Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1791cd77-4c22-3df1-8ec9-3ea13afa74a0.roa
File: 1791cd77-4c22-3df1-8ec9-3ea13afa74a0.roa (raw, json)
Hash identifier: D881BMC5yIU76OuWcZPlLzxTXzELig3wJHPTh0bwiNQ=
Subject key identifier: 86:7E:21:AA:FD:D7:24:68:57:BB:E1:90:78:D8:66:69:48:C4:FD:2E
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285849C20A025E1B5EA3A39A8B0400
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1791cd77-4c22-3df1-8ec9-3ea13afa74a0.roa
Signing time: Tue 06 May 2025 01:00:47 +0000
ROA not before: Tue 06 May 2025 01:00:47 +0000
ROA not after: Mon 04 Aug 2025 01:00:47 +0000
asID: 23304
IP address blocks: 207.176.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 08:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c2:0a:02:5e:1b:5e:a3:a3:9a:8b:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: May 6 01:00:47 2025 GMT
Not After : Aug 4 01:00:47 2025 GMT
Subject: CN=b0f92ffe-197a-4f4e-a832-ad92b0272744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:0d:c2:ba:41:f8:c7:61:f4:3a:c2:6a:d1:
ff:e6:a9:67:f2:16:9c:e6:d3:c6:d2:17:ad:0d:a3:
9a:ed:0d:17:04:86:26:ec:0d:c0:25:61:6b:e3:2b:
16:09:03:ce:19:4d:3f:c7:ae:aa:a3:4c:1f:31:ff:
bd:27:eb:93:43:44:a0:04:b4:1b:99:2a:44:ba:9c:
b0:54:04:c0:0d:41:b7:93:2c:d3:41:4a:93:3d:4d:
53:d0:17:d0:45:02:fa:c8:76:7b:f8:d9:fd:1c:03:
d4:07:9c:07:50:60:3e:cb:22:23:ad:e8:2a:59:3e:
34:5a:09:59:38:e4:fb:64:de:cd:71:14:c9:66:5e:
25:1d:42:33:dd:e9:ab:37:53:5b:c1:eb:5c:25:29:
db:49:86:c0:2b:50:03:56:92:bb:e7:7d:ab:9e:43:
d0:87:30:e2:67:fd:bc:b5:d1:a9:a5:5c:29:6b:5e:
3b:71:ce:5a:5f:4a:f9:b0:ec:bb:0c:5d:22:5b:70:
c1:06:31:92:ef:df:d0:28:44:3f:a8:a3:b7:0a:1c:
04:8d:e4:b0:02:24:4d:be:48:52:1b:24:8d:50:8f:
65:96:97:ae:36:5f:e6:c1:da:ee:95:97:47:51:33:
49:71:9e:5e:86:7e:2c:f7:38:82:89:0e:ec:5e:4c:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7E:21:AA:FD:D7:24:68:57:BB:E1:90:78:D8:66:69:48:C4:FD:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1791cd77-4c22-3df1-8ec9-3ea13afa74a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.176.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:3b:fc:45:da:9c:2d:71:39:f3:7f:b6:bb:5b:fa:7e:a8:ab:
69:ab:3b:9f:a0:a4:df:cf:0e:41:b1:a0:ec:6c:27:03:1d:e0:
bc:77:68:b2:e9:b9:97:be:6d:e7:cf:17:b3:78:f7:57:99:80:
0e:d1:e9:09:76:e0:9f:43:78:91:1b:5a:43:49:f4:34:b6:ef:
65:cb:d1:de:ed:d4:e9:44:8f:f5:d4:2c:7d:b4:59:9a:f4:99:
90:9f:ab:b5:48:15:c0:b6:25:8a:dd:12:ba:0e:ad:70:99:2c:
e3:70:b4:04:e2:a9:88:6b:63:62:88:13:89:aa:d5:b6:99:49:
3b:19:fa:9f:71:49:bc:41:81:01:94:90:00:2c:fa:3e:f5:47:
84:97:c1:08:7f:b3:b2:6a:9b:3b:d3:eb:d5:e8:61:bc:01:8c:
c0:b4:99:81:fe:57:4c:5e:5e:c3:f0:ae:a0:ef:02:40:45:20:
c4:c6:df:d8:b3:10:c0:1b:a9:5c:ac:71:2b:43:28:56:a6:40:
f2:18:c8:67:5d:0b:c0:72:2c:18:53:81:f9:00:e4:6f:50:2a:
95:98:2c:f8:29:ee:97:74:02:e6:95:0b:cb:cf:37:ab:40:8a:
97:0b:24:03:34:68:94:7d:20:fa:b2:6f:7c:46:a8:2f:46:2e:
29:4e:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:15:20 2025 by rpki-client