:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: May 7 15:49:17 2025 GMT
Not After : Aug 5 15:49:17 2025 GMT
Subject: CN=b847a049-7f9a-47eb-8386-7512284537bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:41:b9:cb:40:14:70:e8:1f:d7:90:7d:fb:
a6:72:7c:4d:57:95:03:ed:25:0f:b5:cd:2d:35:d0:
7a:81:be:87:0b:6b:32:89:2a:aa:71:e9:88:d5:2e:
00:5a:ab:88:01:ea:df:15:f4:6c:c1:08:38:51:49:
79:d1:77:2a:cb:3b:56:98:0a:ef:89:3e:63:88:2c:
95:11:4f:96:69:f9:ea:5f:0b:90:bb:0a:ee:28:f2:
dc:f6:36:91:a9:8b:92:a6:52:e9:57:be:fa:0e:c3:
eb:13:17:3b:7c:76:c1:84:b1:77:64:aa:07:d5:eb:
65:d6:7c:a6:58:44:32:dd:f3:ef:f9:70:a6:0b:4c:
1a:65:c1:a1:88:57:aa:f1:dc:d6:3e:c7:92:d1:f5:
fd:55:7a:07:7b:f5:ea:f3:9e:6d:cf:bb:a9:79:09:
ed:b8:c7:21:c2:79:f5:36:e8:17:d6:f9:46:d0:a0:
b1:d0:48:d1:2f:b2:f9:41:5e:14:37:68:f7:13:03:
d5:b6:1a:40:12:22:ef:33:50:42:89:cc:cf:1f:3a:
9a:ae:ae:42:59:30:d6:d0:cd:00:3b:09:05:9c:78:
4f:15:01:40:e2:dd:2e:cf:4e:cb:56:1a:78:7c:31:
05:7c:5c:bd:e0:62:a2:86:1c:8d:e4:37:61:9a:e8:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:92:31:6E:34:5E:E8:71:8E:E1:3D:B1:38:DF:54:62:D5:52:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2dfc821a-d16d-3edf-acd4-94f5ab5f46a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
23.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:61:f8:aa:1a:05:55:cb:d2:0a:78:f4:90:56:c7:50:e8:b8:
90:ef:0e:04:9f:82:2c:e0:63:78:31:eb:5b:63:a9:2a:2a:53:
93:c1:38:b0:57:7f:d4:99:b2:d5:2c:9d:f3:0f:7e:79:40:ac:
42:ab:7c:f9:7b:2e:a8:61:a7:e4:99:03:7d:d4:9e:fc:a5:28:
36:1d:6b:f1:4c:c0:28:31:cf:84:9b:81:d0:ea:9a:1e:8b:c7:
d6:62:69:e5:64:63:e6:11:cb:02:5f:5e:84:55:cf:13:2b:9b:
dc:a5:19:b6:7e:98:a7:5b:fb:c8:90:80:5a:27:fc:4f:12:95:
5b:db:c3:3f:5d:07:c4:20:31:e8:24:ce:6f:4f:55:5c:95:c3:
89:3d:da:34:bd:dc:a0:5b:5b:2e:23:94:c1:25:39:d8:33:aa:
ec:36:5d:b5:34:d5:f0:5c:90:a8:eb:e3:b3:1a:3e:af:f8:65:
b7:04:cb:b0:0b:a7:cd:5c:b6:9a:56:3e:ca:e3:7a:8e:81:4f:
1b:30:4d:ba:dd:9a:0a:39:e5:44:a4:d6:89:3c:f3:fc:d0:11:
4f:ce:2f:8f:38:99:9b:cc:60:da:2e:e6:98:9a:e5:ca:a8:3e:
11:b8:72:d2:d6:2e:72:53:5e:f0:17:09:1d:09:01:83:98:fa:
81:33:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:05:11 2025 by rpki-client