Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab21e039-d524-38b2-96fc-d1258c34a6e3.roa
File: ab21e039-d524-38b2-96fc-d1258c34a6e3.roa (raw, json)
Hash identifier: 7tKOKzvUPW+OxSwfVG0Um5kSXiv8+BCa5/nOs81/JH4=
Subject key identifier: 4E:6C:7D:73:8F:48:62:88:0D:17:56:25:58:34:14:35:51:34:38:EB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584985D766FF93B7CA421EA23900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab21e039-d524-38b2-96fc-d1258c34a6e3.roa
Signing time: Mon 14 Apr 2025 11:30:21 +0000
ROA not before: Mon 14 Apr 2025 11:30:21 +0000
ROA not after: Sun 13 Jul 2025 11:30:21 +0000
asID: 36352
IP address blocks: 172.94.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 13:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:85:d7:66:ff:93:b7:ca:42:1e:a2:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 14 11:30:21 2025 GMT
Not After : Jul 13 11:30:21 2025 GMT
Subject: CN=a69aad68-f99a-4d02-95f7-61858bf3a835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:3d:67:d2:cf:16:84:e7:26:93:d2:54:44:
50:40:82:af:86:3c:d4:40:22:f8:cf:23:a5:04:74:
33:46:5d:7f:5f:d7:6e:4d:93:18:dc:86:77:9d:9a:
32:c0:c2:5b:31:cc:52:42:86:cf:3e:f8:3a:09:b1:
a6:26:1f:7f:6c:2f:b5:7f:15:62:e0:07:6f:4d:ad:
fb:83:02:ea:1f:4f:43:18:da:27:d6:45:bb:99:52:
3d:f0:32:36:23:e2:13:83:8f:bd:a6:2a:7c:75:c7:
48:a2:84:5d:0f:bd:35:66:18:8f:f1:99:52:99:18:
75:09:a2:5b:cc:37:1d:fc:c4:98:13:1b:0a:f2:bc:
03:13:d1:5e:8c:d9:c5:a7:28:39:47:cd:97:61:63:
92:77:43:b0:e9:a0:14:fd:37:fe:ae:51:4a:d8:c7:
d4:1a:2b:b6:2e:9f:90:7e:5d:8a:a3:c3:e4:e9:80:
ef:f7:ef:ee:8d:10:49:26:aa:97:cc:72:64:f2:84:
d9:f1:d5:38:7f:f5:dc:fc:a1:38:bf:8c:19:71:f0:
92:57:b9:8a:4d:5d:45:b5:f9:17:16:a7:3b:0a:41:
6e:01:ff:5f:19:e4:31:63:cf:54:5a:34:37:75:4a:
52:13:3c:28:0d:42:c8:3c:da:a0:69:15:c5:64:eb:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:7D:73:8F:48:62:88:0D:17:56:25:58:34:14:35:51:34:38:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab21e039-d524-38b2-96fc-d1258c34a6e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:32:db:05:be:db:47:6e:72:fa:76:8b:4f:af:8e:32:17:79:
80:2b:a6:53:0e:08:6b:19:73:75:aa:e6:ff:44:b0:72:6b:4e:
3e:79:1c:14:e7:2f:65:cb:96:64:4a:18:96:d9:29:0c:6a:c0:
b3:dd:ae:9d:60:70:ab:d1:44:1e:0f:96:f6:62:0f:d4:5d:a8:
07:74:e9:85:f4:f0:e4:68:14:4d:50:f2:56:dd:ac:00:07:1c:
54:ef:96:97:83:65:88:1e:5a:72:3f:aa:dc:c1:46:8e:f6:f1:
fc:6c:d4:80:f4:04:b9:ed:34:65:61:d3:f9:c4:bf:88:9e:a9:
f8:d0:9e:a4:7d:bb:3f:89:d3:46:d8:63:7a:9d:7e:c3:73:cf:
34:5e:74:78:63:43:5f:85:bc:ce:e8:e1:ac:79:12:1f:17:82:
e7:6b:81:ec:65:ec:50:67:70:ea:67:59:cf:60:21:fc:5e:0b:
63:e7:ac:75:00:d2:a1:54:be:8a:36:2f:ba:68:0c:03:10:d6:
a3:87:cd:78:c1:aa:a2:7b:8e:f6:9a:ed:d1:ad:b0:63:92:92:
fb:9b:32:81:b7:37:d1:43:11:c5:5d:68:7f:3e:86:63:f7:d6:
e6:c6:35:43:bd:4e:67:dd:f3:6c:84:24:69:e6:72:99:c2:be:
78:12:51:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmF12b/k7fKQh6iOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDQxNDExMzAyMVoXDTI1MDcxMzExMzAyMVowLzEtMCsGA1UEAxMk
YTY5YWFkNjgtZjk5YS00ZDAyLTk1ZjctNjE4NThiZjNhODM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eg9Z9LPFoTnJpPSVERQQIKvhjzUQCL4zyOl
BHQzRl1/X9duTZMY3IZ3nZoywMJbMcxSQobPPvg6CbGmJh9/bC+1fxVi4AdvTa37
gwLqH09DGNon1kW7mVI98DI2I+ITg4+9pip8dcdIooRdD701ZhiP8ZlSmRh1CaJb
zDcd/MSYExsK8rwDE9FejNnFpyg5R82XYWOSd0Ow6aAU/Tf+rlFK2MfUGiu2Lp+Q
fl2Ko8Pk6YDv9+/ujRBJJqqXzHJk8oTZ8dU4f/Xc/KE4v4wZcfCSV7mKTV1FtfkX
Fqc7CkFuAf9fGeQxY89UWjQ3dUpSEzwoDULIPNqgaRXFZOuSPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5sfXOPSGKIDRdWJVg0FDVRNDjrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWIyMWUwMzktZDUyNC0z
OGIyLTk2ZmMtZDEyNThjMzRhNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYy2wW+20ducvp2i0+vjjIXeYArplMOCGsZc3Wq5v9EsHJrTj55HBTn
L2XLlmRKGJbZKQxqwLPdrp1gcKvRRB4PlvZiD9RdqAd06YX08ORoFE1Q8lbdrAAH
HFTvlpeDZYgeWnI/qtzBRo728fxs1ID0BLntNGVh0/nEv4ieqfjQnqR9uz+J00bY
Y3qdfsNzzzRedHhjQ1+FvM7o4ax5Eh8Xgudrgexl7FBncOpnWc9gIfxeC2PnrHUA
0qFUvoo2L7poDAMQ1qOHzXjBqqJ7jvaa7dGtsGOSkvubMoG3N9FDEcVdaH8+hmP3
1ubGNUO9Tmfd82yEJGnmcpnCvngSUdo=
-----END CERTIFICATE-----
Generated at Sun May 11 21:03:44 2025 by rpki-client