Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4f747f4-506c-3824-8e0e-dbf6af1eaa2f.roa
File: a4f747f4-506c-3824-8e0e-dbf6af1eaa2f.roa (raw, json)
Hash identifier: CMSXFsQuH+hdSzaaK3EuoZpH+veAlJHP3YkNd639giU=
Subject key identifier: CF:22:47:F6:70:31:6C:B7:C4:D2:5E:34:A3:15:73:82:38:28:56:51
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849AF4C76413BB193B9D9FC5FC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4f747f4-506c-3824-8e0e-dbf6af1eaa2f.roa
Signing time: Tue 29 Apr 2025 07:54:21 +0000
ROA not before: Tue 29 Apr 2025 07:54:21 +0000
ROA not after: Mon 28 Jul 2025 07:54:21 +0000
asID: 43260
IP address blocks: 172.94.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 11:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:af:4c:76:41:3b:b1:93:b9:d9:fc:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 29 07:54:21 2025 GMT
Not After : Jul 28 07:54:21 2025 GMT
Subject: CN=9ba33929-f86c-4ba8-ac72-4ba9e5c7f313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:35:37:68:97:e2:f0:22:1e:8f:90:98:67:
a9:ec:39:ed:f0:77:f0:d6:a0:16:f1:a2:3d:da:47:
59:b1:fb:a6:20:06:ab:11:0e:98:b2:ad:40:7b:f5:
ca:18:af:c0:cb:80:d4:33:09:54:4d:5e:40:d4:91:
e7:f8:a6:8c:aa:80:26:e9:7c:50:e2:68:4d:cd:fc:
8a:90:02:35:7c:e4:bb:a9:de:45:d5:05:14:01:f9:
f4:3a:da:32:36:a4:8e:bf:ce:f6:56:8a:ed:bf:d6:
a4:ca:00:58:db:f0:b0:cc:20:4a:f6:3e:8a:54:b9:
f8:ec:f7:2a:07:6c:99:23:9c:13:d1:66:21:23:1c:
9b:7e:64:3d:53:d3:0a:23:3c:93:79:7b:b1:c1:ad:
50:58:1a:0f:72:d0:30:52:4b:15:2c:11:02:14:58:
7e:a4:66:6e:10:e5:5f:17:ca:73:81:09:15:7a:5c:
7c:04:f1:e8:45:05:ac:ef:35:95:18:52:b0:71:48:
27:ae:c0:be:6f:3b:33:b7:66:73:ad:87:50:f4:f4:
64:11:d9:d5:03:f4:76:b8:b6:12:0c:9e:3e:97:56:
4f:29:0c:e7:f2:2d:cd:77:a7:de:12:19:6f:10:f3:
81:cb:93:90:27:b8:2e:cd:cf:3b:5b:e6:95:35:c5:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:47:F6:70:31:6C:B7:C4:D2:5E:34:A3:15:73:82:38:28:56:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4f747f4-506c-3824-8e0e-dbf6af1eaa2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:82:43:d0:93:05:d4:bf:37:dd:25:56:91:f4:39:4c:d4:5c:
e2:5f:d0:8e:26:58:54:16:5e:02:58:7a:57:1f:46:62:e0:41:
8b:40:52:b7:73:25:a2:79:bf:d6:ca:b3:fe:7f:fe:32:7b:1b:
c4:53:cb:5c:e6:be:c6:28:b3:aa:bd:51:0b:ef:bd:b0:55:5c:
0d:3c:86:a5:ea:2c:46:b3:3f:65:e4:ac:23:ad:f7:d9:bb:76:
55:3f:8a:54:48:f0:32:98:c4:7b:98:88:50:bf:e6:63:37:12:
53:48:60:a8:da:85:8a:49:45:a6:d6:75:ab:0f:99:3d:27:22:
a0:ec:d6:b0:32:84:a4:dd:51:d0:66:14:c3:0e:86:a9:28:50:
c4:4a:ac:84:fa:a4:96:e5:ab:f7:88:c8:6b:75:d7:a0:d7:6f:
73:67:c7:b7:fe:93:92:58:6c:85:c7:9e:11:b3:14:5e:0d:a9:
ca:91:87:1d:f0:70:44:a7:53:50:30:fe:94:ae:32:75:63:31:
a5:f4:e1:88:35:bc:17:6d:4f:04:52:05:91:94:9b:c6:56:58:
7b:48:db:45:69:91:c4:d6:d5:bd:b8:61:8c:9c:5e:c8:27:fe:
5a:1f:08:df:cd:27:d3:f7:07:02:03:76:75:d9:24:58:c2:f0:
cc:f4:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:49:25 2025 by rpki-client