Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8278d905-1c15-3a63-b66e-e5706305b428.roa
File: 8278d905-1c15-3a63-b66e-e5706305b428.roa (raw, json)
Hash identifier: ertQXCrIez1HykuwAcaHoRrK4qq8XinIgOuQoii/R3s=
Subject key identifier: AE:9D:5F:F2:5A:5D:F1:91:2F:8E:33:E9:DD:EF:35:02:0D:0A:BA:4F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849ACFD4BB916327242401FB000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8278d905-1c15-3a63-b66e-e5706305b428.roa
Signing time: Mon 28 Apr 2025 12:03:13 +0000
ROA not before: Mon 28 Apr 2025 12:03:13 +0000
ROA not after: Sun 27 Jul 2025 12:03:13 +0000
asID: 329007
IP address blocks: 206.123.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 07:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ac:fd:4b:b9:16:32:72:42:40:1f:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 28 12:03:13 2025 GMT
Not After : Jul 27 12:03:13 2025 GMT
Subject: CN=24aa7efb-2752-424b-ab59-05361591fc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:cb:97:f7:5d:a5:27:83:9c:5d:d1:e0:93:
f0:4c:12:66:74:dd:c6:54:d5:f7:30:7e:cc:29:82:
cb:d4:af:ee:d5:ac:bc:f8:9b:08:1e:97:67:6d:88:
f3:55:90:4f:49:51:f6:08:4a:b5:9e:72:75:d5:4c:
4c:47:e2:9a:e2:43:9f:40:e9:29:14:f9:3c:24:20:
e6:7d:5d:3d:4b:e1:80:3d:a6:bf:93:68:74:61:79:
53:f7:fb:28:8d:20:c7:24:da:e9:a8:ae:e4:11:60:
7c:c8:be:eb:b0:50:cd:65:e5:ba:83:07:e8:59:dd:
95:63:1b:bd:5e:8c:c4:41:dd:fd:ca:8c:f4:5f:ef:
a6:cb:a1:38:c2:32:0a:43:dd:f7:16:8f:13:8e:37:
f2:f1:ce:91:c0:82:36:3f:6b:12:12:b5:57:7f:6a:
a2:64:fb:8a:af:c3:c6:6d:32:23:be:f2:78:1a:3c:
b6:21:d1:67:13:4f:6e:4e:6b:53:e2:bd:d2:63:d2:
48:c8:5e:fa:ad:c5:93:16:b7:15:50:c6:c6:43:9a:
c2:c8:59:34:e8:35:de:89:72:fb:9d:61:52:dd:c7:
0b:73:eb:c0:eb:e8:3e:c6:0e:72:50:3f:c8:91:0b:
3f:00:df:b1:ad:c2:5a:4e:98:6c:5c:64:5a:40:8c:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9D:5F:F2:5A:5D:F1:91:2F:8E:33:E9:DD:EF:35:02:0D:0A:BA:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8278d905-1c15-3a63-b66e-e5706305b428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:64:d1:dc:6e:79:50:2b:83:b1:58:7d:51:9a:2f:d9:6c:80:
40:e6:55:33:bf:d8:c3:f0:c3:75:5d:7e:01:be:af:ac:9d:45:
28:6a:aa:76:11:d9:8e:9d:77:82:c0:50:a9:1d:dc:cd:8c:fe:
9c:06:93:d5:d0:07:df:92:1b:aa:cf:f0:f1:22:b4:59:ad:79:
56:2d:05:09:ec:4f:49:bf:86:f7:65:ca:13:95:ee:57:f0:c0:
75:bb:06:de:d6:b3:8c:bc:c5:89:8e:19:01:6c:fc:dc:38:b8:
64:40:1a:7d:99:61:b1:33:50:20:f9:8a:59:a2:37:42:4f:f9:
1d:8a:99:fb:a6:05:c3:de:2d:fc:ec:da:ee:32:ac:8a:a4:17:
95:ed:e3:eb:51:c8:31:af:54:ba:db:bf:1b:a6:9b:00:51:f3:
c5:20:23:f9:36:f9:bb:a4:f2:97:58:0c:18:5c:15:ab:58:65:
50:c7:a7:4b:4c:1a:67:4f:bf:b6:1f:fe:a5:bb:7c:35:61:46:
c6:cf:25:b2:26:b7:b0:6a:0e:80:a6:b9:3e:ab:e0:45:b6:46:
ae:c5:38:48:cd:af:0b:c8:c2:5a:c6:c3:e5:3d:d6:c5:db:f7:
2a:a7:6d:81:5a:b6:00:53:d4:52:dd:b2:d4:37:1b:98:99:30:
30:7d:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:13:11 2025 by rpki-client