Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/24a394a7-fc3d-3dfd-8e8b-3551c0ce6db3.roa
File: 24a394a7-fc3d-3dfd-8e8b-3551c0ce6db3.roa (raw, json)
Hash identifier: XlcYDkkpOiHLBWSLw6s//9vuJOyb2r7OFIFxYGnIjV8=
Subject key identifier: 6C:69:C5:5F:C3:F2:28:A4:0C:58:0B:9C:FC:20:31:FD:04:1E:08:26
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B7ECDBAE4A13DF03EC915980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/24a394a7-fc3d-3dfd-8e8b-3551c0ce6db3.roa
Signing time: Fri 02 May 2025 10:04:00 +0000
ROA not before: Fri 02 May 2025 10:04:00 +0000
ROA not after: Thu 31 Jul 2025 10:04:00 +0000
asID: 208485
IP address blocks: 172.111.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 10:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b7:ec:db:ae:4a:13:df:03:ec:91:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 2 10:04:00 2025 GMT
Not After : Jul 31 10:04:00 2025 GMT
Subject: CN=521db9a2-b83b-41be-a029-4027388db723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:bc:c3:68:a0:e9:a4:6e:44:f1:15:f5:fe:
df:3a:ea:1c:47:83:39:32:9d:ce:49:e6:3d:fb:9c:
86:4a:62:e3:de:22:41:f0:9d:8d:41:2e:12:c5:7a:
e1:57:d6:d4:36:55:12:23:ed:4c:25:f6:d9:84:0f:
54:2b:8f:19:aa:91:43:29:ea:2f:06:57:92:0e:82:
0a:db:95:9f:63:f0:ae:68:93:9e:68:bc:37:15:e7:
91:c5:de:84:b2:15:c4:64:f5:5a:7e:1d:97:ce:21:
4c:da:08:2b:9e:33:ae:28:a3:a0:3b:f2:32:9f:98:
d3:5c:c9:63:9a:81:7a:3a:26:11:9b:92:2e:9d:d6:
98:d3:de:f8:36:c5:a3:27:d8:91:a2:a7:c4:ca:fa:
9f:f9:64:cf:19:51:e8:9e:88:52:13:bd:95:a2:80:
7b:60:f8:16:a6:e6:86:1e:40:e9:64:39:df:b6:f1:
b3:1b:2d:67:7e:8d:92:2a:2f:87:1a:f6:f3:84:31:
77:c1:b9:cf:74:91:0a:72:cc:0e:b7:4c:4d:13:49:
4b:34:6d:e6:91:7d:8b:1b:f2:ea:e7:3d:de:42:c3:
d5:c9:8a:0f:87:6d:1a:d9:27:15:99:c6:b6:d7:9c:
3e:62:90:3e:c5:e8:f9:8a:2e:be:bd:49:c8:c1:83:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:C5:5F:C3:F2:28:A4:0C:58:0B:9C:FC:20:31:FD:04:1E:08:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/24a394a7-fc3d-3dfd-8e8b-3551c0ce6db3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e4:dc:5a:40:43:86:91:b8:77:c5:1b:bc:bd:fb:78:a7:fc:
1a:80:d4:fb:d9:e3:3d:f9:49:45:aa:5b:e8:6a:9b:04:b7:77:
9c:e9:69:91:e2:e7:bf:b7:f8:f7:95:a7:eb:2a:cc:fe:f8:f9:
8b:ab:e4:2d:12:51:b9:95:fa:be:7d:2a:47:94:03:1d:05:0c:
0a:88:d7:4b:e3:76:bf:d5:3c:cf:5b:8c:33:cb:75:5c:1d:b0:
ff:bb:b3:6b:be:d4:70:ef:4b:76:72:2f:c9:ca:ad:4e:f9:06:
60:b9:a7:62:d4:ca:49:4d:b8:4c:34:41:40:5d:bd:1b:a5:60:
dd:f9:55:1e:08:42:59:46:86:d8:e8:52:20:d2:f6:5a:2a:c2:
f1:23:a8:e6:de:1e:b2:88:1c:36:b5:97:a0:fe:af:d0:9d:00:
b8:7e:6a:af:59:5e:35:5f:c0:a0:75:7f:85:82:5f:04:20:e0:
dd:23:d1:a3:4c:0e:1b:a4:be:69:63:e3:b3:f5:a3:91:0c:c4:
df:3d:a9:76:2e:a4:94:24:59:94:a3:35:9d:8b:f4:23:2d:a9:
fc:b1:d5:a7:a7:37:2a:cc:73:72:f3:94:48:27:50:2a:26:2a:
9e:70:03:c2:7d:83:d9:ed:e1:2a:98:55:26:ad:d9:6d:13:31:
dd:bf:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:29:12 2025 by rpki-client