Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0500c1a5-b2da-30ee-bb25-0cae60f1a21e.roa
File: 0500c1a5-b2da-30ee-bb25-0cae60f1a21e.roa (raw, json)
Hash identifier: HaEXf7GMWBmq2gL82gp4JybJ2qMJ/HoZV6DS1T+vLtw=
Subject key identifier: EF:12:9E:72:72:36:CA:7D:E1:5A:60:3E:75:3D:29:CF:91:05:00:6F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B7F1F1E12D7AD9E225AFBE80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0500c1a5-b2da-30ee-bb25-0cae60f1a21e.roa
Signing time: Fri 02 May 2025 10:14:14 +0000
ROA not before: Fri 02 May 2025 10:14:14 +0000
ROA not after: Thu 31 Jul 2025 10:14:14 +0000
asID: 208485
IP address blocks: 172.111.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 10:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b7:f1:f1:e1:2d:7a:d9:e2:25:af:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 2 10:14:14 2025 GMT
Not After : Jul 31 10:14:14 2025 GMT
Subject: CN=936400d8-0e5d-4386-8d20-6afebd5abad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6b:28:ba:2c:31:6f:38:21:91:26:e9:0e:fa:
9e:4a:db:bd:8d:3c:f7:96:6e:3c:bb:06:99:cd:3b:
0c:f4:fc:28:b6:d6:55:96:49:f2:c6:3e:79:0c:2f:
ff:48:dd:2a:dc:0c:5c:bb:d6:e0:22:d5:08:58:63:
d4:f6:6f:de:40:c6:52:32:12:2e:4d:a9:62:95:02:
34:7c:2b:f5:9d:b7:14:8b:f8:cb:d9:cc:d6:f8:ef:
7c:46:34:ca:da:a5:c3:e9:4d:39:0b:71:3f:d9:34:
78:65:40:06:6f:29:87:ca:fb:ca:ab:41:f8:0f:67:
60:af:7f:14:10:a5:4c:05:a9:5d:53:6a:39:e4:09:
07:eb:19:fe:ed:da:8a:04:27:a7:32:08:0c:19:f3:
c9:a3:46:82:2d:c8:b6:ad:85:f4:13:f2:dc:68:32:
b5:25:4f:fc:47:4a:08:de:e2:51:27:2a:99:c1:1b:
62:d0:7e:90:e0:1d:53:92:15:0a:7d:5c:ea:41:aa:
f9:a2:59:d9:a4:e4:08:2a:0d:0b:48:94:91:99:83:
b1:1a:31:42:75:a8:47:c2:62:3f:bb:b3:e3:35:ac:
93:ef:47:2f:e3:ef:85:0a:3f:e3:24:6c:d1:c0:9e:
df:8a:ad:fd:0b:be:94:cf:53:7f:a9:1d:68:b0:00:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:9E:72:72:36:CA:7D:E1:5A:60:3E:75:3D:29:CF:91:05:00:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0500c1a5-b2da-30ee-bb25-0cae60f1a21e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:dc:dd:36:b3:41:b1:84:e7:8b:c3:46:bd:ec:d8:a9:b9:45:
bd:dd:17:9d:8e:1a:c0:5f:8f:cd:e0:e9:11:aa:75:9c:60:64:
97:10:ab:f9:d9:36:4d:fa:53:4a:20:e2:3f:80:82:7b:d1:b6:
2e:73:e7:cf:5b:3d:99:1f:36:f1:ed:ac:78:aa:2c:6f:1c:7f:
36:e8:18:56:7f:06:ef:3d:d9:74:c4:ed:e5:bd:45:8f:b2:88:
3e:34:b2:52:65:da:ab:12:b5:f3:c2:68:b6:55:e7:25:32:1c:
fa:3a:f2:81:01:6f:23:c7:a3:dd:25:27:c7:7e:58:38:dd:a6:
ea:3e:ef:f0:6b:fa:19:64:69:b2:64:47:5c:5d:53:82:72:e8:
7c:b0:2b:1d:23:ed:ad:e8:f5:51:45:eb:60:ff:74:46:df:ef:
b2:7d:72:f0:bf:2f:e8:ee:e6:48:4d:99:1a:35:f3:82:f5:8d:
fa:7c:f0:d9:d5:40:e1:9f:70:e5:77:bf:2f:c0:f1:e6:b4:34:
a1:02:8b:8e:03:48:a9:f2:c7:d5:8e:30:6a:48:6e:8a:a7:b2:
91:40:c2:e0:33:d7:e6:3f:00:b8:eb:1e:9f:e2:e7:b4:ad:e2:
ae:89:a2:b2:b9:86:f9:d6:1a:5a:1d:cc:66:b4:3b:83:fc:82:
f7:f0:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:41:38 2025 by rpki-client