Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/5c5bfd2d-69b6-3bb0-ad85-211c655deaa2.roa
File: 5c5bfd2d-69b6-3bb0-ad85-211c655deaa2.roa (raw, json)
Hash identifier: kfvP9Q1XpXa8+6ebgC2ZH3wS+SRGJF07yZ1DE4gN1mw=
Subject key identifier: 4A:1B:0B:4B:B0:3A:11:F0:BF:F3:73:6A:D1:73:31:77:14:97:C3:CF
Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial: 010D0C9F43285849C29721F6BCAC31209334EE40
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/5c5bfd2d-69b6-3bb0-ad85-211c655deaa2.roa
Signing time: Tue 06 May 2025 05:45:09 +0000
ROA not before: Tue 06 May 2025 05:45:09 +0000
ROA not after: Mon 04 Aug 2025 05:45:09 +0000
asID: 835
IP address blocks: 23.189.120.0/24 maxlen: 24
2602:f805::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 May 2025 06:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c2:97:21:f6:bc:ac:31:20:93:34:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Validity
Not Before: May 6 05:45:09 2025 GMT
Not After : Aug 4 05:45:09 2025 GMT
Subject: CN=215e4429-759d-4c3c-8175-87ad61af3b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:24:ae:7b:d7:a7:e6:44:32:da:44:ba:77:
57:16:be:bf:f0:32:d2:2a:b8:8d:60:d5:d6:16:6b:
5e:d4:41:23:27:08:41:c0:44:c0:24:45:19:d9:f4:
76:c5:69:19:99:8a:41:10:c5:11:d6:8c:91:9c:05:
30:b2:ef:38:ef:e3:f2:37:5a:8a:3f:77:cd:c9:27:
f4:b7:c4:33:91:38:2d:ae:80:5c:5e:09:41:76:e5:
2c:33:ef:04:7e:80:4e:e2:97:01:db:1a:67:71:a9:
33:bf:91:fd:9f:34:a5:57:d2:99:55:38:7f:66:e1:
83:63:ba:8a:9e:85:9b:f1:ab:ae:11:16:13:da:a1:
d4:8a:68:8e:29:04:b2:7a:e4:60:e6:36:7a:c2:fe:
92:b1:6e:ac:b6:b3:63:c9:be:93:0f:bc:dc:63:70:
66:a1:1a:e7:2a:c0:7e:0f:10:e2:23:31:f2:d6:e4:
c1:b2:33:07:bc:5f:64:d6:f2:07:b3:28:96:8b:93:
9e:87:2f:8e:59:31:f9:61:95:35:a3:c2:cd:97:65:
09:3f:06:65:00:49:3f:33:e7:49:91:60:6a:c0:6c:
9f:5b:05:ab:42:bc:48:ee:6b:e8:d7:9b:c4:b9:78:
10:d0:10:bc:f4:92:c9:5a:f1:4d:03:19:5c:0c:b5:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:0B:4B:B0:3A:11:F0:BF:F3:73:6A:D1:73:31:77:14:97:C3:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/5c5bfd2d-69b6-3bb0-ad85-211c655deaa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
X509v3 Authority Key Identifier:
keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.120.0/24
IPv6:
2602:f805::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:62:50:52:94:c9:a6:ca:70:b8:a8:0b:c5:f7:4e:0f:8d:05:
52:73:b5:22:1a:d1:02:29:f7:e3:f3:6e:77:12:8e:a9:45:58:
82:9f:c1:3f:09:58:a9:79:37:2f:f4:22:ec:83:49:c1:f0:d2:
de:2a:1d:f4:e9:5d:47:28:62:81:6b:29:b9:da:6a:96:53:e1:
b9:ca:e3:74:d9:fe:5c:3f:e0:b4:74:bd:fd:9d:1c:24:91:56:
24:e6:dd:d1:c7:31:9a:37:80:f5:cb:a7:b3:ce:2e:6e:b1:3a:
97:89:18:52:5f:78:8b:c6:1b:63:65:58:95:46:26:d7:e8:e4:
c7:c9:13:90:6c:55:76:d9:f5:a6:4c:be:7f:ff:62:c6:99:a8:
5a:80:65:e8:f7:58:78:90:5d:c9:ad:27:e4:97:27:ba:2c:99:
b2:d7:1b:05:9a:22:7a:35:aa:d5:c5:15:55:1c:2d:34:01:80:
14:0b:07:3b:6c:50:2f:0e:10:44:9b:7f:87:d4:05:c9:85:de:
27:18:13:36:10:24:33:a1:3f:d3:c2:94:56:a4:7c:e2:fc:34:
4f:6c:c0:64:42:4f:fe:9a:2d:79:58:23:c7:c7:d3:d7:f3:60:
21:ff:76:81:7d:a6:8e:07:a2:18:dc:d3:a7:97:9e:e8:a3:58:
39:56:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:00 2025 by rpki-client