Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10bdd967-71c9-32fc-9fec-9baa84b3c9aa.roa
File: 10bdd967-71c9-32fc-9fec-9baa84b3c9aa.roa (raw, json)
Hash identifier: yvEX0PbpFbA8QtY92SJfDuo4cdM1LyWOeFJFjx1MKNI=
Subject key identifier: 73:91:47:FD:94:7B:32:94:D9:E1:53:3C:6E:CC:5E:51:F0:A1:23:FD
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849AFBD9FC65EC0DAABFB636E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10bdd967-71c9-32fc-9fec-9baa84b3c9aa.roa
Signing time: Tue 29 Apr 2025 11:42:21 +0000
ROA not before: Tue 29 Apr 2025 11:42:21 +0000
ROA not after: Mon 28 Jul 2025 11:42:21 +0000
asID: 53356
IP address blocks: 172.94.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 06:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:af:bd:9f:c6:5e:c0:da:ab:fb:63:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 29 11:42:21 2025 GMT
Not After : Jul 28 11:42:21 2025 GMT
Subject: CN=493effb4-6cba-4cf8-93f0-688d778172ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bf:30:cc:3c:b1:c1:2a:1f:3a:4d:44:c0:e3:
d6:6c:68:2c:ff:d8:0e:1d:2c:71:65:a3:04:94:eb:
fa:6c:67:ff:69:85:18:0c:e1:9c:b4:1c:a5:7d:02:
69:5d:df:cf:82:5e:0d:14:af:f8:da:ab:aa:24:cf:
72:eb:4e:60:fd:c2:e2:00:30:db:47:09:2e:5f:e2:
73:3c:be:ed:4d:32:bf:8e:1b:94:6d:69:da:0c:f7:
f4:d2:25:7a:d9:3f:4d:5d:6d:a7:8a:4b:0a:0a:c8:
c2:26:4e:14:d1:93:d5:62:9e:ee:33:3d:a4:25:c1:
02:2a:4c:cb:f4:30:10:8c:67:f7:d5:b6:d0:08:1d:
14:27:09:33:ed:12:06:51:48:97:4a:bc:f5:f8:f2:
52:41:27:71:0d:05:87:03:a1:8c:d1:79:a0:00:8c:
b8:d6:80:a6:71:e2:1c:b5:41:5d:e0:da:11:8d:21:
b7:30:a1:00:77:bc:ea:5b:ac:e8:f9:cd:67:ca:20:
d7:fb:02:79:f2:03:78:ba:bf:f4:d9:a4:67:6c:6d:
cd:d5:c5:0c:b9:b1:21:c0:56:31:86:d9:62:37:de:
6d:5a:0b:6b:d8:3d:04:bb:59:5d:86:00:b9:c3:4d:
78:5d:96:0d:a2:0d:3d:4a:c3:07:f2:57:10:ea:0f:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:47:FD:94:7B:32:94:D9:E1:53:3C:6E:CC:5E:51:F0:A1:23:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10bdd967-71c9-32fc-9fec-9baa84b3c9aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b1:04:6d:df:22:35:54:4b:6a:da:02:f7:4a:94:85:97:5b:
e8:7a:ed:76:cc:17:10:a4:30:84:3e:5a:f8:14:24:be:1a:d4:
ac:1d:a9:70:61:04:e9:be:17:24:f5:e3:b5:65:ce:d9:a7:af:
f4:63:76:7a:b4:39:67:b5:d6:4e:08:8f:b3:31:12:da:25:9a:
a7:42:e7:ee:1b:48:0c:2b:f6:d7:94:c3:20:55:2d:3c:6a:a5:
e7:09:7e:23:8a:6a:44:31:a5:5c:7f:39:1d:65:77:44:aa:36:
d1:f7:2c:88:27:ef:74:ed:41:0e:87:2a:6a:59:25:25:6c:20:
ac:6b:6f:56:c7:eb:f6:9e:0e:57:7d:aa:31:d8:06:89:09:f3:
66:9f:f5:78:a0:f1:38:2b:38:89:e1:d7:f4:ad:c0:1a:9d:5d:
22:8d:0f:03:39:c2:c7:72:a0:18:cc:8c:ce:ed:b7:d9:3e:a3:
a2:e0:50:7c:24:05:e2:c4:b9:f0:50:fd:41:4d:ef:74:6a:d7:
39:43:e1:cb:0c:7f:ca:cf:83:6d:b9:5f:fc:99:d4:e9:5f:cc:
16:a9:d0:2e:2a:8e:b1:5e:e2:d7:1c:d5:60:72:86:4d:eb:b4:
84:f1:29:39:e8:86:f2:0d:73:86:c9:f7:bf:12:61:53:f6:31:
64:a2:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:03:44 2025 by rpki-client