Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7fda524a-faae-3d6c-83b2-cc6c1eb7cd6f.roa
File: 7fda524a-faae-3d6c-83b2-cc6c1eb7cd6f.roa (raw, json)
Hash identifier: ovk2zZtu3T7tKiLXGia2BCPRmN3lZ6WezGrm3/7eIGA=
Subject key identifier: B3:7D:7C:7B:49:65:13:16:7D:28:E5:9B:A4:1F:FF:4A:B2:89:08:C7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849AF4C3C2E1F019218094BB980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7fda524a-faae-3d6c-83b2-cc6c1eb7cd6f.roa
Signing time: Tue 29 Apr 2025 07:53:53 +0000
ROA not before: Tue 29 Apr 2025 07:53:53 +0000
ROA not after: Mon 28 Jul 2025 07:53:53 +0000
asID: 43260
IP address blocks: 172.94.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 11:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:af:4c:3c:2e:1f:01:92:18:09:4b:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 29 07:53:53 2025 GMT
Not After : Jul 28 07:53:53 2025 GMT
Subject: CN=6e58f45b-7147-4bfa-a49a-c22e41a8d532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:15:b0:d4:c9:6e:bc:f8:f4:2d:17:17:de:
4c:c8:cf:50:c7:e5:2a:32:cd:b7:65:43:20:17:6b:
e1:96:13:18:5a:9c:97:a3:75:a0:19:17:18:60:49:
0e:35:a5:db:a9:60:07:d1:d3:33:42:86:25:7a:c4:
4f:94:f1:b9:ba:8f:a3:1e:5f:ae:6d:9a:43:3d:a6:
ee:f0:12:6c:f5:b8:29:c6:d8:97:0f:38:dd:2d:71:
4d:69:10:bd:2d:3a:37:5d:c8:79:0a:f5:aa:c2:17:
2c:92:57:dc:3e:d5:98:a8:26:7c:33:4e:06:08:3e:
d7:be:e6:a2:25:85:fc:1e:0a:7f:c7:11:47:3f:ed:
88:92:45:c5:ad:72:9d:bc:1e:56:42:c1:ec:d7:2c:
7b:59:27:da:4b:5a:97:4b:2d:78:1a:af:84:0e:7f:
51:dd:98:00:bb:17:cd:bf:3b:2a:0f:48:e0:1d:d1:
f5:3a:fe:f5:02:0a:74:a8:cd:4b:c9:d1:6e:e0:a8:
86:35:e6:4a:65:4c:c8:e2:69:7f:d3:9c:91:b6:8e:
e1:57:57:00:0c:e0:fb:8b:21:9e:41:08:fd:93:31:
31:ea:75:8f:34:4a:d9:6f:db:33:9e:b8:34:31:e8:
7d:8c:55:db:de:27:20:7b:b6:d2:00:b7:9d:c2:09:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7D:7C:7B:49:65:13:16:7D:28:E5:9B:A4:1F:FF:4A:B2:89:08:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7fda524a-faae-3d6c-83b2-cc6c1eb7cd6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:33:29:09:1d:1a:9c:08:55:42:08:d8:ff:64:6e:1c:27:b1:
cf:fb:67:cc:38:3d:16:a5:b4:e9:02:fc:1e:27:c3:5d:63:72:
83:8b:b2:c4:ac:d4:95:2f:b2:fa:05:04:87:cc:f9:9a:e1:cf:
2e:fd:14:f2:d9:39:5d:54:0a:3d:32:a7:89:1e:36:5a:a8:5c:
07:ca:4d:90:2c:37:cb:e3:28:2f:9f:bd:e8:e1:22:f7:95:75:
06:ed:7d:20:49:0b:d1:45:04:b7:5e:14:45:b8:fc:fe:e7:6f:
fc:7d:5f:4d:be:36:e9:29:79:d6:67:45:73:1a:46:7a:23:7e:
b5:cc:b2:9b:27:df:d1:f5:ac:cf:6a:b1:18:74:fe:dc:de:11:
96:61:02:24:33:84:72:1a:04:c6:b9:6a:af:d4:91:7e:bf:35:
40:9e:2a:8d:81:6c:82:8e:c7:cd:5a:d5:81:c9:2f:78:0b:28:
3c:fb:68:aa:c0:50:21:af:bc:05:d8:7e:8c:fb:31:34:4d:2b:
8e:8c:63:f6:0c:6a:fc:e5:d6:4c:a9:14:ac:1d:da:95:11:60:
35:c7:5e:85:ff:fa:a9:c8:52:25:87:4a:33:ca:c1:7f:dc:99:
7b:c9:b2:c7:64:47:84:09:1e:a9:e1:9f:8d:cb:c2:25:ea:c7:
28:9c:f2:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvTDwuHwGSGAlLuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDQyOTA3NTM1M1oXDTI1MDcyODA3NTM1M1owLzEtMCsGA1UEAxMk
NmU1OGY0NWItNzE0Ny00YmZhLWE0OWEtYzIyZTQxYThkNTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C0VsNTJbrz49C0XF95MyM9Qx+UqMs23ZUMg
F2vhlhMYWpyXo3WgGRcYYEkONaXbqWAH0dMzQoYlesRPlPG5uo+jHl+ubZpDPabu
8BJs9bgpxtiXDzjdLXFNaRC9LTo3Xch5CvWqwhcsklfcPtWYqCZ8M04GCD7Xvuai
JYX8Hgp/xxFHP+2IkkXFrXKdvB5WQsHs1yx7WSfaS1qXSy14Gq+EDn9R3ZgAuxfN
vzsqD0jgHdH1Ov71Agp0qM1LydFu4KiGNeZKZUzI4ml/05yRto7hV1cADOD7iyGe
QQj9kzEx6nWPNErZb9sznrg0Meh9jFXb3icge7bSALedwgmyCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLN9fHtJZRMWfSjlm6Qf/0qyiQjHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2ZkYTUyNGEtZmFhZS0z
ZDZjLTgzYjItY2M2YzFlYjdjZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACczKQkdGpwIVUII2P9kbhwnsc/7Z8w4PRaltOkC/B4nw11jcoOLssSs
1JUvsvoFBIfM+Zrhzy79FPLZOV1UCj0yp4keNlqoXAfKTZAsN8vjKC+fvejhIveV
dQbtfSBJC9FFBLdeFEW4/P7nb/x9X02+NukpedZnRXMaRnojfrXMspsn39H1rM9q
sRh0/tzeEZZhAiQzhHIaBMa5aq/UkX6/NUCeKo2BbIKOx81a1YHJL3gLKDz7aKrA
UCGvvAXYfoz7MTRNK46MY/YMavzl1kypFKwd2pURYDXHXoX/+qnIUiWHSjPKwX/c
mXvJssdkR4QJHqnhn43LwiXqxyic8vQ=
-----END CERTIFICATE-----
Generated at Mon May 12 02:13:25 2025 by rpki-client