Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/5a136446-28e9-3752-b163-432c7e24c32b.roa
File: 5a136446-28e9-3752-b163-432c7e24c32b.roa (raw, json)
Hash identifier: FvctBUfWbUeIBRmQ8OCu9Mn5VafcaUPMBXvjCfDOmk4=
Subject key identifier: 7E:85:BB:98:3B:66:77:7E:F9:38:13:B0:56:2B:67:60:D5:D8:D5:0E
Certificate issuer: /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial: 010D0C9F4328584B722EA25A41E6F002C05EC600
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/5a136446-28e9-3752-b163-432c7e24c32b.roa
Signing time: Tue 07 Oct 2025 20:03:49 +0000
ROA not before: Tue 07 Oct 2025 20:03:49 +0000
ROA not after: Mon 05 Jan 2026 21:03:49 +0000
asID: 401106
IP address blocks: 131.143.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Oct 2025 07:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:72:2e:a2:5a:41:e6:f0:02:c0:5e:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Validity
Not Before: Oct 7 20:03:49 2025 GMT
Not After : Jan 5 21:03:49 2026 GMT
Subject: CN=dce5da41-39ca-4597-ad7f-d39313dffc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:16:63:ea:ab:6b:9f:2d:7e:1f:25:b5:2b:
c8:5d:35:a6:17:a5:92:15:0d:c6:9c:84:15:d3:91:
58:54:3e:ed:95:2c:45:6a:bb:84:6e:de:5f:93:6f:
4b:bb:df:25:8e:e5:bc:1c:31:d4:0b:9d:74:c0:3f:
e6:f8:36:3e:a5:83:6f:d7:81:52:f1:60:bb:97:bb:
75:35:10:84:97:aa:76:9a:37:cc:93:10:09:81:c2:
dd:ae:47:86:a0:f0:9e:29:55:5c:af:63:78:58:13:
38:b8:3d:49:9e:60:c8:72:aa:20:71:56:ba:70:77:
02:ca:33:6b:99:5e:f5:4f:d3:98:e0:55:2d:a0:7d:
14:68:73:3d:f1:45:39:16:fe:95:63:f3:28:fe:5f:
31:d4:8e:7b:4a:0b:16:89:19:86:f5:39:bd:76:fb:
96:df:07:02:79:0c:52:b3:d8:1e:c7:47:99:de:95:
b8:60:e3:c7:e2:1e:cb:6e:a6:a0:14:f5:9b:be:7b:
7f:48:2b:52:3f:c6:d0:95:4e:c4:3a:25:b2:bb:cf:
13:6a:b6:dd:c3:d1:74:60:9d:f4:78:96:cf:83:da:
5e:ff:31:1a:96:c0:3f:83:45:dc:d3:ac:54:93:5b:
a5:29:20:13:46:87:2b:66:1e:ec:d1:69:97:5f:57:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:85:BB:98:3B:66:77:7E:F9:38:13:B0:56:2B:67:60:D5:D8:D5:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/5a136446-28e9-3752-b163-432c7e24c32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
X509v3 Authority Key Identifier:
keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c5:66:a6:4e:4c:3b:fb:be:ad:1b:74:bc:a1:5b:b5:1f:f0:
84:b3:50:f8:11:58:18:c1:00:b1:06:c3:27:35:2d:ca:8f:d0:
8c:0e:8d:bb:d5:0e:b4:1f:f8:a4:5d:fb:35:d9:cf:72:51:56:
b1:f2:0d:41:78:12:a9:ae:c3:9b:85:fe:8d:41:8e:12:11:d7:
7e:df:23:d6:db:42:12:ce:83:93:c8:8f:d8:f7:d2:17:fc:e8:
6c:61:ef:6f:ff:63:e2:f7:93:e2:a1:db:7d:b4:60:a2:7f:5a:
99:c3:44:8e:34:b8:58:78:8e:8c:7f:6e:2b:b3:40:c5:d6:06:
c5:f1:24:9b:82:56:5a:26:19:7d:04:d7:4a:a4:f7:78:81:26:
3d:51:ef:e2:2a:78:81:2b:3a:c0:13:ca:a0:ce:54:40:92:04:
61:85:bc:ad:8b:27:63:e2:8e:12:48:60:b6:35:aa:cb:7d:f8:
10:d7:16:ca:bb:80:fe:7a:a0:ab:50:4c:10:e9:a4:e6:1b:3e:
3c:a4:1f:72:aa:36:5d:bd:a2:de:b6:60:44:31:0a:bb:9b:50:
6f:91:36:99:64:71:2d:f3:b3:1c:3f:76:c3:63:22:8f:a1:1d:
c0:17:62:f6:44:cd:33:92:1f:d5:bf:0a:19:c8:91:2f:ea:9e:
df:90:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:34:45 2025 by rpki-client