Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8f227864-31e2-3ec4-87c7-ea40496499ad.roa
File: 8f227864-31e2-3ec4-87c7-ea40496499ad.roa (raw, json)
Hash identifier: ba7e4RSmneMICCs+9MZleINxcLOB+DEi0Dzzi80H3IE=
Subject key identifier: 84:DF:4C:A6:31:E9:D8:B6:23:FC:33:06:47:9F:B0:E9:72:FB:CC:7C
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858498B808DEAB6AA62D407EC5440
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8f227864-31e2-3ec4-87c7-ea40496499ad.roa
Signing time: Wed 16 Apr 2025 12:10:12 +0000
ROA not before: Wed 16 Apr 2025 12:10:12 +0000
ROA not after: Tue 15 Jul 2025 12:10:12 +0000
asID: 329007
IP address blocks: 172.94.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 06:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8b:80:8d:ea:b6:aa:62:d4:07:ec:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 16 12:10:12 2025 GMT
Not After : Jul 15 12:10:12 2025 GMT
Subject: CN=7ea786ca-778b-414c-bf32-4afabae44bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ee:9d:69:b7:19:75:89:05:ab:9d:31:ca:30:
d6:2e:5c:69:cb:13:44:3e:36:45:93:4e:10:7e:00:
b4:c0:f2:af:39:40:93:15:35:0a:6c:56:c5:25:9f:
4b:72:75:ff:f1:ca:15:61:c4:53:b2:82:1c:87:81:
15:4b:df:40:9e:0c:f6:c7:3d:a7:90:b1:8c:91:89:
c6:a0:6f:b4:77:4f:a1:e6:17:48:d1:a7:a2:d8:fe:
83:10:63:fb:d4:3e:58:23:9c:3d:0e:88:3c:ec:90:
3c:71:78:f2:db:6e:d9:f3:ab:e7:1f:9c:91:95:f4:
ce:a5:68:cb:6c:76:68:72:17:61:0f:66:fb:cd:3c:
52:d4:71:3a:48:0e:ec:f7:ca:0f:72:b5:f3:2a:6b:
9e:cd:e3:a8:be:c4:5f:0b:13:38:96:dd:7b:37:27:
11:0b:cf:9e:ea:2c:b1:d9:6a:9d:78:62:f1:e6:9e:
1b:93:d9:34:c0:82:2f:f9:30:c8:5a:a8:d2:e4:87:
75:2b:63:64:3f:58:cb:5e:70:06:42:d5:74:57:0d:
49:a0:6e:fb:27:7e:26:33:f8:55:ee:c1:2f:25:2d:
89:33:f4:e3:d3:27:43:26:37:f7:88:00:e8:55:cb:
e3:7f:46:c3:f7:cb:4d:46:77:e9:9b:fd:12:33:6c:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:4C:A6:31:E9:D8:B6:23:FC:33:06:47:9F:B0:E9:72:FB:CC:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8f227864-31e2-3ec4-87c7-ea40496499ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:15:97:8a:86:7c:63:a7:06:92:ef:fd:3c:24:41:70:4b:41:
2f:b2:37:76:61:ba:98:18:d2:02:14:6d:a8:e9:ef:1c:67:ac:
07:fb:11:9a:80:b0:4f:89:03:be:6c:5b:fc:4e:ca:37:a2:16:
26:ad:3a:97:2d:49:a9:4a:8d:fb:2c:d3:df:61:12:a8:9a:9e:
d6:93:a3:50:f7:6c:1c:0a:4f:29:c3:3a:cf:eb:f9:10:2f:e0:
f2:f5:2b:04:45:46:90:57:2f:64:4d:75:28:35:25:3e:7a:93:
76:06:9d:ac:ed:46:c8:28:85:e9:10:8d:13:6b:4c:07:51:10:
d7:fa:6b:84:c5:55:f7:f0:1d:4d:39:10:d5:93:5f:de:b7:08:
db:e3:0a:4e:ef:41:82:61:ab:77:75:d8:07:85:a1:0f:b2:25:
1c:d7:7c:bf:d3:4a:f6:ea:e8:46:b7:11:f6:78:f7:85:17:d3:
73:48:1e:1f:89:69:15:85:41:57:cf:13:90:c5:86:77:6f:56:
c8:ba:62:0d:54:93:1e:a7:9f:b2:5b:10:23:eb:37:e2:89:ae:
fe:5c:a5:e6:d4:24:e6:39:02:9c:40:62:45:ff:69:c2:9f:96:
a2:a3:d7:c2:da:cb:c4:1e:78:3a:c0:dc:e4:ea:e0:60:62:24:
70:72:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:16:11 2025 by rpki-client