Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ccb7e94-e586-3047-b877-64008c3fdbc6.roa
File: 1ccb7e94-e586-3047-b877-64008c3fdbc6.roa (raw, json)
Hash identifier: bFKeq0qDAqdFkyaa970Qu7cAPo8DHDLJXuocGPRaNgw=
Subject key identifier: 56:31:C5:80:D5:D9:50:C2:9D:27:FB:02:50:DF:B5:BD:5E:7D:4C:15
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B7EDAFE11F7D79168EB07300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ccb7e94-e586-3047-b877-64008c3fdbc6.roa
Signing time: Fri 02 May 2025 10:05:40 +0000
ROA not before: Fri 02 May 2025 10:05:40 +0000
ROA not after: Thu 31 Jul 2025 10:05:40 +0000
asID: 208485
IP address blocks: 172.111.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 10:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b7:ed:af:e1:1f:7d:79:16:8e:b0:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 2 10:05:40 2025 GMT
Not After : Jul 31 10:05:40 2025 GMT
Subject: CN=99a6d255-505c-4ae9-893f-7c9299d2d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:65:2f:96:83:11:a0:88:30:bb:38:18:8d:
a5:f3:07:54:64:2d:07:21:17:cd:72:2b:e2:f8:72:
96:3f:38:e3:5e:f9:8f:2a:ba:5d:41:29:e4:b7:3d:
c5:7d:ae:6c:a8:05:26:e2:ef:1d:d6:53:7d:bf:71:
f6:bc:31:a5:7a:37:a3:8c:ef:57:4b:64:42:c4:92:
12:d9:bb:e4:2d:2b:1e:e3:4b:95:51:e5:43:8b:43:
09:47:1d:d4:4b:97:db:a1:cb:8a:2c:65:e9:30:09:
e1:8b:00:8e:1f:ee:8b:0a:d5:4e:10:75:4a:19:1d:
d3:49:9e:b5:88:1d:52:ff:ba:54:ce:be:38:9a:fa:
5b:ec:5f:64:45:b4:fb:7b:6f:f0:ad:a8:a4:c1:0b:
ad:67:96:9b:20:77:f8:29:0a:11:1a:df:ea:b0:76:
45:e7:80:95:c2:ff:39:66:84:cb:c0:49:de:4b:e2:
7c:d4:cc:ce:ed:02:fd:5d:96:7a:42:0d:99:10:35:
3a:4a:37:c0:fd:69:95:3f:dd:8a:ca:52:9b:13:48:
4b:48:43:bc:ea:82:1d:d7:2c:4f:2b:b3:b9:93:33:
be:fb:56:90:55:b2:4d:2b:b9:6a:8f:d3:7a:4d:e2:
cf:df:93:3e:38:f7:17:42:ea:6b:21:e5:9d:3e:b5:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:C5:80:D5:D9:50:C2:9D:27:FB:02:50:DF:B5:BD:5E:7D:4C:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ccb7e94-e586-3047-b877-64008c3fdbc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:85:a5:a7:03:47:c1:15:7a:53:ce:98:28:83:2d:32:de:8e:
82:54:a3:a7:4a:69:3c:84:35:1b:d5:28:b7:00:3f:8d:d2:4c:
35:c8:bd:96:9d:ae:0e:8a:c3:af:96:6b:75:fc:6b:34:16:46:
ae:8a:7a:c2:8c:7d:78:38:c6:60:f6:18:2f:4c:db:54:b4:6c:
a7:02:b7:c8:d5:55:5c:81:79:1a:b8:59:34:c8:e8:cc:41:ce:
fb:fa:f2:34:ab:37:c5:5f:dc:85:41:53:a1:67:a3:17:59:d8:
74:68:31:7d:7b:d0:32:6a:fe:2f:ae:73:25:8f:18:d1:6e:31:
ab:bb:89:8d:e7:90:ba:7d:f1:54:03:5f:31:d6:3c:b8:a8:9a:
08:e1:26:98:db:f9:37:46:2a:f9:1e:cf:05:b9:9d:30:02:44:
b0:f7:50:b9:13:10:ed:bd:51:a5:a1:2a:dd:f5:ec:ec:99:43:
7b:5e:cf:aa:5c:d3:12:5b:05:4f:4d:7b:96:3f:5c:66:8b:81:
35:9b:13:38:e0:75:b9:ae:df:78:b4:43:fa:98:ff:9b:7a:e0:
73:06:69:48:63:e8:33:00:3d:73:17:e3:3e:64:c4:36:7a:65:
44:a1:b0:5b:44:d3:d0:f9:b4:0c:e0:21:79:fd:2a:eb:3b:6c:
65:f9:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:00:11 2025 by rpki-client