Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/8d95541a-b336-3100-a13d-7931c32d52f2.roa
File: 8d95541a-b336-3100-a13d-7931c32d52f2.roa (raw, json)
Hash identifier: epCypYCgP8h0qYGCbsUXlmWz3zO+QLldaLHilgqIG4Q=
Subject key identifier: E2:2B:04:05:23:D2:0B:AD:8B:BA:63:6F:13:D8:8C:43:6B:A4:38:59
Certificate issuer: /CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e
Certificate serial: 010D0C9F4328584A17E577C65DB3CFE923F63F00
Authority key identifier: 02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/8d95541a-b336-3100-a13d-7931c32d52f2.roa
Signing time: Thu 05 Jun 2025 19:06:42 +0000
ROA not before: Thu 05 Jun 2025 19:06:42 +0000
ROA not after: Wed 03 Sep 2025 19:06:42 +0000
asID: 15830
IP address blocks: 148.59.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 05 Jun 2025 19:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:17:e5:77:c6:5d:b3:cf:e9:23:f6:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aea7e2-e380-4559-9ff3-4fc7138c435e
Validity
Not Before: Jun 5 19:06:42 2025 GMT
Not After : Sep 3 19:06:42 2025 GMT
Subject: CN=79fa8d2f-af3d-49a2-a3d7-93675d92bbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:29:2d:ab:cc:3f:c7:4d:d0:e3:2b:fa:bc:
fe:b5:df:29:65:e5:b8:5c:6f:4a:5b:1f:a8:68:e9:
38:1e:00:ce:31:ec:a0:27:dd:e9:7d:76:57:de:30:
56:7d:ad:a5:60:2a:99:bf:61:ac:77:0a:28:a0:f5:
d3:7e:e7:b1:04:40:7b:8e:10:ac:99:1c:e6:14:2a:
55:25:f6:21:cb:11:3c:bd:66:44:92:88:5e:83:35:
c7:7d:2a:ea:84:8c:d6:d0:c1:a4:5f:fc:9a:93:1d:
f3:6d:d0:2a:0b:a0:d4:f1:67:5e:f3:93:52:5c:46:
67:04:84:50:1c:3e:f4:07:4f:6e:33:f6:87:d1:d5:
db:8f:f8:ae:f7:5b:ef:0a:8d:00:72:fc:7b:99:59:
ec:c4:5c:4d:a7:9f:d7:a3:61:ba:51:96:96:d5:f0:
80:75:33:75:e8:17:bb:56:2f:b0:56:d0:77:0c:8e:
02:40:f4:5c:41:4c:00:c5:85:2b:46:83:d6:4b:5c:
e4:c6:b6:22:ee:26:30:91:aa:f9:00:82:af:1f:86:
4a:5a:a7:9c:f7:63:52:2d:af:e8:8f:8a:10:9e:45:
b9:3d:21:b0:1a:87:18:37:6b:74:63:38:72:5d:d4:
ec:e9:9e:93:c9:0c:da:4f:6f:a2:b0:19:c0:91:e1:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2B:04:05:23:D2:0B:AD:8B:BA:63:6F:13:D8:8C:43:6B:A4:38:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/8d95541a-b336-3100-a13d-7931c32d52f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e/c7aea7e2-e380-4559-9ff3-4fc7138c435e.crl
X509v3 Authority Key Identifier:
keyid:02:E7:89:B9:86:23:E2:D3:29:F2:35:78:99:D8:11:C5:D3:DA:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c7aea7e2-e380-4559-9ff3-4fc7138c435e.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:d9:d1:80:4c:f0:d3:b4:71:c8:41:82:1a:36:6d:75:63:c3:
cd:0f:48:4d:79:d7:b8:5f:c1:f1:2a:40:bc:c3:e1:6f:54:c6:
00:b7:f0:fb:b2:12:93:07:48:44:0a:da:7e:0a:10:a2:37:6d:
83:50:5f:fc:66:61:45:5f:f1:35:c2:be:09:98:3f:0e:0d:1e:
08:ed:e0:66:2d:8d:0c:b8:81:30:08:74:c4:64:76:0d:4f:b8:
ec:64:4e:a9:8e:e8:72:3c:35:ef:26:20:67:06:f8:1b:67:bc:
2b:6a:47:03:e2:89:27:11:6d:63:0f:8e:e7:c0:09:74:09:3c:
ad:01:f1:41:50:74:d3:d7:5b:0c:36:27:93:26:70:20:78:99:
af:80:20:8d:cf:d7:79:e2:32:a9:a8:b8:e3:28:6a:0f:94:ed:
89:d6:d5:e6:09:f9:06:36:2a:e7:9a:8f:21:03:ec:d3:00:a4:
f4:2f:c6:e3:4a:b1:5a:3b:bd:10:33:39:07:0a:43:bc:07:21:
8e:fc:26:99:35:65:36:ba:af:7f:60:d3:1f:6b:90:e9:6f:9d:
0d:fe:e4:30:7e:af:d5:80:27:df:45:4c:00:eb:bd:79:95:41:
22:3a:04:e2:de:ea:bf:60:b1:b8:dc:32:0f:0d:2a:39:4a:11:
26:91:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:17:22 2025 by rpki-client