Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/bc9c7581-3217-3576-9f82-dd4e2f87ff94.roa
File: bc9c7581-3217-3576-9f82-dd4e2f87ff94.roa (raw, json)
Hash identifier: eWXKOP8N3DLSGnZtud9Kl51Tm4nTGg1pjDnlbf1Cv/g=
Subject key identifier: F6:17:6E:54:FE:77:74:25:87:13:7E:6D:97:93:02:F4:2D:30:C5:4C
Certificate issuer: /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Certificate serial: 010D0C9F4328584B970D0059CB856EFEAF2FA440
Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/bc9c7581-3217-3576-9f82-dd4e2f87ff94.roa
Signing time: Tue 21 Oct 2025 01:00:31 +0000
ROA not before: Tue 21 Oct 2025 01:00:31 +0000
ROA not after: Mon 19 Jan 2026 02:00:31 +0000
asID: 174
IP address blocks: 64.239.70.0/24 maxlen: 24
2602:812:c000::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 02 Nov 2025 02:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:97:0d:00:59:cb:85:6e:fe:af:2f:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Validity
Not Before: Oct 21 01:00:31 2025 GMT
Not After : Jan 19 02:00:31 2026 GMT
Subject: CN=a01b1280-3d9f-4fcb-87d8-51fffdb9d910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:7a:c6:64:1a:b8:e5:16:a4:bc:4c:be:68:
41:13:8a:cb:10:b8:c3:9b:8a:eb:b7:e8:b4:fb:d4:
12:7d:ca:ae:e6:76:04:28:cb:9e:b4:f9:a4:be:c7:
47:08:c7:41:38:e3:14:45:f4:f8:47:52:c0:ac:15:
3e:e8:dd:9a:51:30:da:69:b3:0b:53:19:8c:4b:09:
44:a0:1a:07:2b:bc:44:fd:19:f2:d1:bb:37:30:b3:
52:b2:8f:19:a1:ec:44:a9:7f:51:b3:df:93:3b:14:
f7:e0:39:f9:d3:70:fe:c2:66:95:2a:05:76:f1:f1:
35:63:00:d0:f6:a1:94:15:53:7d:f6:2d:7d:e9:e9:
1a:ef:a9:bc:93:50:01:88:3a:b1:a0:c7:b9:88:60:
3c:67:d9:37:8a:72:92:f7:5c:31:9f:09:d0:62:df:
53:47:a9:f4:76:ea:b2:ec:f0:1f:17:64:69:bc:bb:
e7:7d:c0:79:f3:ae:06:16:31:f3:f2:7f:3a:d3:60:
4d:d3:ea:f7:90:f3:5a:06:13:fb:44:3a:7e:b2:05:
9a:df:46:40:33:94:7c:93:e4:de:30:de:99:f2:82:
8d:75:34:87:91:22:2c:40:d5:d7:3f:79:1d:9b:80:
b4:fb:af:b8:ab:0d:3f:92:6f:3f:3f:32:29:cc:d1:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:17:6E:54:FE:77:74:25:87:13:7E:6D:97:93:02:F4:2D:30:C5:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/bc9c7581-3217-3576-9f82-dd4e2f87ff94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl
X509v3 Authority Key Identifier:
keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.239.70.0/24
IPv6:
2602:812:c000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:65:6f:09:04:4d:fe:90:b0:cf:cc:2e:11:76:79:bd:60:a6:
a3:36:72:83:e9:f7:31:0b:df:0a:aa:74:8d:8f:4c:61:1d:27:
