Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/086f0402-a08f-36ca-a781-b907be814ac0.roa
File: 086f0402-a08f-36ca-a781-b907be814ac0.roa (raw, json)
Hash identifier: b9CxbvjpcAheOCdktsQo7WSXjRrMK/8OCx23A00lG5Q=
Subject key identifier: EE:D8:99:97:86:69:C3:9A:F4:3B:6A:09:44:8A:19:B0:13:6C:3A:40
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B1EB50466492939DDE663700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/086f0402-a08f-36ca-a781-b907be814ac0.roa
Signing time: Wed 30 Apr 2025 06:26:02 +0000
ROA not before: Wed 30 Apr 2025 06:26:02 +0000
ROA not after: Tue 29 Jul 2025 06:26:02 +0000
asID: 43260
IP address blocks: 172.94.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 06:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b1:eb:50:46:64:92:93:9d:de:66:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 30 06:26:02 2025 GMT
Not After : Jul 29 06:26:02 2025 GMT
Subject: CN=015eca69-7005-4b92-8e6c-44827699380c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:93:1c:59:36:68:3e:7f:28:fc:c9:e4:b6:
97:6c:b4:97:29:8a:42:5f:cb:04:4b:c4:21:49:59:
62:e2:53:6b:20:9a:b5:82:bc:77:65:88:cb:60:2f:
2b:00:b7:bb:4d:d4:4b:cc:6f:b5:36:2d:3a:b1:ac:
00:c4:4d:3a:08:cf:5a:b4:a7:98:6d:af:4b:d1:a5:
4e:20:d7:0a:6e:98:f7:e0:6d:b9:22:61:26:b7:f1:
8b:79:ee:12:32:40:97:90:5a:e1:13:f6:bb:2e:ab:
10:06:1f:86:aa:02:e6:43:fe:49:30:ad:ed:eb:06:
59:09:52:d2:8f:00:14:d2:c2:48:2e:0b:c8:b3:fe:
4e:09:3f:82:94:3a:fe:b5:3e:49:c9:e8:5b:02:48:
0b:8e:1c:98:f6:81:d3:ef:76:db:7b:49:20:e7:8b:
27:11:60:a6:34:a0:eb:fe:01:07:b3:8e:48:9b:3d:
4e:12:5c:64:b4:22:c3:03:b5:da:65:68:9f:85:61:
36:85:39:55:c4:b2:c5:5c:01:34:6b:7a:eb:cc:c1:
cc:e3:27:8f:a0:9e:d6:04:46:2c:90:93:71:22:a5:
9b:f1:f4:3a:73:71:c1:94:ea:70:31:d8:f1:8d:bb:
79:42:27:e1:c5:a5:44:4c:e4:48:25:2a:75:91:c0:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:99:97:86:69:C3:9A:F4:3B:6A:09:44:8A:19:B0:13:6C:3A:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/086f0402-a08f-36ca-a781-b907be814ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:89:de:49:04:54:18:4f:8d:18:90:05:df:be:f2:51:d7:ea:
84:a7:b5:1d:c0:33:9d:ee:40:66:ff:aa:7c:af:86:fe:f4:24:
f5:7a:87:ba:12:03:c7:2c:1a:20:2e:a1:a6:f3:1d:d4:70:a1:
fa:58:2b:a1:3f:d1:95:d1:b5:c0:d8:24:0b:43:2d:9b:19:85:
41:81:21:ff:a2:1d:47:0b:d8:00:4d:88:a8:57:50:47:cd:1a:
91:76:44:01:e5:e6:31:d7:d0:3c:08:67:0b:1f:0e:8d:4c:6e:
4d:6a:6b:e2:f0:e0:0c:0c:e2:83:60:df:46:9e:86:b9:f0:bc:
26:fd:e8:22:f3:15:34:99:34:fe:e8:3b:9b:7f:61:7c:15:7c:
81:87:04:78:51:b5:e9:f6:5f:02:04:42:5c:ba:9d:5e:88:42:
da:1d:19:50:42:9f:7a:bc:15:f5:c5:bf:05:cd:74:20:d2:16:
df:8b:81:42:69:12:90:c5:32:47:35:bc:0c:04:e1:b0:fc:e9:
47:52:9e:a2:e3:24:02:c8:ae:7c:1a:03:86:14:cc:13:9e:d1:
f3:03:4f:62:83:d5:f2:04:3a:5d:49:82:ee:f5:08:0a:34:2e:
7c:70:2f:eb:ef:99:64:47:de:77:55:49:25:80:60:9c:9f:f5:
d2:99:7f:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmx61BGZJKTnd5mNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDQzMDA2MjYwMloXDTI1MDcyOTA2MjYwMlowLzEtMCsGA1UEAxMk
MDE1ZWNhNjktNzAwNS00YjkyLThlNmMtNDQ4Mjc2OTkzODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6yTHFk2aD5/KPzJ5LaXbLSXKYpCX8sES8Qh
SVli4lNrIJq1grx3ZYjLYC8rALe7TdRLzG+1Ni06sawAxE06CM9atKeYba9L0aVO
INcKbpj34G25ImEmt/GLee4SMkCXkFrhE/a7LqsQBh+GqgLmQ/5JMK3t6wZZCVLS
jwAU0sJILgvIs/5OCT+ClDr+tT5JyehbAkgLjhyY9oHT73bbe0kg54snEWCmNKDr
/gEHs45Imz1OElxktCLDA7XaZWifhWE2hTlVxLLFXAE0a3rrzMHM4yePoJ7WBEYs
kJNxIqWb8fQ6c3HBlOpwMdjxjbt5QifhxaVETORIJSp1kcBFTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7YmZeGacOa9DtqCUSKGbATbDpAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDg2ZjA0MDItYTA4Zi0z
NmNhLWE3ODEtYjkwN2JlODE0YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuJ3kkEVBhPjRiQBd++8lHX6oSntR3AM53uQGb/qnyvhv70JPV6h7oS
A8csGiAuoabzHdRwofpYK6E/0ZXRtcDYJAtDLZsZhUGBIf+iHUcL2ABNiKhXUEfN
GpF2RAHl5jHX0DwIZwsfDo1Mbk1qa+Lw4AwM4oNg30aehrnwvCb96CLzFTSZNP7o
O5t/YXwVfIGHBHhRten2XwIEQly6nV6IQtodGVBCn3q8FfXFvwXNdCDSFt+LgUJp
EpDFMkc1vAwE4bD86UdSnqLjJALIrnwaA4YUzBOe0fMDT2KD1fIEOl1Jgu71CAo0
LnxwL+vvmWRH3ndVSSWAYJyf9dKZfy4=
-----END CERTIFICATE-----
Generated at Sun May 11 21:15:52 2025 by rpki-client