Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfda959a-6495-30b2-83e0-2002ab786d6b.roa
File: cfda959a-6495-30b2-83e0-2002ab786d6b.roa (raw, json)
Hash identifier: 66gmW8+vMGrdq5lnJJ6rBgb/R+DonDkQNOrVhBvrUP8=
Subject key identifier: DF:16:A6:D6:B6:F9:05:F2:1F:12:FB:D7:3E:D3:84:64:C1:9E:3D:00
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858499956C1DF06A569ED97183780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfda959a-6495-30b2-83e0-2002ab786d6b.roa
Signing time: Mon 21 Apr 2025 11:07:18 +0000
ROA not before: Mon 21 Apr 2025 11:07:18 +0000
ROA not after: Sun 20 Jul 2025 11:07:18 +0000
asID: 213990
IP address blocks: 172.111.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 08:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:99:56:c1:df:06:a5:69:ed:97:18:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 21 11:07:18 2025 GMT
Not After : Jul 20 11:07:18 2025 GMT
Subject: CN=0019b81b-f49f-418e-8045-279b3f17c755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:15:35:24:54:27:5d:0b:58:45:a8:38:58:
76:1e:a4:b0:c0:d3:b4:30:c3:8a:84:b8:5a:de:ce:
f7:a1:7c:47:7a:ab:ad:69:73:06:e6:94:fb:17:65:
6f:ff:bd:c5:c7:8b:15:77:ad:3f:35:3f:02:18:22:
7d:ac:8c:21:f0:95:78:2d:84:66:69:aa:c9:84:49:
7e:be:8f:72:2a:e7:af:a7:5b:7b:ad:e7:05:96:56:
9f:0f:18:98:c2:4d:2b:ad:dd:cb:46:34:ff:36:d2:
e6:1d:97:76:51:71:dc:d7:fc:ac:93:e6:82:2a:98:
93:32:a6:8c:59:5a:c1:f1:cd:35:94:9c:e9:bf:53:
5e:a9:25:57:1f:1f:98:4e:9d:28:06:87:3a:c9:2b:
fd:64:31:d3:2b:f7:5b:e0:98:46:d7:2c:ce:54:54:
68:d6:eb:8b:b6:e5:8d:e7:83:dd:1b:f4:f1:e5:1f:
5c:46:76:25:49:75:d1:13:cd:4e:98:80:d7:49:57:
4d:f4:68:b1:39:22:27:73:60:1b:6d:1c:01:c8:64:
cc:1e:ee:3b:32:c6:84:3a:41:d0:49:92:14:b8:49:
d6:b5:3b:98:51:16:9a:2e:51:49:a9:4e:32:d2:9b:
81:56:86:04:72:b5:58:ef:d4:0b:54:c7:b3:74:6e:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:A6:D6:B6:F9:05:F2:1F:12:FB:D7:3E:D3:84:64:C1:9E:3D:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfda959a-6495-30b2-83e0-2002ab786d6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:53:8e:7e:c4:ff:32:7e:54:52:4a:f0:e7:67:11:03:85:b4:
2e:30:e7:ce:e7:c7:bf:16:8e:d0:19:41:bf:c6:92:ee:4e:1a:
99:b9:d7:ed:a8:07:82:a5:12:da:32:f7:b8:ba:4c:a0:4f:6a:
90:64:fb:0e:58:8f:e2:6e:42:28:67:1b:6f:af:0b:fe:00:a5:
14:ed:45:c8:76:1c:4b:88:29:48:ca:b0:95:8b:ff:4d:e0:72:
4c:d9:94:01:75:ae:79:04:58:04:98:1f:38:b3:c1:92:35:cb:
1f:14:1c:66:aa:76:61:19:54:93:38:4f:11:5d:0d:ca:a3:53:
3c:72:2e:50:e2:62:ac:b1:77:33:22:c5:7a:12:c4:d0:54:43:
72:a4:96:9d:fe:87:78:45:96:01:89:12:f7:95:af:fc:be:c5:
35:23:79:20:27:92:4a:86:48:5a:ba:04:24:fb:0e:6c:d9:92:
dd:c0:1f:a7:d6:ac:f3:02:1c:08:c5:12:94:fc:d9:5d:16:8f:
aa:72:ec:92:0d:1b:97:40:69:8d:d9:4f:59:06:84:00:21:88:
f7:16:97:0b:db:a2:44:94:2e:45:c9:17:97:e4:2d:33:fc:09:
d1:dc:e8:f6:e1:a5:09:64:47:63:c6:65:1f:43:fe:00:09:78:
11:7a:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:28:15 2025 by rpki-client