Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/a360b2f0-95ca-3ce4-964d-e0045372812f.roa
File: a360b2f0-95ca-3ce4-964d-e0045372812f.roa (raw, json)
Hash identifier: HOVm5OcD0TSMHXf3wRQHDQ3sxJk39MT2+wPLnvA2jNQ=
Subject key identifier: 0D:AC:33:37:38:7C:ED:04:42:51:61:5A:B8:A1:61:CA:EB:BB:40:EF
Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial: 010D0C9F432858498B4167ACC44213777E4E9180
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/a360b2f0-95ca-3ce4-964d-e0045372812f.roa
Signing time: Wed 16 Apr 2025 10:02:58 +0000
ROA not before: Wed 16 Apr 2025 10:02:58 +0000
ROA not after: Tue 15 Jul 2025 10:02:58 +0000
asID: 16509
IP address blocks: 160.32.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 11:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8b:41:67:ac:c4:42:13:77:7e:4e:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Validity
Not Before: Apr 16 10:02:58 2025 GMT
Not After : Jul 15 10:02:58 2025 GMT
Subject: CN=1bcbaca1-daca-40ff-ba0f-481e23227787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:e7:63:5e:16:b6:2c:60:51:d0:35:f5:5a:
58:e3:40:50:51:dc:b8:59:74:a7:17:9b:84:e7:64:
ee:e6:74:33:06:08:e6:ba:5d:40:7d:d8:ad:48:9b:
24:84:19:1c:e3:38:6a:04:8e:e2:82:3b:f5:35:a7:
92:71:40:cc:fa:51:01:ed:6c:83:53:d3:59:9b:d4:
b4:98:c8:9c:97:86:34:57:96:c7:2d:05:09:ce:db:
97:ce:42:24:98:ea:df:53:3f:c9:97:f0:4b:09:d7:
a8:5e:2d:87:a2:e1:ec:6c:52:00:e7:e0:bc:8c:1a:
0d:fc:b7:c7:81:3c:4b:50:34:55:3d:92:a8:4c:6a:
23:40:f6:a3:36:c4:9c:cf:bd:33:89:a5:c5:8d:22:
ec:a0:fd:d7:e3:95:c9:8f:f0:29:37:7e:6b:e1:06:
33:75:f2:f8:45:0b:d1:27:e4:b2:68:35:5a:6a:84:
fe:45:3b:56:62:2e:b6:b0:ab:6c:61:ec:a6:39:e4:
4b:9e:0f:a7:00:df:90:be:c9:d2:93:1b:93:ba:37:
9d:b2:af:ea:ff:25:d3:3b:e0:46:e0:86:c3:64:4c:
10:98:66:25:7f:0c:63:3c:28:c4:38:94:1b:3e:77:
e2:54:a4:9b:95:61:a3:bf:53:76:d5:5b:a1:02:8a:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:33:37:38:7C:ED:04:42:51:61:5A:B8:A1:61:CA:EB:BB:40:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/a360b2f0-95ca-3ce4-964d-e0045372812f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
X509v3 Authority Key Identifier:
keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
sbgp-ipAddrBlock: critical
IPv4:
160.32.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:aa:7c:f1:13:38:69:72:8a:34:5c:7e:84:99:bb:67:39:93:
f4:f8:c3:0a:37:dd:82:0e:0b:16:31:7c:4b:17:d6:57:b0:9a:
78:b7:16:ae:86:37:cf:e7:ae:5b:30:0e:d1:12:68:10:8e:a5:
21:d0:c2:70:ea:a2:f4:64:02:06:12:aa:9f:fd:ce:0c:1f:ff:
8e:03:fd:0c:f3:98:ab:e4:1c:6a:41:0f:08:2e:ac:2a:26:00:
5c:9f:6c:8b:cd:df:26:1a:e9:a4:26:de:54:6d:36:21:67:0f:
72:ce:b8:c5:6f:23:42:6f:7c:40:70:4c:38:1a:71:7a:13:1e:
cc:40:08:3c:35:aa:32:70:3d:d7:6c:2a:9b:2b:9b:8f:ad:77:
40:03:f2:0a:03:52:24:c6:ba:d8:4e:35:f0:ac:c3:34:ca:7d:
bf:f4:d2:44:82:c2:c8:ed:7e:66:30:aa:9b:a4:c4:28:e4:05:
d6:44:74:3e:02:02:e7:f4:7a:fc:12:c9:69:3d:f8:47:b4:4a:
62:7e:d8:c5:c9:7f:27:b9:dc:5d:30:8c:5b:c1:aa:ba:87:e5:
84:c1:73:95:b2:1b:6e:b8:c9:d9:cb:e0:13:f9:9a:81:3d:b0:
2e:50:fc:a7:7d:1e:30:e8:bf:fc:24:65:e1:1a:ed:07:9d:ca:
a4:7d:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:30:14 2025 by rpki-client