Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/66740231-3382-3469-ad17-10bc26066c13.roa
File: 66740231-3382-3469-ad17-10bc26066c13.roa (raw, json)
Hash identifier: I0VR5RNslQM1ZtMP4RJiEUqUnEK0Q6NfeyPvqAQ1gjA=
Subject key identifier: 01:AF:49:FA:4F:6C:F9:74:06:EC:3E:E5:13:15:6C:19:B8:6E:56:6C
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584B2488071D73CC27A27E805460
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/66740231-3382-3469-ad17-10bc26066c13.roa
Signing time: Wed 10 Sep 2025 00:30:53 +0000
ROA not before: Wed 10 Sep 2025 00:30:53 +0000
ROA not after: Tue 09 Dec 2025 01:30:53 +0000
asID: 33651
IP address blocks: 198.145.106.0/24 maxlen: 24
198.145.136.0/22 maxlen: 22
198.145.141.0/24 maxlen: 24
198.145.142.0/24 maxlen: 24
198.145.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Sep 2025 14:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:24:88:07:1d:73:cc:27:a2:7e:80:54:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Sep 10 00:30:53 2025 GMT
Not After : Dec 9 01:30:53 2025 GMT
Subject: CN=09cbbda3-0ece-41aa-9e20-4515eb3c2ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:30:a0:6d:69:f0:22:c6:d8:ef:c1:ca:71:
b3:c6:75:3c:32:35:5c:61:8b:4e:cc:6b:6a:a3:e3:
56:ef:11:ad:ec:2d:39:d7:21:87:8a:32:87:ff:26:
fa:d6:89:1c:3c:32:69:8e:26:c8:04:f6:36:24:b4:
5f:5d:8c:5e:87:db:84:a3:61:7d:ad:3e:10:a4:33:
e3:bc:7a:1e:f0:33:67:f7:2a:61:49:54:ce:2e:5b:
bd:d2:d3:9b:27:57:5c:de:7e:99:69:0e:b6:af:dd:
1a:33:60:31:c0:a0:08:8b:16:a2:33:9f:d5:69:cf:
3d:1b:67:0d:e4:e2:76:a9:2c:a7:94:4c:79:49:b3:
33:93:5b:51:62:10:03:9c:99:98:b1:d6:28:d4:ff:
40:3c:86:2d:df:f8:46:07:a3:be:40:91:32:dd:9a:
c4:61:78:54:9d:b8:3a:f8:21:3f:14:e7:5e:26:b4:
af:90:58:42:ca:8c:a6:7c:11:d9:af:48:a2:28:19:
ff:80:b0:0c:8f:70:70:dd:8a:15:56:09:dd:27:1c:
78:06:2f:20:3b:e0:ea:1c:64:3a:fd:73:f5:4e:d3:
cc:92:56:9e:e5:30:53:fb:a4:26:72:69:d1:de:6c:
16:85:bb:2b:ce:96:b1:23:8e:ba:12:3a:f4:a4:48:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AF:49:FA:4F:6C:F9:74:06:EC:3E:E5:13:15:6C:19:B8:6E:56:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/66740231-3382-3469-ad17-10bc26066c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.106.0/24
198.145.136.0/22
198.145.141.0-198.145.143.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:06:77:57:9c:77:96:6e:d0:2d:f5:ce:bd:2c:55:22:ba:01:
94:80:05:d0:7a:c8:f4:02:03:d0:12:e4:8d:7b:03:ea:bb:d3:
16:b6:e8:88:23:51:81:ff:ae:cc:54:6f:8e:56:4b:8d:ef:e1:
99:ac:e4:b3:86:3c:35:e4:94:be:76:4a:80:cf:57:e5:8f:03:
f2:41:46:ac:72:10:ed:af:de:89:e0:85:cc:93:4e:d6:54:bb:
27:36:b4:77:d3:f7:66:43:85:85:1e:89:33:44:01:0e:db:d1:
5e:94:af:4e:84:6b:cc:80:88:58:af:ec:e9:df:4f:91:36:7a:
1d:8f:d8:da:6b:39:81:58:37:84:d8:1f:5e:79:d8:bc:a0:4e:
13:b7:d0:de:89:77:30:d0:ff:a5:50:08:0e:0f:41:c0:e7:46:
55:6b:5a:70:4c:18:98:f9:37:12:09:59:7a:f1:99:7b:c6:84:
20:0e:1f:a1:b8:98:13:40:91:9e:e9:e3:2e:b5:54:0d:f2:0e:
14:f3:53:12:7f:88:dc:9a:d3:1c:b1:6f:d8:ff:46:69:73:00:
88:43:63:7a:b5:ce:f5:f4:06:17:e3:a3:42:92:83:55:a7:45:
16:3d:a2:0d:3e:85:0e:12:a0:da:70:84:78:06:8d:8b:94:71:
01:34:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:09:02 2025 by rpki-client