Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/d288b4f1-0a29-335c-b78b-1ac9d0a35c2c.roa
File: d288b4f1-0a29-335c-b78b-1ac9d0a35c2c.roa (raw, json)
Hash identifier: BT+28Ri6cQ8RGnJJxy+6Cv6oIjgc22M4cRrRFjvZga4=
Subject key identifier: EB:A6:A0:25:04:D9:86:19:AA:B8:C9:84:A1:04:E6:92:B9:68:51:4B
Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial: 010D0C9F43285849C2965B50427546852492F580
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/d288b4f1-0a29-335c-b78b-1ac9d0a35c2c.roa
Signing time: Tue 06 May 2025 05:43:36 +0000
ROA not before: Tue 06 May 2025 05:43:36 +0000
ROA not after: Mon 04 Aug 2025 05:43:36 +0000
asID: 34927
IP address blocks: 23.189.120.0/24 maxlen: 24
2602:f805::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 May 2025 06:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c2:96:5b:50:42:75:46:85:24:92:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Validity
Not Before: May 6 05:43:36 2025 GMT
Not After : Aug 4 05:43:36 2025 GMT
Subject: CN=fbf2f824-f357-4916-9101-0f4f2899f051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:19:14:72:24:91:d1:00:0b:3f:47:83:8e:
ad:e9:13:66:95:2b:c1:b3:7d:aa:bb:a9:04:43:4e:
f1:d0:59:e1:e0:f4:a1:04:a8:43:55:73:6d:67:b6:
fd:b8:e2:13:e2:34:e4:f6:a1:e0:41:6a:03:2c:9a:
88:e4:70:99:d0:cd:cd:2e:99:0d:81:af:04:01:22:
d7:71:63:de:3d:bd:f5:e3:e8:79:5b:62:b6:24:7f:
ef:2f:48:17:c8:7b:33:ba:c6:4f:1c:ad:9b:b1:ff:
f2:dc:cb:67:8a:09:f2:63:20:0b:86:15:e0:6c:8c:
51:a3:2e:fe:90:5d:a2:8a:a6:82:3d:a8:3a:b2:9d:
9a:c4:51:b0:f4:88:b9:8a:f8:74:4d:c6:50:ed:86:
e1:07:60:7d:98:22:5c:ab:41:2f:0c:5c:67:70:f0:
75:26:e7:81:93:2b:bd:55:be:17:86:1f:c6:5b:e5:
08:14:af:d1:3e:52:ba:c0:05:98:f0:4e:b2:a6:10:
04:d2:5a:51:38:47:72:d1:58:b7:ae:ea:b9:d9:9d:
7e:a9:5d:66:a7:0a:f6:74:b2:2b:53:01:7a:0d:e2:
f3:9d:1f:3b:16:d1:80:f4:c8:e6:b2:8f:80:f9:f5:
c3:37:66:d1:0f:4d:40:08:9a:36:e1:fb:13:74:04:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A6:A0:25:04:D9:86:19:AA:B8:C9:84:A1:04:E6:92:B9:68:51:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/d288b4f1-0a29-335c-b78b-1ac9d0a35c2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
X509v3 Authority Key Identifier:
keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.120.0/24
IPv6:
2602:f805::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:29:e9:aa:28:d4:f3:46:fc:13:67:b9:f0:ba:a0:0e:1f:84:
1a:45:f9:d8:69:de:79:fd:ec:ae:60:a2:bb:a1:8e:57:9b:61:
4e:88:f4:40:bf:93:25:7c:88:0f:47:37:c4:3c:2b:78:5a:82:
49:a4:7c:99:64:be:cd:98:d9:92:31:0e:36:85:e2:fb:d3:01:
60:02:4b:8d:43:e5:2e:26:ed:27:36:33:7d:b4:14:b6:87:ea:
7d:77:6a:e0:fd:e1:82:dc:76:d9:27:7d:3e:93:5a:98:b8:83:
e3:59:ef:91:24:34:cb:7f:c7:df:92:db:97:da:e2:0e:b1:1d:
dc:3b:c1:d9:eb:76:9a:83:c2:fe:70:57:e3:63:98:e2:99:c3:
e0:21:a3:8d:24:f2:66:8f:90:3b:82:1c:42:87:a5:d6:b8:fd:
6a:7c:b5:c8:15:a9:ba:e5:7a:67:5b:f8:4a:c6:7d:c8:2e:5e:
3f:f8:a3:0b:87:c6:52:54:11:36:da:e0:bf:2d:ff:50:b4:d3:
ad:34:34:cc:b3:3d:6c:81:be:8a:5f:58:00:1f:c5:21:da:c7:
b3:cb:1c:52:da:31:cc:59:55:ce:2a:7f:17:d5:2c:09:7f:2e:
04:02:a2:2c:d6:33:30:ea:61:c5:18:78:aa:7c:84:bd:3d:9b:
e1:70:7a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:44:49 2025 by rpki-client