Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3c6e9e9d-aade-304b-bf9a-e66f5bd801d8.roa
File: 3c6e9e9d-aade-304b-bf9a-e66f5bd801d8.roa (raw, json)
Hash identifier: NRdbvM3YGpghwEK4BZtPvQ2TySHfpzIstcHhUUN2glw=
Subject key identifier: BF:5E:07:24:64:87:B9:9F:9A:9D:29:E8:C2:53:BA:11:30:E4:D3:47
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285849DC6A7F793007FA2082813E40
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3c6e9e9d-aade-304b-bf9a-e66f5bd801d8.roa
Signing time: Thu 15 May 2025 11:46:15 +0000
ROA not before: Thu 15 May 2025 11:46:15 +0000
ROA not after: Wed 13 Aug 2025 11:46:15 +0000
asID: 834
IP address blocks: 141.140.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 11:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:dc:6a:7f:79:30:07:fa:20:82:81:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: May 15 11:46:15 2025 GMT
Not After : Aug 13 11:46:15 2025 GMT
Subject: CN=159d7a47-8d77-4411-a3ec-66df01b1d081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:a5:98:0f:7d:ed:36:c6:cc:27:6b:a5:5b:
9e:1e:35:bb:32:ff:7f:5c:3b:26:91:6e:96:59:f8:
f5:e2:1a:e1:f6:c3:7f:7d:c0:2d:a6:40:b7:91:be:
62:c2:a5:86:16:6b:81:5f:96:be:10:65:54:b9:c6:
5a:0d:a7:6d:c4:e4:eb:4a:ab:8f:c1:e7:af:67:6e:
0d:c3:49:6e:58:61:7b:da:d8:cf:b6:e8:bd:4d:a6:
a5:57:b1:84:42:e1:60:58:62:ae:09:8c:a2:43:7a:
c3:1f:4d:14:64:82:ce:b0:36:57:88:25:f9:e8:32:
b6:1e:c6:33:49:5a:7a:eb:14:c9:3e:6b:66:d3:80:
4d:f3:5f:b9:b7:3f:0b:ca:2f:6a:a9:37:ad:b4:d3:
ed:4f:a5:0c:e0:94:0d:d8:49:15:76:21:19:c9:5e:
0f:a8:6d:c4:94:86:f0:52:a3:5e:3b:ec:99:cd:f1:
4a:cf:34:95:f4:23:0e:0c:63:36:dc:7e:f5:33:35:
d7:16:9b:ca:fa:53:35:ec:37:74:f4:50:69:97:8a:
47:89:9d:c8:1d:12:d5:ea:f9:57:12:72:65:8a:f3:
b9:dc:ba:47:bb:24:2b:aa:80:58:89:26:a5:61:90:
23:f1:49:55:dc:92:6b:6b:59:fc:55:b8:06:be:7e:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5E:07:24:64:87:B9:9F:9A:9D:29:E8:C2:53:BA:11:30:E4:D3:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3c6e9e9d-aade-304b-bf9a-e66f5bd801d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:43:dd:a2:8d:17:6d:88:a4:51:93:99:c7:38:18:22:98:e0:
d1:d4:47:ac:63:8c:99:01:32:35:ed:c3:81:1b:d5:25:da:23:
7d:8d:65:b7:77:7b:4d:21:c4:a8:7e:f3:a2:30:c1:2a:7f:51:
fd:c0:fc:dc:b7:1f:eb:b2:cc:45:d9:13:1f:db:5a:55:41:89:
ea:35:62:37:aa:f1:51:2b:95:12:15:7e:2f:0d:95:e9:66:46:
a2:db:26:0c:e4:34:b9:4b:1f:d9:f3:29:25:12:93:98:b9:3e:
3b:b5:5d:66:e3:60:04:e1:1f:d0:ec:eb:df:1c:af:c5:8a:07:
0f:4a:7c:81:49:12:39:60:8d:2b:cf:2f:05:08:08:16:cd:fd:
dc:fb:ea:01:b2:cc:2b:26:e0:31:a4:82:84:59:ec:09:44:fd:
b9:34:b6:03:e1:6d:a2:f6:22:1b:93:54:4c:0d:a3:c6:8f:4b:
f6:40:b3:9c:a3:f7:cd:53:d4:a9:8d:ad:88:ab:91:fe:a0:ad:
e3:d2:3b:02:ff:c5:ca:13:6d:79:dd:15:a4:ce:28:ee:35:4d:
e9:70:67:60:07:80:51:8f:b7:75:0a:ad:60:9f:07:e1:e7:cd:
51:b1:b7:dd:cd:05:9a:62:8d:7d:0c:0d:8e:3d:87:9f:c3:45:
db:6c:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:29 2025 by rpki-client