Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f2314eb-c024-3ec8-8e22-5fe7a0e46f5c.roa
File: 5f2314eb-c024-3ec8-8e22-5fe7a0e46f5c.roa (raw, json)
Hash identifier: 9niZ5OfSZwMvYvr1DDQgiYOZgBpyd4GdRwTPX52nDSc=
Subject key identifier: 20:4C:CA:0D:CB:CA:B1:B3:63:C4:0B:4A:D7:E6:49:76:DC:5C:86:FB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849AFAA0C01780E0427B253C8E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f2314eb-c024-3ec8-8e22-5fe7a0e46f5c.roa
Signing time: Tue 29 Apr 2025 11:02:55 +0000
ROA not before: Tue 29 Apr 2025 11:02:55 +0000
ROA not after: Mon 28 Jul 2025 11:02:55 +0000
asID: 9009
IP address blocks: 45.74.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 05:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:af:aa:0c:01:78:0e:04:27:b2:53:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 29 11:02:55 2025 GMT
Not After : Jul 28 11:02:55 2025 GMT
Subject: CN=484fdd35-da0f-4e9a-b5c8-cde1265f5ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:d1:e8:3b:90:05:4f:90:c9:16:41:f4:0b:
42:0f:cf:90:11:18:41:d2:53:99:a4:b8:40:d5:67:
b6:b2:0f:64:6d:26:d2:5e:de:82:a7:3d:91:80:31:
89:e8:83:a9:fe:18:67:16:1e:0a:a7:ed:00:d5:18:
d7:9b:41:4d:5b:70:8e:4b:57:e4:b0:b1:39:1c:69:
44:c4:3d:76:c2:3a:e1:a8:13:10:5b:73:21:f8:a4:
3b:02:46:9d:eb:1a:f9:27:f9:c3:94:4d:14:e7:ca:
c2:2f:1f:d2:f7:c3:c1:e0:0a:04:e4:6d:8d:d1:ca:
c8:46:8c:0c:aa:51:80:6b:29:64:55:93:f3:b9:03:
d9:9c:0d:b2:34:cc:45:2a:db:7f:5c:c8:0c:2a:ce:
fd:e2:54:9c:31:40:4b:57:1f:98:69:73:4c:e9:c4:
48:2b:03:fb:7b:d1:20:9c:4f:4c:ed:8b:c7:a4:a9:
63:28:5d:6b:92:d7:8b:44:6f:5a:6f:5b:69:05:8b:
d5:f0:7a:7f:f5:db:54:6f:ed:14:36:af:73:65:b7:
64:70:03:74:f8:3e:01:3f:cc:8a:ba:f8:de:7b:96:
85:0a:0a:1d:3d:11:ce:b0:7b:c6:6d:48:69:ca:ee:
6e:eb:c0:e4:8d:56:cd:5d:38:87:a9:c6:fb:83:b4:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:CA:0D:CB:CA:B1:B3:63:C4:0B:4A:D7:E6:49:76:DC:5C:86:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f2314eb-c024-3ec8-8e22-5fe7a0e46f5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:01:c5:6e:e1:0f:14:27:4d:33:ac:9f:96:19:4f:3e:38:2e:
ae:c1:48:e7:d7:9a:63:fb:95:8a:2f:d8:fa:9f:fd:0e:84:22:
5e:1e:32:39:6a:75:7d:a5:16:6a:c5:b2:93:25:bf:f4:1d:09:
58:35:a4:90:68:d4:70:aa:34:a4:a1:00:7b:66:1f:0d:22:3a:
56:a0:d4:78:9b:ab:04:39:9d:44:a1:d1:a1:b9:a5:53:ab:2d:
c9:a5:38:44:a8:3e:e4:fe:b0:45:64:86:4d:2a:65:50:83:ef:
a8:50:ff:9f:86:01:b7:55:8c:26:60:57:7b:eb:41:2a:eb:25:
0a:76:8c:05:02:cf:e9:ed:19:b9:1c:92:48:a4:91:5c:b5:73:
7a:f5:47:6a:57:ab:0b:27:d1:b2:3e:35:4e:73:b7:a4:02:1e:
54:9c:bf:fd:cc:6a:8e:97:de:26:ae:4c:08:9a:73:5b:90:89:
72:0f:f3:aa:1c:38:99:50:9c:df:36:52:b9:27:b2:ff:c5:4d:
c4:4e:2e:49:a4:a1:4f:97:b9:ee:c4:7e:d5:02:98:69:79:8c:
b0:0d:ea:76:94:64:24:aa:c2:16:5a:84:32:9a:29:8f:02:84:
86:4e:d4:4d:ca:a8:12:50:d4:3c:22:5e:ca:99:ad:de:7c:ff:
23:e6:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:01:35 2025 by rpki-client