Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c976943-fc13-37fd-8fd9-a63a9e2dd965.roa
File: 5c976943-fc13-37fd-8fd9-a63a9e2dd965.roa (raw, json)
Hash identifier: sVvte90T/wPclcL5ww5BP763zON55wN5XOzZbgLZVeE=
Subject key identifier: 30:94:DD:8A:66:03:62:89:13:34:33:37:71:DA:E7:45:63:B4:48:D4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849AF4BEF801548DECE0AFF87E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c976943-fc13-37fd-8fd9-a63a9e2dd965.roa
Signing time: Tue 29 Apr 2025 07:53:17 +0000
ROA not before: Tue 29 Apr 2025 07:53:17 +0000
ROA not after: Mon 28 Jul 2025 07:53:17 +0000
asID: 43260
IP address blocks: 172.94.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 11:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:af:4b:ef:80:15:48:de:ce:0a:ff:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 29 07:53:17 2025 GMT
Not After : Jul 28 07:53:17 2025 GMT
Subject: CN=720eafed-e578-4670-b985-8d36936f1eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:45:c7:e5:ee:0b:1d:2c:fc:5c:3e:b0:73:
5b:b8:e5:1b:2a:b2:a6:7b:e9:ab:16:7e:ca:52:bc:
f2:91:25:45:19:65:52:c9:38:3e:bf:be:76:7d:8d:
93:c4:af:00:2d:d4:cb:40:14:4e:45:45:8a:bf:d3:
f3:7b:5c:13:62:a5:cf:e7:06:53:c0:a3:ca:47:47:
cf:27:f0:1b:e0:b2:b5:6a:76:a6:ad:ab:2a:60:50:
8f:11:5c:ba:b8:9e:0f:b1:11:00:8f:76:60:eb:54:
47:b0:33:e2:20:a8:93:e3:d3:70:7c:ea:f4:96:7f:
a9:0a:5d:a6:45:26:0a:27:f8:82:88:73:8a:7a:53:
f1:39:5d:3c:1d:7f:84:f3:54:3a:b3:aa:f8:a6:fd:
b2:45:79:6c:5e:f1:f2:18:42:bf:70:2e:3a:ae:1b:
d4:3a:46:ec:5b:bc:6a:03:b6:30:b5:83:9d:d0:99:
7b:fb:ea:fa:a7:57:19:34:1d:38:58:18:e0:e1:c3:
c8:d1:62:c3:e7:71:1d:f0:cb:1d:8a:4b:12:bb:ce:
13:2c:93:e1:1a:6c:31:fa:a3:1b:e9:a6:8f:f3:0c:
08:8c:ea:d1:0e:67:72:1a:e8:62:76:33:58:2a:c5:
03:2f:b4:33:89:41:88:fa:ff:69:10:55:e1:fe:d5:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:94:DD:8A:66:03:62:89:13:34:33:37:71:DA:E7:45:63:B4:48:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c976943-fc13-37fd-8fd9-a63a9e2dd965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:2c:7d:d5:3c:aa:d1:16:e0:b2:6b:70:ba:b9:49:06:5a:0d:
86:c5:cb:bf:ae:95:e9:ba:f6:c1:b5:a5:38:eb:6b:21:1d:2c:
97:62:ef:9c:37:26:20:65:5e:ce:71:f7:f7:68:39:23:eb:45:
27:a5:1e:fc:b2:fb:ac:34:a4:e3:57:7e:f4:fb:c6:f4:06:32:
3e:c2:20:ae:2d:18:4d:90:b5:02:10:26:a0:5e:98:84:46:1b:
db:08:eb:4c:0f:61:43:69:54:2c:55:98:94:89:bc:b2:3e:3c:
7b:a8:e0:9c:ec:01:b4:99:b5:e9:c4:98:10:aa:e9:f4:81:33:
10:63:41:47:9d:dd:fc:44:78:c5:bc:bc:dd:2a:de:bf:2c:90:
21:0d:c7:ca:0d:71:49:ae:09:58:c3:33:50:47:f9:93:d7:5c:
cd:bd:b7:c6:d7:0a:6d:e3:90:1f:8f:cf:d3:c3:43:09:fa:a4:
e6:d0:08:bc:e8:11:f0:c2:87:c2:fb:64:f4:f8:3d:b9:69:d0:
1b:45:38:aa:6a:5f:6f:5d:61:e9:50:fc:e8:05:f8:33:56:d9:
a3:ad:6c:b4:17:e6:3e:eb:e4:da:07:c8:df:0a:3e:10:61:51:
0c:bb:31:d2:61:2c:ce:a1:d9:b9:a8:b8:78:b6:7b:3a:c7:34:
40:69:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:28:37 2025 by rpki-client