Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa
File: f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa (raw, json)
Hash identifier: m8mEf1I83oqro0CN9S0fNrobT2gNFoONQpcBHcNqSKA=
Subject key identifier: 58:01:BC:C6:70:13:53:70:33:57:AA:9D:84:6A:70:FF:2F:59:45:98
Certificate issuer: /CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
Certificate serial: 010D0C9F4328584AA34F14BBADE54B4DBD2D2000
Authority key identifier: 8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa
Signing time: Fri 25 Jul 2025 17:36:52 +0000
ROA not before: Fri 25 Jul 2025 17:36:52 +0000
ROA not after: Thu 23 Oct 2025 17:36:52 +0000
asID: 401736
IP address blocks: 23.142.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Jul 2025 03:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:a3:4f:14:bb:ad:e5:4b:4d:bd:2d:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
Validity
Not Before: Jul 25 17:36:52 2025 GMT
Not After : Oct 23 17:36:52 2025 GMT
Subject: CN=fc65cdd3-3564-4430-a4c4-dfd743c81c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:e8:ce:93:ea:3a:9f:e4:d6:18:16:d1:ff:
5e:2a:26:b7:fd:12:d8:a7:d4:b0:19:35:a9:de:d2:
e7:dd:a2:55:c1:ce:a3:4c:fa:a4:89:63:c5:a4:27:
39:1d:43:22:c7:41:48:7e:d9:28:13:41:b5:23:db:
e4:cf:c5:0e:93:53:20:28:b6:4c:5a:74:a7:06:a4:
72:ae:7f:4d:cc:26:ca:25:6d:be:8e:68:42:b7:ca:
2c:d7:d4:8c:fa:5b:33:97:5f:ea:37:bc:3c:8b:b9:
9f:77:b3:85:00:12:b2:90:2e:e5:0a:98:7a:ec:d1:
82:3b:08:8d:8f:5e:1d:ce:27:3c:fc:bd:60:77:5e:
51:3b:3b:cb:88:9f:1a:f2:97:f4:10:1c:ec:0a:1a:
21:6f:60:0a:bf:51:9b:48:cb:7e:69:56:7e:74:1b:
a3:95:45:8d:6b:68:6b:b8:93:85:27:66:94:2c:d9:
5f:9c:2a:de:9e:90:0d:75:dd:2c:34:ad:f9:66:1f:
fb:e4:cc:f9:3c:0a:44:88:a0:87:7b:6a:50:87:e1:
4f:e7:50:c4:24:7f:2c:56:67:68:00:7b:a6:44:b1:
2f:ab:7e:a2:e8:3b:dd:fe:63:fb:ef:34:2f:2b:54:
ad:16:c9:f2:17:e9:78:95:d1:0a:d1:d9:05:42:85:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:BC:C6:70:13:53:70:33:57:AA:9D:84:6A:70:FF:2F:59:45:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl
X509v3 Authority Key Identifier:
keyid:8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:dd:cb:ff:b1:20:6e:e2:24:99:9b:c0:66:67:b0:6d:ef:39:
1f:30:9c:ed:fc:d7:b9:f7:b8:7b:54:5b:92:c6:f1:2a:fd:24:
bb:53:9a:c7:c8:e2:09:74:3c:67:f2:61:46:25:0c:11:18:ff:
3e:3b:44:10:77:6d:9d:87:0d:2f:02:a8:09:87:0c:ca:37:96:
9a:0e:cf:de:23:ee:a5:e2:52:78:82:9d:bc:e4:2f:1d:4c:50:
76:77:8b:12:36:81:2a:d9:a1:3d:a5:0b:ad:35:fc:1c:72:3c:
4d:21:b0:bf:de:23:cd:39:13:29:e7:80:37:c3:2f:23:8b:09:
42:28:55:d3:6b:53:7f:0d:9a:7b:aa:1b:4f:5f:16:bf:f5:d2:
f4:f2:cb:33:75:f0:34:c3:f6:ce:e2:68:26:53:2a:66:ea:8f:
01:30:13:d4:ae:62:3d:f8:8f:5f:20:72:6f:4d:56:ea:0b:0f:
43:e6:90:09:3f:57:3f:b8:fe:e8:3b:d5:9e:5f:f2:85:5b:91:
bc:43:3f:f5:53:9a:a9:f5:1b:79:4e:a7:2f:6f:c7:96:a4:b6:
a2:6f:05:a0:c4:dc:be:46:d4:83:e4:ec:a6:8d:13:90:97:fc:
51:17:b8:02:5b:fe:c7:22:91:dc:09:f9:b7:8e:2a:65:5b:78:
b9:f8:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 23:00:34 2025 by rpki-client