Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/64f7908d-4699-3291-8781-43e53c00c408.roa
File: 64f7908d-4699-3291-8781-43e53c00c408.roa (raw, json)
Hash identifier: avgk2JV9tHQB+WP+sENhP+9fJl4dTXVDhfIcuCuwV1o=
Subject key identifier: A9:8A:F0:D6:70:7B:32:69:E0:5B:10:94:95:A1:75:4B:F2:B4:F7:94
Certificate issuer: /CN=5b1d675d-c8fe-494f-85c3-bff9be51c077
Certificate serial: 010D0C9F4328584B2BA793B76D712B593C7C0280
Authority key identifier: BD:4D:FA:C9:D8:5E:B2:5E:BF:3B:EC:DD:5D:EF:97:86:0D:0B:87:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/64f7908d-4699-3291-8781-43e53c00c408.roa
Signing time: Fri 12 Sep 2025 13:45:06 +0000
ROA not before: Fri 12 Sep 2025 13:45:06 +0000
ROA not after: Thu 11 Dec 2025 14:45:06 +0000
asID: 16724
IP address blocks: 173.241.192.0/20 maxlen: 20
199.59.80.0/23 maxlen: 23
208.38.128.0/23 maxlen: 23
208.38.131.0/24 maxlen: 24
208.38.132.0/23 maxlen: 23
208.38.135.0/24 maxlen: 24
208.38.137.0/24 maxlen: 24
208.38.138.0/23 maxlen: 23
208.38.140.0/22 maxlen: 22
208.38.144.0/22 maxlen: 22
208.38.149.0/24 maxlen: 24
208.38.150.0/24 maxlen: 24
208.38.155.0/24 maxlen: 24
208.38.161.0/24 maxlen: 24
208.38.163.0/24 maxlen: 24
208.38.164.0/23 maxlen: 23
208.38.169.0/24 maxlen: 24
208.38.170.0/24 maxlen: 24
208.38.174.0/24 maxlen: 24
208.38.176.0/23 maxlen: 23
208.38.178.0/24 maxlen: 24
208.38.183.0/24 maxlen: 24
208.38.184.0/23 maxlen: 23
208.38.186.0/24 maxlen: 24
208.99.112.0/24 maxlen: 24
208.99.114.0/24 maxlen: 24
216.139.192.0/21 maxlen: 21
216.139.192.0/24 maxlen: 24
216.139.194.0/23 maxlen: 23
216.139.196.0/24 maxlen: 24
216.139.198.0/24 maxlen: 24
216.139.200.0/22 maxlen: 22
216.139.200.0/23 maxlen: 23
216.139.202.0/24 maxlen: 24
216.139.205.0/24 maxlen: 24
216.139.207.0/24 maxlen: 24
2607:f3f0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Sep 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2b:a7:93:b7:6d:71:2b:59:3c:7c:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d675d-c8fe-494f-85c3-bff9be51c077
Validity
Not Before: Sep 12 13:45:06 2025 GMT
Not After : Dec 11 14:45:06 2025 GMT
Subject: CN=91040b40-9ba3-4434-9fc8-007d417a0500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:98:ea:d2:b6:ff:bb:e0:af:c5:89:e0:0a:
da:34:8b:a1:f5:e3:2b:19:b9:ff:c4:e0:fd:cf:8a:
d1:34:45:ff:5b:23:f7:27:42:4c:94:be:26:5b:c6:
87:d9:c9:5f:1e:a4:52:37:8e:0d:ee:b5:06:80:74:
4a:a0:ae:c5:80:b8:af:3c:a8:8f:64:97:ad:6f:a3:
