Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa
File: 19928233-6d2f-37ae-9fb3-1f6627892861.roa (raw, json)
Hash identifier: rCezoi5F1LczLmlHZQQ9LNcI8dQFWQICcbqrpttPxzM=
Subject key identifier: F1:43:7A:52:D6:13:9D:F9:43:3E:5A:6D:26:AD:06:1C:8C:04:69:FB
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584A8DF9A343BC711A180455F460
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa
Signing time: Fri 18 Jul 2025 02:12:44 +0000
ROA not before: Fri 18 Jul 2025 02:12:44 +0000
ROA not after: Thu 16 Oct 2025 02:12:44 +0000
asID: 31898
IP address blocks: 129.91.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Jul 2025 05:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:8d:f9:a3:43:bc:71:1a:18:04:55:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 18 02:12:44 2025 GMT
Not After : Oct 16 02:12:44 2025 GMT
Subject: CN=b0b8bbe3-0904-4193-bcd8-7912bc778299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:79:c4:d1:38:d7:83:82:f9:9d:44:a8:22:
9b:cb:20:eb:81:bc:cc:99:12:86:50:37:40:75:ce:
e2:74:ab:ba:39:05:ca:53:29:4e:26:07:af:1a:51:
e3:e0:aa:b8:ae:d6:af:3a:d2:94:40:b8:17:62:ef:
a7:94:aa:7d:84:25:7f:23:50:f4:e6:ce:bf:46:1f:
1c:fd:86:2f:25:72:9f:d4:da:04:85:e0:19:b4:5d:
18:73:6a:cd:ed:04:0b:a8:e9:b6:48:cc:4e:8b:97:
29:e3:86:37:60:b0:93:9b:8a:6e:48:07:61:5f:34:
04:0e:c4:11:f5:fd:85:f3:bf:dd:4e:b4:f3:0a:6a:
7f:a4:22:83:a2:07:bc:17:6d:a3:4f:dc:c0:2e:bd:
c7:4e:0e:3a:cc:1b:cb:bb:da:38:51:d5:db:32:42:
0f:9b:4a:47:ac:45:e9:20:95:0d:5d:fd:86:11:89:
e6:11:f8:ea:df:cb:f4:69:df:76:49:1d:81:a2:eb:
cb:f2:b9:29:8c:0b:7d:46:87:44:54:21:76:71:c9:
f9:eb:72:56:a0:c3:c9:59:70:4c:e3:44:d9:c5:dc:
41:f8:51:03:c7:87:fc:fe:b0:1b:b8:d0:d2:1d:1e:
a9:77:fd:63:97:00:f3:f8:2e:cb:c7:85:33:0f:0a:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:7A:52:D6:13:9D:F9:43:3E:5A:6D:26:AD:06:1C:8C:04:69:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.91.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:79:68:f3:46:21:2a:23:5f:4c:aa:32:02:57:c6:33:c0:db:
e3:34:3b:c1:97:87:1e:4c:72:7e:80:86:05:be:f9:fa:bb:e0:
5e:48:b6:1d:e0:67:a4:ed:bf:8e:3a:36:cc:5f:75:0c:b4:e9:
73:18:a8:52:29:c2:00:5f:39:85:53:ea:c0:d2:84:85:0a:ec:
1f:7c:33:0d:96:05:27:50:6d:0a:ae:c8:34:8e:9c:73:54:37:
fc:64:52:6a:3a:c1:3e:5c:bb:42:2d:78:11:5b:c2:81:97:75:
15:9a:7f:76:35:9f:55:0e:b3:38:a1:40:34:c9:3c:95:53:b6:
d6:21:93:cc:4f:60:f0:35:e5:19:37:fc:bd:c3:6d:eb:85:c8:
bb:7b:2e:7a:f1:09:8c:7e:47:c5:82:d4:75:1e:62:8f:c0:41:
7c:8b:da:f3:dc:f1:43:2a:01:48:3b:a0:66:52:52:33:89:47:
5b:6a:cc:7d:fe:bb:6e:b1:ae:a0:9f:25:66:8a:76:51:c6:bc:
39:3a:b9:98:ef:42:cd:9e:7a:5f:9f:17:c8:66:b0:29:6b:1f:
76:49:11:19:d1:16:c4:71:e8:af:cb:9d:10:ad:b5:e4:4b:f3:
09:65:6c:c4:63:c8:36:a2:ba:7d:4f:71:d7:3b:9e:ed:d2:c2:
5b:08:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:15 2025 by rpki-client