Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/813c5230-7133-3ec7-a402-33e891f25bb1.roa
File: 813c5230-7133-3ec7-a402-33e891f25bb1.roa (raw, json)
Hash identifier: WVA6/rgS5flHwpdbeSzmcjcEjArb1UCMdqTmslzzbcw=
Subject key identifier: A3:D8:7B:F0:BF:2C:B4:DA:00:3F:1B:37:5B:98:DB:FC:F6:A7:DF:FD
Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial: 010D0C9F43285849EB7119DEC34900F511BFD900
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/813c5230-7133-3ec7-a402-33e891f25bb1.roa
Signing time: Tue 20 May 2025 20:56:40 +0000
ROA not before: Tue 20 May 2025 20:56:40 +0000
ROA not after: Mon 18 Aug 2025 20:56:40 +0000
asID: 10794
IP address blocks: 199.201.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:eb:71:19:de:c3:49:00:f5:11:bf:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Validity
Not Before: May 20 20:56:40 2025 GMT
Not After : Aug 18 20:56:40 2025 GMT
Subject: CN=0fb6e8ae-5437-484a-99e4-4481b21cabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:38:63:47:eb:5d:f7:25:62:cb:fe:05:f9:
6e:de:c3:45:11:29:f1:ed:3b:71:e4:e3:4e:2f:41:
4c:e4:35:c3:6f:dd:07:ec:46:e1:58:fa:5f:2a:2f:
ac:88:9f:bf:f5:ab:b1:a6:62:8a:ac:0d:04:b8:7d:
a6:03:eb:9f:8a:30:c2:62:dc:85:bc:5d:19:fb:dd:
d3:f2:68:5d:94:e6:56:86:f5:66:12:84:a6:00:46:
b3:68:b2:6d:36:31:37:a9:74:12:33:61:14:af:b9:
c3:a6:aa:57:da:f8:f3:73:c0:5d:49:17:1f:b6:38:
f7:ec:4e:f7:50:cc:bf:39:c1:bd:d5:6c:b3:9b:9e:
4b:51:97:4b:c1:a7:28:a8:b2:04:47:24:55:b3:8b:
b7:39:1f:83:18:0f:1c:dd:ed:b0:55:bd:c0:4c:8a:
bd:91:37:1b:f5:89:07:c7:13:2c:57:53:f7:d2:5d:
b2:9f:f8:d2:af:c4:78:39:ac:d0:7b:41:2b:cf:5a:
79:dd:17:6d:1a:44:22:f2:2f:de:8a:ba:77:5a:05:
53:fa:f2:5a:03:a7:9b:91:dd:63:11:6b:98:d6:1f:
94:a5:22:fc:35:bc:07:c4:58:80:31:77:25:8d:22:
cd:2a:7e:d8:07:22:8d:58:29:10:97:eb:da:e8:a9:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:7B:F0:BF:2C:B4:DA:00:3F:1B:37:5B:98:DB:FC:F6:A7:DF:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/813c5230-7133-3ec7-a402-33e891f25bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
X509v3 Authority Key Identifier:
keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.201.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:bf:55:d9:fc:b6:7b:d1:e6:94:8a:8c:56:50:c8:d3:1c:7a:
7f:4e:c5:bf:87:4f:36:33:b8:2a:38:5a:67:c4:f3:cf:7e:d0:
e7:da:00:6a:d4:e4:c0:da:e7:2d:56:b2:52:d5:67:f5:70:ff:
a8:d3:d4:5a:80:9c:b4:2e:55:e3:8e:4a:3e:0c:36:25:e7:29:
63:19:8e:2f:b0:6e:75:41:0c:41:55:a3:82:af:5d:6c:88:99:
ec:61:3c:f0:83:63:26:17:12:87:35:c0:b7:1c:97:19:5e:4d:
d6:d2:ed:db:d9:42:8b:b2:28:ec:85:70:3f:61:65:a4:e4:4e:
5b:cf:be:c7:cc:fe:21:54:a3:d0:92:41:63:e7:12:8e:89:37:
0d:4e:3c:ad:93:21:42:3b:41:2f:0c:25:ff:3f:5a:97:49:a6:
71:cf:f0:72:3a:12:3b:9a:ff:e1:1f:bf:63:b1:46:4d:06:58:
bb:6c:6e:91:36:1a:b4:4a:4a:96:cf:51:d6:41:51:ab:38:41:
79:13:80:2a:0b:8e:62:24:2b:10:bd:23:f8:dd:f6:a3:b7:0e:
81:d9:29:df:ad:2e:30:5b:9d:ad:86:e1:9c:8b:ff:e5:0a:37:
3e:d0:7c:35:c1:64:74:d2:86:18:09:8c:10:73:da:eb:bf:76:
4b:38:af:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnrcRnew0kA9RG/2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1
MWI2MB4XDTI1MDUyMDIwNTY0MFoXDTI1MDgxODIwNTY0MFowLzEtMCsGA1UEAxMk
MGZiNmU4YWUtNTQzNy00ODRhLTk5ZTQtNDQ4MWIyMWNhYmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWk4Y0frXfclYsv+Bflu3sNFESnx7Ttx5ONO
L0FM5DXDb90H7EbhWPpfKi+siJ+/9auxpmKKrA0EuH2mA+ufijDCYtyFvF0Z+93T
8mhdlOZWhvVmEoSmAEazaLJtNjE3qXQSM2EUr7nDpqpX2vjzc8BdSRcftjj37E73
UMy/OcG91Wyzm55LUZdLwacoqLIERyRVs4u3OR+DGA8c3e2wVb3ATIq9kTcb9YkH
xxMsV1P30l2yn/jSr8R4OazQe0Erz1p53RdtGkQi8i/eirp3WgVT+vJaA6ebkd1j
EWuY1h+UpSL8NbwHxFiAMXcljSLNKn7YByKNWCkQl+va6KmVHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPYe/C/LLTaAD8bN1uY2/z2p9/9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh
YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvODEzYzUyMzAtNzEzMy0z
ZWM3LWE0MDItMzNlODkxZjI1YmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl
NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi
NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz
YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8k1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEa/Vdn8tnvR5pSKjFZQyNMcen9Oxb+HTzYzuCo4WmfE889+0OfaAGrU
5MDa5y1WslLVZ/Vw/6jT1FqAnLQuVeOOSj4MNiXnKWMZji+wbnVBDEFVo4KvXWyI
mexhPPCDYyYXEoc1wLcclxleTdbS7dvZQouyKOyFcD9hZaTkTlvPvsfM/iFUo9CS
QWPnEo6JNw1OPK2TIUI7QS8MJf8/WpdJpnHP8HI6Ejua/+Efv2OxRk0GWLtsbpE2
GrRKSpbPUdZBUas4QXkTgCoLjmIkKxC9I/jd9qO3DoHZKd+tLjBbna2G4ZyL/+UK
Nz7QfDXBZHTShhgJjBBz2uu/dks4r2k=
-----END CERTIFICATE-----
Generated at Wed Jun 18 20:58:17 2025 by rpki-client