Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc5ec17c-975f-34a2-889d-263a95c63fbb.roa
File: dc5ec17c-975f-34a2-889d-263a95c63fbb.roa (raw, json)
Hash identifier: hKaiUSxUp/Q19R4Jayb16BOZCmiQnMhSMZ7aPxj1I9Q=
Subject key identifier: 25:1F:D0:93:85:96:84:3B:C4:4C:67:80:81:DD:CC:12:B8:37:0E:ED
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849ACFE04C2738835D0EC4D9400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc5ec17c-975f-34a2-889d-263a95c63fbb.roa
Signing time: Mon 28 Apr 2025 12:04:41 +0000
ROA not before: Mon 28 Apr 2025 12:04:41 +0000
ROA not after: Sun 27 Jul 2025 12:04:41 +0000
asID: 329007
IP address blocks: 172.111.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 09:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ac:fe:04:c2:73:88:35:d0:ec:4d:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 28 12:04:41 2025 GMT
Not After : Jul 27 12:04:41 2025 GMT
Subject: CN=152f7018-b8d3-4dbe-957c-703b00c35fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:c3:0b:3f:02:70:97:01:9a:3e:82:9b:7a:
c0:5c:1d:80:75:f2:0b:0a:cd:4b:df:8c:ed:90:c2:
45:a7:cb:c9:8f:34:47:aa:c1:51:8b:39:76:b0:28:
51:72:ee:d5:fc:7e:bd:70:a7:63:50:cb:fa:c8:23:
65:ae:cf:58:00:2a:3a:a3:98:2e:21:18:11:eb:e3:
cf:1a:70:21:40:46:14:e3:cf:6d:e3:f5:e1:ca:a3:
17:2c:20:ef:c3:48:29:d2:fd:73:c1:9b:aa:6a:8f:
5d:44:ec:96:40:19:56:c4:0b:de:aa:7d:7f:b4:a7:
a0:2a:11:8c:23:97:26:06:2a:02:7d:4b:d6:64:93:
e1:b1:66:3a:b4:f9:54:80:6f:73:ba:96:ae:f2:41:
60:41:6d:af:e7:a9:55:05:fe:d4:74:a5:1a:e8:76:
2a:f3:9d:6e:dd:6f:70:74:8d:45:6e:77:7b:0c:86:
69:9e:24:52:fc:e8:23:97:b3:d3:27:18:d5:a0:7a:
37:09:1a:44:2b:39:ad:ef:8a:24:a0:1e:e1:6c:97:
04:8b:4a:0e:23:da:06:96:f5:28:12:8b:9d:b0:83:
45:b7:02:f6:7c:82:87:af:5f:da:1a:a4:60:78:ff:
b3:5c:ec:98:4b:ae:d0:bc:f2:ca:d1:f8:ca:f7:cd:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1F:D0:93:85:96:84:3B:C4:4C:67:80:81:DD:CC:12:B8:37:0E:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc5ec17c-975f-34a2-889d-263a95c63fbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:6f:62:88:22:a4:c7:cc:ba:34:90:e7:8b:d1:73:46:72:68:
34:9c:b4:40:bd:b4:70:5e:c5:76:36:48:33:4d:9b:9f:54:29:
1d:5a:c9:65:3b:05:4b:0a:da:f5:73:9a:5b:b7:15:3f:9c:c5:
57:5f:ff:f3:b4:78:20:da:8f:50:a0:a6:36:27:c2:5b:0a:5a:
ce:c6:32:f8:c4:b9:28:a8:21:74:23:fc:25:93:b8:9a:0c:4b:
eb:31:c1:1d:aa:b5:f4:2a:0e:7c:77:ce:00:a6:bc:6a:45:59:
9e:32:ce:cb:1b:da:f9:0a:ef:68:c6:54:dc:54:0a:d2:f7:dd:
96:a9:84:4f:66:c3:3f:09:70:c3:e7:e3:c7:86:8c:41:37:c1:
9d:43:f7:ae:78:86:c7:d9:d7:69:46:e8:e9:ac:fa:8d:73:02:
21:20:9c:cd:01:93:b6:bc:e5:31:79:0c:5a:30:cb:bc:1f:97:
b1:c9:59:5b:ea:f1:04:52:44:d6:9e:af:84:13:a0:e2:76:27:
4d:40:b1:bf:e4:38:32:22:9b:0d:6e:20:0a:87:be:2d:23:34:
96:e8:f0:71:63:c1:f1:66:be:95:b6:c6:c6:14:6d:74:24:a8:
17:68:1f:ea:10:2f:66:a2:a7:95:ac:12:c1:9f:ac:44:30:10:
95:1a:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:51:10 2025 by rpki-client