Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5739e22e-b8f3-375b-b49a-56581e31e1f4.roa
File: 5739e22e-b8f3-375b-b49a-56581e31e1f4.roa (raw, json)
Hash identifier: PAPUxf+szB7J83ADxgZYpiIzhYhtyWOPVtDCIWUDaAo=
Subject key identifier: 17:EB:6A:18:3F:A1:EE:AE:67:B1:7B:4F:82:A4:BB:70:C9:7F:DF:1F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B7F0430EB88CB40E29690C80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5739e22e-b8f3-375b-b49a-56581e31e1f4.roa
Signing time: Fri 02 May 2025 10:10:51 +0000
ROA not before: Fri 02 May 2025 10:10:51 +0000
ROA not after: Thu 31 Jul 2025 10:10:51 +0000
asID: 208485
IP address blocks: 172.111.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 10:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b7:f0:43:0e:b8:8c:b4:0e:29:69:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 2 10:10:51 2025 GMT
Not After : Jul 31 10:10:51 2025 GMT
Subject: CN=4595d2e3-9d60-408d-a1c0-7a21ca860ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:f5:99:17:47:db:04:81:9b:00:64:a8:b1:
6c:e6:7f:07:8f:c9:e3:f4:ef:06:04:8c:ae:6a:5c:
b7:5a:1d:e2:52:3d:0a:82:c2:17:a7:7e:37:0f:a4:
87:e9:c7:1b:13:1b:31:12:d7:25:09:f1:48:3c:f6:
5b:3e:34:46:ce:87:e0:87:92:7c:f2:88:29:05:4b:
4f:89:de:e4:59:20:84:f5:12:e1:8d:aa:ef:90:c3:
63:8a:ce:d5:23:9e:3d:1e:7f:54:08:3f:9c:cb:9b:
2c:e4:7e:5b:f7:30:e7:14:7e:0f:a4:e2:ec:81:82:
c2:58:fc:30:fb:35:a0:b4:51:10:6d:0d:19:92:10:
90:d4:0b:60:3c:7e:74:57:e5:3f:8a:c3:8d:b7:b3:
2f:2e:a5:5e:77:64:57:b2:75:a8:7f:b5:e9:8c:31:
d4:ee:09:03:16:1d:1a:49:62:0b:e1:1e:99:89:26:
72:99:86:c2:82:d2:0d:a4:b5:df:34:c9:0c:29:89:
32:51:ec:92:dc:38:ed:b4:82:26:0c:83:8e:f7:48:
10:ca:01:ff:32:bb:da:94:9d:22:71:48:4f:b2:cb:
0b:44:76:11:49:4e:a2:f7:0a:99:d4:1c:34:4f:2b:
b9:74:9e:6b:59:d8:57:ab:a5:26:86:95:a9:f5:e0:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EB:6A:18:3F:A1:EE:AE:67:B1:7B:4F:82:A4:BB:70:C9:7F:DF:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5739e22e-b8f3-375b-b49a-56581e31e1f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:e9:10:61:0d:72:61:7b:b9:24:1f:ea:2d:ed:e9:10:17:83:
2c:ee:ee:2a:6e:e1:64:16:d0:d3:2e:6f:97:f8:4e:9b:a8:b6:
44:20:5d:b4:d4:6e:e0:36:ad:6f:44:f4:17:ba:99:a2:20:19:
23:e5:2e:03:ca:c7:5f:a9:ad:f7:3b:a4:d4:e2:e0:87:32:70:
91:0d:17:5e:77:40:fa:45:4a:93:4c:6d:03:29:28:11:0c:9a:
d8:99:6a:3b:1f:93:8f:9f:7d:a7:11:24:a0:33:3e:92:19:26:
76:ec:2a:b2:88:a1:92:a1:38:d0:0f:da:e2:35:78:cf:cc:7a:
1e:ab:bd:37:c6:e8:22:1a:4f:58:d0:53:7e:b7:e3:80:4c:47:
27:4f:d7:55:4e:81:0f:a9:d9:c9:92:b5:c0:65:44:38:4c:f8:
08:19:d0:b7:8e:63:de:f9:91:e4:ca:d1:35:0d:41:7a:ca:d9:
f7:93:34:13:16:23:51:97:ad:c1:84:70:cc:16:16:26:5d:9a:
17:aa:79:21:c3:cc:e7:b9:9d:3b:f3:6f:2f:08:ed:25:89:1e:
32:ae:ad:40:ed:65:d0:db:86:60:13:86:90:ed:53:9c:88:f8:
0d:2e:0e:67:3c:87:30:b7:35:60:5a:6b:9b:2a:b9:18:f9:0b:
4f:be:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:57:55 2025 by rpki-client