e0:db:ba:8b:00:a0:a5:a1:bd:ee:0d:a6:70:e8:2c:
b7:00:f3:8f:62:00:61:d3:69:0d:47:1f:e4:98:ff:
14:3a:e6:15:46:2e:30:29:29:79:09:8b:08:79:82:
11:cc:86:0a:86:cc:8d:27:b3:87:73:8e:0c:58:27:
59:d5:ad:74:e9:8f:b6:a4:e3:ee:79:65:e5:f8:e1:
6c:52:bb:fe:a8:88:e2:c2:54:11:bb:4a:bc:0d:43:
28:d1:04:5f:4a:5f:9f:20:9e:d8:6e:d1:ac:67:d8:
89:d9:6d:65:ed:1a:74:ff:f9:f0:4b:ab:69:b2:87:
13:3c:3a:05:ff:43:9a:83:f4:0f:3e:9f:6e:77:a3:
46:e2:57:1e:b8:0c:59:0b:da:70:e3:4d:60:29:bf:
2c:51:e0:0b:a3:63:07:b0:3c:f2:3e:bf:a7:47:5b:
1a:a5:ee:c3:9c:19:5e:4c:e3:81:d2:be:dc:cf:6a:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:F0:D6:70:7B:32:69:E0:5B:10:94:95:A1:75:4B:F2:B4:F7:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/64f7908d-4699-3291-8781-43e53c00c408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077/5b1d675d-c8fe-494f-85c3-bff9be51c077.crl
X509v3 Authority Key Identifier:
keyid:BD:4D:FA:C9:D8:5E:B2:5E:BF:3B:EC:DD:5D:EF:97:86:0D:0B:87:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1d675d-c8fe-494f-85c3-bff9be51c077.cer
sbgp-ipAddrBlock: critical
IPv4:
173.241.192.0/20
199.59.80.0/23
208.38.128.0/23
208.38.131.0-208.38.133.255
208.38.135.0/24
208.38.137.0-208.38.147.255
208.38.149.0-208.38.150.255
208.38.155.0/24
208.38.161.0/24
208.38.163.0-208.38.165.255
208.38.169.0-208.38.170.255
208.38.174.0/24
208.38.176.0-208.38.178.255
208.38.183.0-208.38.186.255
208.99.112.0/24
208.99.114.0/24
216.139.192.0-216.139.203.255
216.139.205.0/24
216.139.207.0/24
IPv6:
2607:f3f0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:40:50:6f:14:9d:05:8c:b1:d8:bb:0c:4c:50:2d:2f:1f:b1:
d6:f6:8b:93:d1:2f:c8:cf:64:c2:96:77:a7:95:3b:19:62:0c:
df:6b:81:fa:53:a7:b1:5c:1b:45:05:b3:49:b5:87:ad:37:0a:
ec:dd:ed:f1:15:4b:c8:1a:7f:8c:19:01:2d:d1:5a:fd:82:83:
63:9f:59:15:16:a2:04:5b:8f:7a:89:69:e7:24:10:e5:f6:cd:
40:9e:31:aa:ff:13:59:43:52:79:35:88:53:d3:32:92:5f:01:
90:c0:eb:3d:10:8a:81:9f:2a:4e:31:ab:b8:cb:9b:d2:1e:b0:
20:d5:20:30:9b:55:20:16:a9:c5:af:7d:24:e0:37:74:69:44:
b2:3d:93:7c:73:aa:b8:1a:fc:df:0f:b4:0f:51:be:4c:8f:b7:
20:95:46:f8:05:87:d5:dc:a8:c0:f5:99:90:7b:31:6b:5b:06:
b9:db:56:58:6b:fe:67:40:5c:0b:e6:c5:7a:cf:db:75:6a:82:
95:f6:ca:fa:5d:69:97:8e:94:4e:52:5b:ed:2e:d7:ea:78:25:
84:93:65:d6:bb:4a:64:f0:d5:05:21:44:bc:ab:39:93:8f:12:
bd:d4:ab:a9:0d:f9:62:f0:79:a3:17:c0:5c:2b:37:fa:5a:cd:
4b:07:88:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:04:23 2025 by rpki-client