Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/b988863a-b55f-306e-a9f1-1ac1df3e2b66.roa
File: b988863a-b55f-306e-a9f1-1ac1df3e2b66.roa (raw, json)
Hash identifier: MmWIfrG7w74n6aTmyFke4xX+HTRWwp163+pYFiMJAAg=
Subject key identifier: A5:0D:C0:A3:BD:20:94:1B:16:EF:58:6B:98:24:74:5E:DA:0E:C2:88
Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496
Certificate serial: 010D0C9F432858498E6481EC72CBCD4C688128A0
Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/b988863a-b55f-306e-a9f1-1ac1df3e2b66.roa
Signing time: Thu 17 Apr 2025 13:01:00 +0000
ROA not before: Thu 17 Apr 2025 13:01:00 +0000
ROA not after: Wed 16 Jul 2025 13:01:00 +0000
asID: 40623
IP address blocks: 140.208.0.0/17 maxlen: 24
140.208.128.0/19 maxlen: 24
140.208.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 22:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8e:64:81:ec:72:cb:cd:4c:68:81:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496
Validity
Not Before: Apr 17 13:01:00 2025 GMT
Not After : Jul 16 13:01:00 2025 GMT
Subject: CN=e0bd7571-c4d0-4f6f-bfdc-ff9d12b18e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7a:56:45:a2:e9:e8:e2:d2:0b:ad:30:be:d2:
31:b3:3c:2c:43:20:0b:ea:69:12:21:84:02:56:3a:
76:4b:f0:e7:b5:b1:b1:dc:3b:c3:57:db:e4:cd:68:
c2:6d:2c:f3:e7:53:93:55:89:d4:a9:74:2e:62:3c:
52:81:c3:1f:29:6b:d0:48:31:75:ba:89:3c:67:d3:
fb:01:be:3d:ca:4d:c8:0b:50:12:d2:33:e2:10:32:
0f:cd:d9:20:21:47:4d:ba:7b:fd:ca:19:c5:50:c4:
c7:fc:00:3c:1d:26:38:d3:84:bb:90:d3:73:45:a6:
99:46:89:77:4d:28:5d:2a:0a:29:53:a5:f3:3a:f9:
77:94:48:75:31:23:d4:ed:9c:e5:16:e7:86:72:70:
a3:0e:1d:b0:17:79:06:21:88:2e:f8:26:74:1f:f3:
5e:36:34:c9:60:3e:64:33:69:fd:dd:03:43:a1:9c:
1d:4c:5d:17:ac:dc:83:11:4c:08:a7:bf:9c:38:e1:
c1:da:28:21:bd:f0:d0:b3:71:26:bb:b8:33:24:fc:
5c:35:5d:a0:d6:ce:40:81:8a:3e:d0:24:25:bb:ff:
b8:cd:ab:9a:d7:09:c4:6d:2f:a6:52:3d:79:03:14:
67:be:13:61:fd:35:53:dc:cd:50:f4:b6:43:94:8b:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0D:C0:A3:BD:20:94:1B:16:EF:58:6B:98:24:74:5E:DA:0E:C2:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/b988863a-b55f-306e-a9f1-1ac1df3e2b66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl
X509v3 Authority Key Identifier:
keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
sbgp-ipAddrBlock: critical
IPv4:
140.208.0.0-140.208.159.255
140.208.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:d6:b2:c9:90:cf:77:63:74:13:37:0a:00:4d:8a:cb:f9:b2:
44:dd:64:21:82:29:87:d6:ab:a5:c2:d6:97:92:c4:56:1a:35:
8e:0f:7a:ed:ba:6f:5a:3b:7e:30:af:15:1a:02:00:91:eb:6a:
cb:dd:a3:ea:37:00:3a:57:94:c0:6c:8b:6f:69:4a:d2:0f:bc:
40:e8:cb:7b:9b:7b:d8:56:bc:0e:a6:d8:82:cb:68:24:60:ca:
f4:c2:b9:7f:9f:79:06:f6:ee:bd:f7:c4:51:e2:15:fe:fc:db:
e3:d4:32:10:9a:8f:00:28:c2:69:0e:1a:8c:66:48:9c:8c:8b:
45:0a:f9:07:98:b4:50:64:49:bb:f0:b5:10:25:28:ab:79:a7:
c0:2a:50:f1:b2:b9:2e:29:4b:0d:c9:8b:92:a5:ac:4e:3b:f7:
a7:3a:dc:d3:a9:f0:a6:7a:7d:f1:e8:3e:21:63:3f:fb:af:f0:
32:9c:93:55:01:a4:c0:7b:e0:bb:5c:13:96:b7:0f:1f:9b:b0:
03:0d:b9:6e:20:88:66:c3:b4:62:de:4e:81:8c:f8:3c:2b:89:
50:60:08:d5:dc:cb:ee:db:de:2b:97:13:e0:2a:3f:8e:24:bc:
41:97:42:76:07:a2:9a:36:3e:9e:86:1e:ad:44:9a:5f:f3:9d:
68:5d:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:40:55 2025 by rpki-client