Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2bde4f4-9ab6-3635-a02a-a27c47f6b8d0.roa
File: a2bde4f4-9ab6-3635-a02a-a27c47f6b8d0.roa (raw, json)
Hash identifier: FKU31MHv0Yzkv/6J2VRbxYhH6VcbSzv0Xc4BjpfZGCM=
Subject key identifier: C6:51:45:3C:EC:0B:43:1F:4F:23:FA:C0:F5:36:5A:A1:31:40:A2:CF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849998F3E7DDDA44C3B4970EB30
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2bde4f4-9ab6-3635-a02a-a27c47f6b8d0.roa
Signing time: Mon 21 Apr 2025 13:00:59 +0000
ROA not before: Mon 21 Apr 2025 13:00:59 +0000
ROA not after: Sun 20 Jul 2025 13:00:59 +0000
asID: 53356
IP address blocks: 172.111.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 10:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:99:8f:3e:7d:dd:a4:4c:3b:49:70:eb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 21 13:00:59 2025 GMT
Not After : Jul 20 13:00:59 2025 GMT
Subject: CN=4a96c929-2c72-4b57-b464-5f34d6b5b47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:39:9c:23:44:04:c4:33:c0:3d:85:fd:e6:
8c:ea:53:70:0d:d8:aa:55:f5:e6:c0:d7:ce:1d:36:
16:f8:fb:fe:90:a2:9b:ae:f0:a3:cd:ed:a5:3e:d1:
d0:a3:f8:ef:38:1d:b7:18:d2:78:3b:cc:31:b6:15:
8d:49:21:1e:9b:7d:ff:9b:c7:0a:30:94:b2:d1:42:
f5:1d:bc:b3:1b:8e:a6:66:1a:ec:d2:c0:29:0e:ba:
fa:f7:ea:c9:1b:d6:26:bf:ba:d2:4e:e0:2f:91:9c:
32:ee:db:37:d2:cc:76:d7:fb:7e:89:99:62:61:19:
09:34:22:ae:c1:1e:fb:af:74:21:f7:ca:74:91:4b:
18:b3:74:7c:ca:3e:4a:26:47:26:48:44:23:b5:10:
12:31:2e:3c:ee:c2:e2:63:6f:c3:f0:a9:a2:6d:60:
b6:c0:49:ac:88:9f:07:2c:b9:dd:1f:72:73:8d:68:
ae:8c:d7:94:4d:86:d6:36:5b:f5:5f:f7:61:52:6e:
6e:37:66:56:94:cb:93:d8:3d:af:3a:95:ad:93:2c:
20:e1:39:bc:89:d9:76:16:dd:2c:a1:85:9a:51:bd:
8a:16:be:03:d6:02:2e:fe:30:4d:4e:43:3c:ca:fe:
4b:21:0d:88:33:87:5f:79:f5:4c:02:25:fb:82:5b:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:51:45:3C:EC:0B:43:1F:4F:23:FA:C0:F5:36:5A:A1:31:40:A2:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2bde4f4-9ab6-3635-a02a-a27c47f6b8d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:8f:7e:a7:7a:b3:8e:3c:ef:9e:af:bd:d8:4d:98:90:0b:63:
82:07:de:b4:db:ba:9d:dd:3d:e9:9e:42:2e:b4:b2:da:13:08:
ce:66:9f:50:d1:a1:23:e6:d4:13:c7:8a:00:f3:87:91:fa:8f:
86:80:93:00:b4:75:e4:8d:77:16:6a:e2:fa:42:15:ea:cc:48:
ae:30:9c:29:e1:60:2d:07:60:64:c0:bb:03:b3:b6:5e:2c:0a:
a6:ab:fc:ae:13:ba:69:ac:7b:02:79:c8:59:7f:9d:3e:4d:c3:
b6:3e:22:be:31:a6:ee:26:15:c9:60:1f:fc:23:de:43:6b:2d:
5d:3a:56:32:70:6b:26:82:a9:a8:29:4e:46:21:ab:e2:ec:1c:
70:ab:32:66:05:a8:1e:fd:e3:6a:73:7b:aa:2e:cb:2f:53:ef:
f6:2e:19:de:c1:6c:04:7c:70:c4:52:73:af:d1:a6:54:47:88:
f6:01:50:06:43:b2:a1:99:08:73:ea:2d:28:cf:ca:73:0c:b7:
68:a7:d1:0a:4c:92:e4:b6:0c:a1:99:61:4d:20:24:94:f5:70:
7b:35:a5:2c:ab:b3:a8:3f:58:b6:77:4e:c0:a1:d0:f2:bb:d9:
8d:c3:dd:a2:4b:20:44:e9:44:dc:3c:74:72:28:67:e9:9c:b6:
62:50:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:26:29 2025 by rpki-client