Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d37aadf-4d79-361b-905f-e1cee0ebc857.roa
File: 3d37aadf-4d79-361b-905f-e1cee0ebc857.roa (raw, json)
Hash identifier: eVzLnyp9d3WBaZkquRKktodIQ/awhdy863kHqU6I7oo=
Subject key identifier: ED:2F:3B:04:54:EB:4A:59:1B:73:00:95:62:0A:37:93:6D:EF:B8:0F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B7EF3B95EB97B33FC1F04F90
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d37aadf-4d79-361b-905f-e1cee0ebc857.roa
Signing time: Fri 02 May 2025 10:08:47 +0000
ROA not before: Fri 02 May 2025 10:08:47 +0000
ROA not after: Thu 31 Jul 2025 10:08:47 +0000
asID: 208485
IP address blocks: 172.111.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 10:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b7:ef:3b:95:eb:97:b3:3f:c1:f0:4f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 2 10:08:47 2025 GMT
Not After : Jul 31 10:08:47 2025 GMT
Subject: CN=d42c9253-4cdc-43d1-a9c3-83a7c28f76c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:2c:3f:6c:76:0e:1f:2a:f2:a9:82:28:be:
4e:99:17:8e:9f:7d:28:a7:2b:e8:b1:13:f4:d6:39:
b3:8e:f8:28:09:a6:c0:c3:d7:83:53:38:54:78:53:
27:e8:26:e8:57:31:e5:6e:13:19:21:58:c4:c6:e9:
e3:14:af:52:a7:14:dd:d2:bb:13:9c:47:bd:5c:7f:
da:e9:05:74:4e:5d:d5:63:14:5b:40:13:c0:7e:93:
ce:70:bb:30:bb:f5:3b:23:93:26:10:64:7b:4a:26:
f5:0f:5a:8f:30:6d:4b:10:f4:ea:94:46:65:ad:3c:
8c:ad:71:ec:3d:27:9e:95:57:bd:7e:af:2e:d3:2f:
94:b5:de:46:ce:06:b4:f1:68:75:d6:75:e3:f5:34:
5d:79:5e:c4:09:07:c8:8b:ee:ac:5a:a7:57:b6:aa:
74:6d:40:82:71:0f:70:31:1e:fc:3a:28:36:9e:f1:
1c:d7:ac:4a:cf:aa:30:25:9c:6d:52:64:00:0c:91:
e5:7d:95:55:bb:6a:4c:1d:7d:30:03:40:b6:ba:0c:
54:9e:64:f8:d6:fb:36:6d:f1:b0:c3:84:fd:bd:01:
cb:a2:ff:74:3f:39:10:23:a3:68:9f:70:a2:8a:05:
c4:79:1a:27:ed:f0:98:f3:58:b2:44:08:7f:b5:3d:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2F:3B:04:54:EB:4A:59:1B:73:00:95:62:0A:37:93:6D:EF:B8:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d37aadf-4d79-361b-905f-e1cee0ebc857.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:d3:64:ce:1a:f4:25:8e:17:31:f0:b0:df:55:68:39:6f:2c:
32:da:3c:11:ba:7d:5a:ae:84:c0:39:41:91:b6:68:58:30:0f:
21:f7:aa:12:a9:38:d8:91:2c:0b:a3:6c:87:3d:71:5a:85:09:
c2:fd:10:20:ac:7e:8c:43:e9:f9:ae:53:c8:0c:16:b5:82:49:
4e:db:2e:ec:41:02:ad:48:73:77:68:51:cf:13:de:94:47:04:
64:ca:c3:42:a3:b5:40:1c:a9:ff:ae:b5:bb:41:32:38:d6:36:
af:06:99:9e:89:7f:5f:d1:9b:df:6f:bd:8f:6e:5e:74:40:cd:
f7:2e:95:17:39:2d:27:77:ba:26:57:7c:bd:88:a8:8c:19:1a:
5f:1c:ef:91:7a:76:5c:61:da:27:66:85:eb:6a:e3:3f:78:89:
02:60:a4:84:52:fd:65:78:92:79:54:e4:a2:0c:41:43:7f:e3:
51:f1:a3:1e:ae:9f:a1:79:4b:d4:48:83:d3:78:1a:98:f2:44:
83:5a:18:c1:1f:f9:4c:21:35:07:f5:01:ac:9b:8d:5c:8d:6d:
77:6a:2c:80:51:89:bd:59:53:05:bb:53:36:52:e4:15:cb:d5:
07:1e:e1:22:29:c4:41:4d:ed:26:33:00:49:98:66:fd:3b:0b:
76:3e:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:54:43 2025 by rpki-client