Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/558ffad2-e526-392f-b8aa-14c3159c7fca.roa
File: 558ffad2-e526-392f-b8aa-14c3159c7fca.roa (raw, json)
Hash identifier: wAFo5ES4e0hHt8nyrYNeIWTXuz59ifWUXi6HUrluPrw=
Subject key identifier: CF:2A:FB:68:43:47:7E:6A:C7:37:38:14:A3:8B:25:CB:1C:51:4C:D0
Certificate issuer: /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial: 010D0C9F4328584986AFCFAD70872386A90A8680
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/558ffad2-e526-392f-b8aa-14c3159c7fca.roa
Signing time: Mon 14 Apr 2025 18:46:23 +0000
ROA not before: Mon 14 Apr 2025 18:46:23 +0000
ROA not after: Sun 13 Jul 2025 18:46:23 +0000
asID: 19830
IP address blocks: 208.99.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:86:af:cf:ad:70:87:23:86:a9:0a:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Validity
Not Before: Apr 14 18:46:23 2025 GMT
Not After : Jul 13 18:46:23 2025 GMT
Subject: CN=48878353-a546-422a-84d7-e9ee502a55d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:b0:ce:91:47:a4:bf:a8:c9:e9:b7:82:4f:
f6:87:00:09:41:d2:48:42:b4:1f:72:7c:a6:d7:f9:
5a:b0:e3:9f:d5:c7:c6:29:37:0c:48:17:6c:ba:83:
84:4e:4b:23:99:f1:6f:68:9b:61:09:30:0c:98:3c:
52:e2:6c:3b:00:07:61:58:0d:8f:4d:4a:9b:82:e6:
f3:d5:30:e2:2f:26:42:a9:04:ee:ae:0a:78:f8:fc:
3d:b0:4c:a5:be:b0:88:86:2f:3d:d6:41:ef:82:4c:
b0:3f:4a:d4:8e:ce:6b:34:fb:48:7c:b2:4d:21:e6:
50:9a:39:9f:47:fd:d6:9c:d1:e0:96:0f:30:26:91:
0b:3d:78:2e:d0:2d:c0:07:f0:73:e9:83:fd:03:11:
9a:dc:ab:bd:0d:fc:f1:b1:f8:f1:06:0c:53:23:a4:
59:8b:08:14:d6:56:f8:93:bc:45:02:78:4c:21:b4:
6f:04:9e:c4:05:00:e8:d0:7a:b3:73:8a:a1:56:9c:
93:6b:72:a0:6f:cd:b8:a9:ff:89:38:45:43:0c:d8:
ac:91:54:61:00:23:51:e4:9d:aa:41:de:f0:b6:6c:
9a:e0:40:5b:9d:a5:44:98:2c:ab:5d:e5:6b:ef:e2:
a6:f4:94:3a:54:ef:8f:85:08:0d:6d:9b:86:09:61:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2A:FB:68:43:47:7E:6A:C7:37:38:14:A3:8B:25:CB:1C:51:4C:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/558ffad2-e526-392f-b8aa-14c3159c7fca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
X509v3 Authority Key Identifier:
keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:44:2b:af:91:f2:32:2d:f9:ad:70:72:ba:b4:ad:08:1c:4a:
09:05:c3:d7:0f:35:0f:de:70:fd:d4:81:46:9d:4c:37:90:65:
f8:79:8b:1b:90:7f:0f:bd:3c:9d:10:e8:bd:c4:f5:ad:58:78:
1f:82:12:b7:13:e6:80:08:bf:59:30:c8:6f:69:73:6c:b2:84:
7e:f0:98:56:34:c0:68:bd:aa:61:15:88:a2:80:a6:2d:a1:f7:
82:bc:35:22:fa:5e:b0:de:eb:94:d7:90:48:c5:60:c2:0d:8a:
e4:78:1f:30:85:a1:c4:3c:b1:8a:8c:e2:fd:8e:d4:4e:29:2f:
43:6a:69:fa:f5:f7:6a:43:58:fa:33:1c:7b:6a:7e:2c:3b:46:
df:70:3c:39:76:73:7a:fa:71:43:08:70:2a:85:5f:70:db:e5:
2f:0a:cb:dc:64:39:2d:b1:96:b8:c6:e2:35:c7:0f:06:f0:3a:
b4:38:9f:a6:3e:2c:03:23:6f:d0:8b:52:45:5a:13:59:b0:1c:
b2:7b:ec:b9:6b:7b:75:a7:e5:ea:28:e6:9a:43:5f:cf:c8:64:
98:24:a6:5a:03:32:a3:f0:e9:1b:e0:6c:3b:15:3c:fc:e9:f6:
b5:db:3f:ed:fa:a2:fe:1d:53:ba:8b:a4:6e:1d:2d:9a:35:1d:
97:e2:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:20:53 2025 by rpki-client