Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5e6da7c0-f4af-3ec1-ac26-d961ab92dd31.roa
File: 5e6da7c0-f4af-3ec1-ac26-d961ab92dd31.roa (raw, json)
Hash identifier: VtJcBjvQiqHjkTyofzy2sJ9PXZaDGLRLvI3iWVYrjCk=
Subject key identifier: A8:02:D5:1A:FF:EF:33:81:B0:AC:FD:83:4F:93:8E:65:B9:B2:DA:D4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B7EEF28777B2C0D41577D080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5e6da7c0-f4af-3ec1-ac26-d961ab92dd31.roa
Signing time: Fri 02 May 2025 10:08:12 +0000
ROA not before: Fri 02 May 2025 10:08:12 +0000
ROA not after: Thu 31 Jul 2025 10:08:12 +0000
asID: 208485
IP address blocks: 172.111.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 10:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b7:ee:f2:87:77:b2:c0:d4:15:77:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 2 10:08:12 2025 GMT
Not After : Jul 31 10:08:12 2025 GMT
Subject: CN=538b4736-bac6-40ed-a76e-b5427b64febf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:f3:b3:ab:1a:d8:75:73:02:d3:3c:64:88:
aa:2e:44:0b:04:8d:6c:e0:55:4f:30:de:83:f7:69:
a8:a7:08:83:04:9b:bc:ea:c7:0b:61:6d:a9:6c:66:
5c:8d:7b:83:55:a4:b0:b0:19:9b:3c:54:c7:36:e2:
b9:b7:79:59:3a:a7:da:0b:95:09:b4:2d:ef:2b:71:
f6:35:75:d2:a1:15:bf:8e:62:97:e9:0a:1b:3d:a2:
c6:89:34:80:ff:f7:0a:f9:4e:59:9a:fb:90:4a:32:
02:d4:15:9e:51:a7:1a:05:0e:a8:cd:06:95:f6:b4:
03:40:f5:ae:83:10:4a:40:bc:79:73:82:18:10:2e:
72:79:21:02:0c:c9:96:da:c4:86:66:c7:cb:a0:fe:
3b:39:ca:78:65:b0:54:18:79:80:b7:d1:aa:9e:72:
b7:ad:eb:79:e4:68:a9:ac:9e:f7:2b:fe:12:91:b8:
bb:5b:0c:66:77:a4:e4:89:97:b2:33:ce:95:e6:d5:
89:ce:30:d9:72:8a:9b:11:cd:3e:c2:3e:5d:62:3c:
17:13:fc:61:f3:1c:f1:68:f2:30:c8:64:e1:94:72:
14:08:4b:40:4f:b2:11:fe:c4:cf:23:a6:23:a0:ea:
a0:21:e4:15:a2:22:cd:44:92:36:ce:0c:47:84:65:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:D5:1A:FF:EF:33:81:B0:AC:FD:83:4F:93:8E:65:B9:B2:DA:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5e6da7c0-f4af-3ec1-ac26-d961ab92dd31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:fb:13:7b:f5:e4:48:a7:38:79:ca:bb:2c:98:f9:56:fb:99:
a2:69:08:bc:14:9a:54:43:0a:73:94:b3:c4:d7:9d:59:a9:3d:
d4:cd:e7:5a:d5:6b:bf:27:a9:00:8f:0e:62:f2:a3:71:b2:d0:
39:96:91:86:9c:80:9e:01:5b:d7:44:04:d1:a9:d0:f2:21:fa:
e0:66:16:a1:93:b4:e5:1e:ef:c3:5f:c4:8e:ac:12:61:5c:fc:
6b:35:14:c7:f3:bf:02:73:ff:61:31:19:21:a6:55:d4:23:89:
05:43:d7:9c:a0:08:6a:82:1b:de:05:41:4f:b0:3f:43:30:81:
31:d2:f4:33:77:2c:39:67:88:6b:c4:cc:e0:2d:00:b4:d2:8c:
67:49:33:81:a5:15:8a:db:20:78:79:c3:93:b8:0b:06:a6:77:
8f:ba:1c:ec:2f:94:4e:c8:c3:16:4d:5f:64:81:2e:18:70:ed:
b6:95:a0:bd:be:af:33:66:c1:ab:d4:c0:c0:9f:fb:cc:82:57:
7f:35:c8:b8:3f:f1:57:42:3c:80:9a:97:e7:68:a6:cb:d9:38:
41:11:78:68:9b:fe:87:20:5f:e4:59:fe:4b:8d:82:0a:ed:bd:
8c:f6:9e:48:74:74:b5:b7:f2:69:08:67:6f:3f:b1:f3:fb:16:
d3:c9:57:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:16:47 2025 by rpki-client