Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/10a8aacd-15b0-3b97-88c9-c96f16520255.roa
File: 10a8aacd-15b0-3b97-88c9-c96f16520255.roa (raw, json)
Hash identifier: qgaA2iY/veZiE4zuyZEWUVwlb4pZsutV73S/NYMRRoU=
Subject key identifier: AB:9C:A2:C9:DB:74:9E:1E:5F:F4:F8:EB:B7:3D:01:6B:D2:FC:1B:B7
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F43285849CE01E59314E6B5677B25F180
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/10a8aacd-15b0-3b97-88c9-c96f16520255.roa
Signing time: Sat 10 May 2025 07:54:10 +0000
ROA not before: Sat 10 May 2025 07:54:10 +0000
ROA not after: Fri 08 Aug 2025 07:54:10 +0000
asID: 834
IP address blocks: 64.22.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 16:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ce:01:e5:93:14:e6:b5:67:7b:25:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: May 10 07:54:10 2025 GMT
Not After : Aug 8 07:54:10 2025 GMT
Subject: CN=0b829c4c-f4fc-4522-9d2f-213efd4249c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:2b:f2:09:5d:52:24:d8:62:40:52:2b:1f:
fa:c1:03:6e:49:19:17:ac:c5:ef:a5:b9:49:6e:1e:
53:f5:ba:59:9b:24:d3:93:9c:00:e1:ce:be:67:23:
b5:b5:0f:62:6f:b9:fa:2e:0b:4b:f2:75:3e:4d:3c:
01:b9:f2:65:2a:00:b7:d1:96:b7:bd:68:0b:63:cc:
81:1a:aa:71:8a:b6:b1:2f:69:1b:e2:77:e3:f7:d5:
0f:77:74:c7:59:44:23:30:60:05:f8:d5:a6:70:2e:
dc:62:3a:13:bc:53:4a:b7:2a:99:8d:47:47:9f:f9:
7d:1c:e6:c0:2b:ff:6a:ac:34:07:34:b4:a9:9c:e6:
ba:bc:eb:f2:de:ad:9d:23:ca:d5:f0:85:94:96:23:
00:58:de:b5:7a:7a:52:36:b2:ca:bc:0b:fc:3a:0b:
b1:b6:73:ee:49:35:4a:df:1e:12:db:7c:ca:3d:11:
0e:26:7d:36:fe:3f:74:51:8c:5f:54:cf:2d:b8:23:
6c:82:cb:0a:e3:03:51:ed:92:3a:89:14:02:13:7e:
85:cc:80:bd:17:be:94:95:a9:96:c2:22:cd:28:78:
90:79:f7:1c:39:80:48:c8:40:b9:95:6a:54:0a:19:
be:f0:0b:65:c1:08:51:76:87:7d:0d:7b:0a:57:c5:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9C:A2:C9:DB:74:9E:1E:5F:F4:F8:EB:B7:3D:01:6B:D2:FC:1B:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/10a8aacd-15b0-3b97-88c9-c96f16520255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
64.22.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:2f:e0:0b:a1:b6:ac:ed:82:3e:c4:df:6d:32:5a:74:5b:da:
ea:03:0d:3d:2f:cd:c6:29:80:86:b3:b0:6b:83:76:c8:7c:cd:
8a:c1:0d:a2:5a:88:52:04:36:20:4f:52:06:6b:69:32:8e:54:
2f:37:b5:61:e1:cf:ec:36:e5:f3:6b:04:48:52:68:65:0e:f3:
a8:3f:66:c3:bd:43:69:c3:1c:3f:63:65:d7:c4:24:b8:3f:c5:
24:cc:ed:b5:c8:26:ef:a2:88:b4:e2:19:1f:95:67:58:18:c4:
4c:0c:56:52:62:84:f3:e0:81:e1:e3:45:06:bf:eb:07:19:2a:
1b:26:cd:ee:81:6d:08:86:15:a9:08:98:a3:f8:b2:1f:8f:3a:
dc:a5:10:81:26:17:b4:1a:31:c0:03:6b:1c:04:72:4e:38:df:
e9:66:2d:a8:27:bf:8a:28:2e:13:34:c0:37:f2:82:fc:e8:27:
a1:f6:bf:41:a5:b6:18:2c:40:85:7a:d5:44:4f:f9:63:34:77:
e7:3f:0c:91:21:ab:49:51:bf:b5:3b:1d:7d:6c:98:ad:ba:83:
62:b8:33:ab:2a:9e:4e:b5:29:f0:13:f0:9a:a6:1f:ab:eb:d0:
d3:df:d6:cf:44:6b:d0:49:25:25:06:94:54:3f:20:56:d0:ca:
3e:62:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:20 2025 by rpki-client