Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/d6936b77-3d92-3911-916f-3886d9274437.roa
File: d6936b77-3d92-3911-916f-3886d9274437.roa (raw, json)
Hash identifier: qKUbSkBOyJf8vWsLiAUvAL5i++wFum5Po84nZJnk/mU=
Subject key identifier: 5D:13:97:A6:56:35:88:DF:F5:69:1E:1D:A8:5B:A5:32:E9:90:52:C2
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584B2E5C48476CC623E51EBA1E00
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/d6936b77-3d92-3911-916f-3886d9274437.roa
Signing time: Sat 13 Sep 2025 13:00:41 +0000
ROA not before: Sat 13 Sep 2025 13:00:41 +0000
ROA not after: Fri 12 Dec 2025 14:00:41 +0000
asID: 16509
IP address blocks: 216.87.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Sep 2025 21:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2e:5c:48:47:6c:c6:23:e5:1e:ba:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Sep 13 13:00:41 2025 GMT
Not After : Dec 12 14:00:41 2025 GMT
Subject: CN=c17ad81f-ed78-4275-8bf0-7669bd3aefd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:40:5f:00:e1:c3:ec:ea:f3:51:7b:74:96:
3b:b6:bf:f8:9b:4b:a2:97:07:53:8d:ea:a7:c4:e8:
6a:a6:78:ed:91:19:7d:a0:6d:d3:79:36:37:5c:9f:
e9:09:2c:50:b1:02:d7:6b:58:8a:d3:4a:9d:55:a3:
dd:67:b1:2e:7b:1a:28:7a:16:e5:9b:24:c6:f5:90:
81:90:35:24:0c:bf:87:e6:0d:15:25:62:fc:ce:84:
ef:8c:51:cf:0f:fd:6f:65:a9:0f:04:d0:67:d1:7b:
a8:75:db:94:23:90:35:d4:e7:9e:86:4d:41:c8:a0:
6c:b6:cd:68:bf:4c:50:a5:fe:47:13:52:c0:b0:6e:
6f:df:6d:35:29:f1:be:57:79:1d:e9:37:32:91:3e:
b4:da:cb:5b:b8:56:80:70:c6:ad:7b:72:bb:f7:b2:
f7:97:96:02:bf:74:8d:54:a7:01:c2:a5:f5:d6:fb:
ff:89:0a:42:c2:77:30:54:24:53:6a:d5:c2:cd:38:
ef:64:da:cf:4b:9f:f5:fe:88:52:a8:cb:5d:bb:28:
86:43:3d:4c:63:0b:78:1f:66:0c:bd:e2:02:14:0f:
7a:dc:17:d9:8e:59:66:83:0d:57:e6:fe:c0:70:e6:
56:aa:ec:e6:e8:70:12:b6:7b:47:9e:a6:33:c6:18:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:13:97:A6:56:35:88:DF:F5:69:1E:1D:A8:5B:A5:32:E9:90:52:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/d6936b77-3d92-3911-916f-3886d9274437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:fc:7f:e6:3e:52:b4:cf:52:9d:da:42:25:f6:2b:b5:56:2f:
6e:55:de:d2:88:b9:a1:3c:29:50:7f:c8:e7:5f:d4:99:5d:54:
19:2b:b1:80:05:79:b7:ff:d1:40:69:e3:0a:ef:b2:57:7c:4b:
90:5b:71:64:75:99:82:61:d9:d7:71:2f:d6:cb:f7:06:75:c1:
f0:18:3d:f0:74:4c:ea:01:f6:f0:3e:cd:8a:a9:43:3f:7b:5f:
d6:8f:e9:b8:70:bd:c6:9d:13:be:de:94:a1:5a:84:1d:2d:d5:
87:fa:94:36:2b:d8:ae:f8:ce:bb:4c:94:a2:60:95:64:19:ab:
c3:56:1e:f1:95:7b:32:a3:75:03:70:fe:42:f1:c4:f4:5d:65:
de:cd:b0:31:93:28:a9:0f:5c:ef:7a:38:b7:ab:56:09:26:d2:
17:e1:c1:55:d9:7d:53:f6:69:30:4f:86:72:26:52:2e:72:16:
de:c8:ee:4d:f5:a0:57:fe:21:85:41:e1:73:a2:8e:86:49:7e:
a7:c9:a1:01:39:96:a3:4a:60:0d:a2:fb:04:18:cf:bc:09:83:
5e:35:89:e4:4c:28:0d:ea:6c:9c:7f:7c:03:bc:ee:be:ec:af:
e6:a5:61:28:75:1b:a6:b5:73:7c:1e:6a:b7:a5:4f:9e:d7:83:
26:07:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:13 2025 by rpki-client