Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/021f11a7-ca0e-37a2-ab5e-e42cab0e92f4.roa
File: 021f11a7-ca0e-37a2-ab5e-e42cab0e92f4.roa (raw, json)
Hash identifier: sSpjR0CjdW6RtkBQLf0tM0hTFTcUDqNXZeTs+NCKVAQ=
Subject key identifier: 79:EA:60:86:0E:D5:BF:FD:72:39:2A:40:0C:6D:2E:BF:CA:70:4A:C1
Certificate issuer: /CN=f22aba24-e2d9-4f58-ac80-6b95236d64e2
Certificate serial: 010D0C9F43285849EA8A84EE87BDE069C0B671C0
Authority key identifier: 4D:EF:F5:1A:48:3C:08:40:8C:59:E4:16:6B:15:5E:2F:10:D9:55:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/021f11a7-ca0e-37a2-ab5e-e42cab0e92f4.roa
Signing time: Tue 20 May 2025 13:12:05 +0000
ROA not before: Tue 20 May 2025 13:12:05 +0000
ROA not after: Mon 18 Aug 2025 13:12:05 +0000
asID: 16589
IP address blocks: 96.47.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 May 2025 17:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ea:8a:84:ee:87:bd:e0:69:c0:b6:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22aba24-e2d9-4f58-ac80-6b95236d64e2
Validity
Not Before: May 20 13:12:05 2025 GMT
Not After : Aug 18 13:12:05 2025 GMT
Subject: CN=084953ae-5576-4489-940e-c909169ab9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:da:72:10:f6:3a:db:4c:9a:6b:46:16:32:
82:8a:43:fe:ac:52:13:66:11:c3:4c:f5:81:e1:ed:
c9:de:7b:11:6f:ac:b1:21:af:43:49:07:ef:6b:05:
e5:e5:10:fb:8f:46:d1:e3:eb:eb:61:17:49:e0:be:
0d:0f:c2:8a:10:69:6f:79:dc:3d:ca:f1:00:a4:86:
f4:16:44:4a:23:14:c4:bd:0e:27:97:c5:e5:e7:dc:
b6:c6:94:78:19:02:66:15:8e:38:3e:cf:d6:a8:6f:
1f:7f:be:a6:11:0c:93:93:1a:96:b9:0d:48:ac:4a:
0d:fe:50:2d:da:a7:d1:29:07:31:74:23:67:58:1f:
9b:e2:0f:7c:08:b9:ea:89:6c:c6:29:42:01:80:0a:
98:04:db:3c:1a:36:a6:59:0d:63:da:f5:0a:86:03:
d7:95:30:8a:a0:c2:8f:ce:68:c4:c7:b4:00:0d:e2:
90:96:59:21:f3:fc:3a:fe:8c:cb:14:51:db:71:c5:
ed:6e:94:48:70:1a:5b:6f:6e:95:33:f0:79:af:4e:
01:9d:fb:0e:44:3e:a4:3d:e7:7e:2a:49:ee:2b:55:
37:79:23:a8:8c:bd:81:d4:2c:f8:3d:c9:cd:09:fc:
ab:75:ee:8d:2a:d9:fb:c1:73:e2:e2:3f:34:53:75:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EA:60:86:0E:D5:BF:FD:72:39:2A:40:0C:6D:2E:BF:CA:70:4A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/021f11a7-ca0e-37a2-ab5e-e42cab0e92f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/f22aba24-e2d9-4f58-ac80-6b95236d64e2.crl
X509v3 Authority Key Identifier:
keyid:4D:EF:F5:1A:48:3C:08:40:8C:59:E4:16:6B:15:5E:2F:10:D9:55:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2.cer
sbgp-ipAddrBlock: critical
IPv4:
96.47.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:c8:cf:c2:db:84:26:a4:74:f8:f7:60:b9:04:90:da:0e:35:
11:ba:30:63:96:3a:cc:88:da:61:a5:94:82:ce:fd:e6:45:59:
45:65:e5:4f:9d:7a:16:7c:4f:2d:a7:61:ed:ee:8b:3f:52:42:
93:ec:5c:3d:65:3c:c4:90:5b:c1:25:cd:85:45:e8:3b:6f:15:
88:45:3a:25:10:c8:23:8f:22:9d:0f:38:03:e1:bc:2f:02:da:
84:51:d1:b6:a9:c3:4b:dd:db:c2:d4:cf:0b:75:1c:28:50:c4:
91:1a:1c:b8:c5:cf:83:b1:8f:33:57:eb:11:14:87:69:3a:3a:
ca:71:77:2d:b0:7d:1f:dc:be:f8:f3:40:85:94:08:9d:81:fd:
75:cf:e6:90:8b:1e:d4:93:86:2e:82:f3:e6:c7:de:f5:8c:59:
48:c0:9a:21:02:78:9f:c8:06:79:0d:0e:e6:dd:a6:ff:9a:39:
5a:e6:a9:6c:d2:b3:e6:f9:b5:0c:01:78:a5:9c:17:db:8b:9a:
77:9e:d8:93:b9:fa:7b:d8:86:13:c6:81:13:df:aa:ad:0d:ce:
b1:b2:5b:77:92:3c:eb:2a:32:9d:ce:06:57:a4:7b:cb:09:64:
42:07:05:91:56:d8:7f:3d:bf:56:58:7b:81:2e:47:ba:9a:51:
55:d5:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:01:28 2025 by rpki-client