a1:2f:da:c8:67:96:f7:2a:e1:ac:a4:f3:7e:ab:54:d3:23:c6:
75:e7:a1:b6:7d:b5:d6:4a:72:f0:66:c9:49:92:4f:0d:fc:ed:
b1:c5:5e:cd:0d:db:74:02:26:31:47:1b:11:f9:14:b8:c4:21:
1c:80:4d:91:cf:cc:4b:06:82:d5:1b:a5:00:37:e2:ff:bb:fa:
ae:a3:82:9b:e5:f6:dd:4b:be:bc:c2:7f:eb:34:51:48:45:79:
33:1c:ae:1b:1c:40:8d:d2:62:3f:e4:06:7e:de:3b:0e:c7:e4:
fe:a4:db:70:9d:64:b1:96:16:69:f8:a2:4c:9c:cd:97:e1:ad:
9f:35:7f:5e:b9:aa:78:d0:34:2a:9c:47:aa:b2:40:b3:15:60:
35:22:ce:92:9a:2d:83:2f:71:d1:b5:fb:82:9b:29:34:9d:98:
2f:8a:23:18:37:3d:8b:f3:5b:db:fb:38:52:66:7d:79:95:6d:
db:19:e8:ec:ed:15:69:eb:86:94:b5:2b:9f:dc:80:86:7b:ce:
cc:49:2f:c5:28:9b:c3:48:97:3f:e3:15:59:f1:2e:74:e8:50:
49:73:ad:e2
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDQBZy4Vu/q8vpEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQzZDNlN2UtN2MzNi00OGU1LTk0MmYtYzI4YzQ3NDFi
ZjViMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
YTAxYjEyODAtM2Q5Zi00ZmNiLTg3ZDgtNTFmZmZkYjlkOTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ96xmQauOUWpLxMvmhBE4rLELjDm4rrt+i0
+9QSfcqu5nYEKMuetPmkvsdHCMdBOOMURfT4R1LArBU+6N2aUTDaabMLUxmMSwlE
oBoHK7xE/Rny0bs3MLNSso8ZoexEqX9Rs9+TOxT34Dn503D+wmaVKgV28fE1YwDQ
9qGUFVN99i196eka76m8k1ABiDqxoMe5iGA8Z9k3inKS91wxnwnQYt9TR6n0duqy
7PAfF2RpvLvnfcB5864GFjHz8n8602BN0+r3kPNaBhP7RDp+sgWa30ZAM5R8k+Te
MN6Z8oKNdTSHkSIsQNXXP3kdm4C0+6+4qw0/km8/PzIpzNHkDQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPYXblT+d3QlhxN+bZeTAvQtMMVMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NDNk
M2U3ZS03YzM2LTQ4ZTUtOTQyZi1jMjhjNDc0MWJmNWIvYmM5Yzc1ODEtMzIxNy0z
NTc2LTlmODItZGQ0ZTJmODdmZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzQzZDNlN2UtN2MzNi00OGU1LTk0
MmYtYzI4YzQ3NDFiZjViLzc0M2QzZTdlLTdjMzYtNDhlNS05NDJmLWMyOGM0NzQx
YmY1Yi5jcmwwHwYDVR0jBBgwFoAUxReyLlwfzSPlTE7YzXtB9YocHpkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NDNkM2U3ZS03YzM2LTQ4ZTUtOTQyZi1jMjhj
NDc0MWJmNWIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQO9GMA8E
AgACMAkDBwQmAggSwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACWVvCQRN/pCwz8wuEXZ5vWCmozZyg+n3
MQvfCqp0jY9MYR0noS/ayGeW9yrhrKTzfqtU0yPGdeehtn211kpy8GbJSZJPDfzt
scVezQ3bdAImMUcbEfkUuMQhHIBNkc/MSwaC1RulADfi/7v6rqOCm+X23Uu+vMJ/
6zRRSEV5MxyuGxxAjdJiP+QGft47Dsfk/qTbcJ1ksZYWafiiTJzNl+GtnzV/Xrmq
eNA0KpxHqrJAsxVgNSLOkpotgy9x0bX7gpspNJ2YL4ojGDc9i/Nb2/s4UmZ9eZVt
2xno7O0VaeuGlLUrn9yAhnvOzEkvxSibw0iXP+MVWfEudOhQSXOt4g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:04 2025 by rpki-client