Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e10bc08a-c3f2-3279-9bc7-2f9b732e88c5.roa
File: e10bc08a-c3f2-3279-9bc7-2f9b732e88c5.roa (raw, json)
Hash identifier: 8s1AoWNNE+E5AAa+T3JFOvnMR6n3Q2YgvJONOAVQRnQ=
Subject key identifier: 3C:B6:8E:C5:20:C3:74:F5:6C:F5:6E:05:81:40:6F:A9:36:C9:56:BC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B5260E398FCF99DA042C1E40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e10bc08a-c3f2-3279-9bc7-2f9b732e88c5.roa
Signing time: Thu 01 May 2025 10:11:49 +0000
ROA not before: Thu 01 May 2025 10:11:49 +0000
ROA not after: Wed 30 Jul 2025 10:11:49 +0000
asID: 149208
IP address blocks: 172.94.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 06:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:26:0e:39:8f:cf:99:da:04:2c:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 1 10:11:49 2025 GMT
Not After : Jul 30 10:11:49 2025 GMT
Subject: CN=0c2aeab3-97f7-4777-89e6-d8558e2e8cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:a8:8d:89:ed:2e:8b:57:5f:9c:7e:ed:ad:
de:dd:6d:d2:d0:95:3d:85:9c:80:7b:27:9b:8b:b6:
fb:8f:20:2a:31:aa:ba:76:e6:26:fe:17:ca:42:9b:
bf:b1:5f:f4:ae:82:a4:29:87:73:03:d5:37:d3:0f:
99:e9:49:f9:d9:d9:6d:6e:57:40:35:1f:8e:02:84:
2a:9d:0c:3f:eb:2b:3c:20:64:9b:65:c7:a1:4c:f3:
b1:d7:0a:df:84:9d:28:a5:d9:48:68:94:f3:10:32:
36:e1:b7:7e:36:0b:e2:f6:70:9e:b4:a9:a1:1b:e4:
05:21:0f:26:d0:92:2b:5d:a8:21:91:2c:bf:93:5e:
58:60:77:f9:59:a3:df:8a:53:34:ba:8b:02:2a:5b:
f8:1d:87:d7:07:9a:d6:b8:17:ad:81:c1:0b:b2:b3:
1a:15:db:2c:23:8a:c1:90:36:06:39:27:59:5a:a0:
da:70:f4:f0:f3:5a:26:3f:06:09:4d:d5:54:e1:c1:
12:02:06:08:38:09:6b:77:0a:a5:90:a9:e0:67:9f:
7f:cb:d4:6f:50:7f:27:25:c7:db:b4:c0:e1:f6:69:
dc:ea:19:7d:ea:b4:6f:2a:3e:bd:ee:08:0f:c2:09:
ec:e2:f8:97:73:0e:04:53:28:07:0b:d2:c8:cf:44:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B6:8E:C5:20:C3:74:F5:6C:F5:6E:05:81:40:6F:A9:36:C9:56:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e10bc08a-c3f2-3279-9bc7-2f9b732e88c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:3b:9f:df:8c:13:b9:d0:5a:8d:74:9c:87:6f:a1:3c:ad:8c:
bc:42:5d:56:36:11:7c:61:a0:d8:ad:a7:dc:a6:3f:5d:ff:87:
46:2e:79:65:9e:ec:02:8b:27:06:1c:84:b5:c6:4d:3e:a5:bf:
81:05:2a:5c:9b:a0:86:2d:a5:01:07:7d:ad:d0:fd:45:09:39:
a5:a3:2e:69:d7:5e:cb:2f:7e:13:85:94:9f:52:3e:f7:96:8f:
3b:87:54:f9:45:3e:8e:c6:af:77:b0:3b:ce:9a:08:6a:d8:b4:
77:d3:f7:e2:6c:a1:c3:ee:86:67:48:33:43:3c:2a:26:6b:65:
1e:c4:50:32:c9:d2:67:b3:8c:5a:e1:88:f9:70:d2:24:fa:32:
0f:43:93:e0:4f:53:d3:07:39:65:54:7c:25:62:53:be:bb:84:
d4:83:83:4d:7f:64:c9:5a:d7:4a:d0:20:f6:08:53:89:40:d6:
4c:25:ad:e9:bb:64:a9:db:39:ba:37:7a:91:9d:78:5e:05:ac:
12:73:8a:34:bb:b2:4d:d9:45:7c:d0:d2:ba:15:55:16:ce:8a:
a0:6a:44:7f:92:3c:eb:ab:52:97:d8:66:27:f2:61:36:a0:da:
50:81:5b:89:4f:ed:6a:c8:34:ca:6a:b5:f6:60:39:81:c0:16:
0e:b7:ec:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1Jg45j8+Z2gQsHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDUwMTEwMTE0OVoXDTI1MDczMDEwMTE0OVowLzEtMCsGA1UEAxMk
MGMyYWVhYjMtOTdmNy00Nzc3LTg5ZTYtZDg1NThlMmU4Y2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg6ojYntLotXX5x+7a3e3W3S0JU9hZyAeyeb
i7b7jyAqMaq6duYm/hfKQpu/sV/0roKkKYdzA9U30w+Z6Un52dltbldANR+OAoQq
nQw/6ys8IGSbZcehTPOx1wrfhJ0opdlIaJTzEDI24bd+Ngvi9nCetKmhG+QFIQ8m
0JIrXaghkSy/k15YYHf5WaPfilM0uosCKlv4HYfXB5rWuBetgcELsrMaFdssI4rB
kDYGOSdZWqDacPTw81omPwYJTdVU4cESAgYIOAlrdwqlkKngZ59/y9RvUH8nJcfb
tMDh9mnc6hl96rRvKj697ggPwgns4viXcw4EUygHC9LIz0TyxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDy2jsUgw3T1bPVuBYFAb6k2yVa8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTEwYmMwOGEtYzNmMi0z
Mjc5LTliYzctMmY5YjczMmU4OGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD07n9+ME7nQWo10nIdvoTytjLxCXVY2EXxhoNitp9ymP13/h0YueWWe
7AKLJwYchLXGTT6lv4EFKlyboIYtpQEHfa3Q/UUJOaWjLmnXXssvfhOFlJ9SPveW
jzuHVPlFPo7Gr3ewO86aCGrYtHfT9+JsocPuhmdIM0M8KiZrZR7EUDLJ0mezjFrh
iPlw0iT6Mg9Dk+BPU9MHOWVUfCViU767hNSDg01/ZMla10rQIPYIU4lA1kwlrem7
ZKnbObo3epGdeF4FrBJzijS7sk3ZRXzQ0roVVRbOiqBqRH+SPOurUpfYZifyYTag
2lCBW4lP7WrINMpqtfZgOYHAFg637PE=
-----END CERTIFICATE-----
Generated at Mon May 12 02:17:02 2025 by rpki-client