Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c4489891-2d96-3048-8a6b-7fc39326b3a1.roa
File: c4489891-2d96-3048-8a6b-7fc39326b3a1.roa (raw, json)
Hash identifier: U0tVl5STJTo++JhZgzjZ5Az0wxYq+wVQ7ylRPRZGEvE=
Subject key identifier: 83:37:1D:18:03:CF:A8:71:F6:F9:F0:AD:84:4F:DF:FD:7E:1B:49:B9
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849AFBD75ACD64F0ACC203CC7C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c4489891-2d96-3048-8a6b-7fc39326b3a1.roa
Signing time: Tue 29 Apr 2025 11:42:01 +0000
ROA not before: Tue 29 Apr 2025 11:42:01 +0000
ROA not after: Mon 28 Jul 2025 11:42:01 +0000
asID: 53356
IP address blocks: 172.94.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 06:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:af:bd:75:ac:d6:4f:0a:cc:20:3c:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 29 11:42:01 2025 GMT
Not After : Jul 28 11:42:01 2025 GMT
Subject: CN=18e913bc-fc5d-4466-89fb-e373aafc6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:a7:5c:9c:0e:d3:72:c5:48:41:17:2b:07:
01:7b:22:6f:c4:bf:34:87:af:64:f2:06:80:8e:36:
ae:6d:8d:a9:75:b9:05:1e:26:01:85:9c:ab:bc:a5:
d9:88:1a:ff:fc:ca:08:3b:5d:0d:2e:10:42:74:6b:
5a:b5:f0:a5:b9:29:77:4b:3a:5c:a3:3a:fa:8a:f9:
06:8a:4f:b7:d5:16:03:56:8b:70:a3:53:1f:d5:b1:
a1:a0:3e:6e:4f:b1:51:5c:05:d8:63:71:ee:56:83:
7e:bc:1e:90:2d:5c:9a:9b:94:b2:38:5c:81:93:57:
ab:64:03:11:ae:bd:82:1b:27:81:fa:b8:2e:fb:f5:
64:7c:b4:be:cd:01:7c:21:d8:12:75:d3:68:79:87:
ca:fd:d4:6b:89:11:32:33:79:80:07:b7:21:58:37:
1b:1f:ed:e8:fd:5f:dc:dd:6e:87:dd:f8:e2:a1:2d:
18:d8:fc:76:c4:ce:6d:70:66:ad:82:6d:a4:e8:87:
90:21:ba:bf:80:85:59:02:d4:64:76:e4:71:d1:54:
8d:5f:fd:af:16:8f:0e:63:71:5e:c3:6b:e5:25:ab:
cf:b4:b0:0c:1e:50:e4:af:da:eb:c4:f6:af:28:f3:
9e:09:45:be:03:e8:79:c2:8e:3b:0d:a8:f9:16:6c:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:1D:18:03:CF:A8:71:F6:F9:F0:AD:84:4F:DF:FD:7E:1B:49:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c4489891-2d96-3048-8a6b-7fc39326b3a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ce:05:5d:97:81:a8:19:90:ad:12:4b:39:48:51:f6:f8:04:
77:cf:ff:e4:94:39:d4:26:68:c9:25:e8:a2:76:e7:9e:ad:bb:
13:5f:74:64:b7:4b:cd:c2:25:39:7c:04:c2:06:90:0b:bf:9a:
ba:08:53:a2:6a:33:ce:86:f0:3c:5b:71:8a:c3:35:51:86:ef:
fc:49:58:23:f0:ca:13:0e:b4:70:88:79:4c:f0:4f:20:e2:87:
05:04:53:c2:d4:45:cf:8a:22:be:31:2d:69:0d:df:15:24:bc:
da:61:39:48:d9:fd:b3:81:9f:7a:7a:06:23:ad:fc:a0:ba:e0:
13:f3:da:79:ae:6a:01:5a:d8:8e:61:13:53:bc:a4:9b:df:f8:
1a:34:37:cd:ef:44:a7:1d:01:fc:db:68:77:9d:9a:1e:a7:59:
16:15:6c:8c:7b:93:4f:32:e0:4c:b5:47:1c:c5:2d:cb:8d:83:
6b:cf:47:d6:9b:44:64:9e:e4:2a:70:0d:1a:79:24:27:a3:ff:
53:e0:08:d2:4e:b0:fe:8f:80:dc:78:88:d3:d3:d7:0d:05:af:
55:f8:f9:32:a5:d2:f9:c2:65:16:b0:d8:fa:af:54:7e:0f:22:
55:9b:0f:01:c9:2c:fb:85:a7:03:76:15:d0:cb:c1:01:74:5b:
11:89:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:19:25 2025 by rpki-client