Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0299041d-6eb6-3d41-a336-fcaaf84ae1e6.roa
File: 0299041d-6eb6-3d41-a336-fcaaf84ae1e6.roa (raw, json)
Hash identifier: Yu7NqQxnivBnttEhOqUUg0BvYrhNvK0izISjcc1Q7SY=
Subject key identifier: 2B:FA:68:3B:87:AD:53:DE:E2:A6:00:97:99:E1:0D:71:91:EC:FE:E7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A96FD3560F646EFC65FE6BE00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0299041d-6eb6-3d41-a336-fcaaf84ae1e6.roa
Signing time: Mon 21 Jul 2025 07:42:12 +0000
ROA not before: Mon 21 Jul 2025 07:42:12 +0000
ROA not after: Sun 19 Oct 2025 07:42:12 +0000
asID: 12687
IP address blocks: 172.94.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Jul 2025 06:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:96:fd:35:60:f6:46:ef:c6:5f:e6:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 21 07:42:12 2025 GMT
Not After : Oct 19 07:42:12 2025 GMT
Subject: CN=2bafd245-980c-4b13-908e-182051016276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:48:51:fb:4f:0c:f1:3f:6d:63:e5:58:11:
b0:59:d7:89:1f:c0:12:7d:e8:bd:d4:67:58:5a:b8:
07:26:94:ba:78:79:af:8e:c6:a0:67:f2:27:9a:35:
84:dd:7f:23:3f:7c:c3:a4:3e:c3:8d:ba:e0:58:f0:
85:bd:d7:b9:f3:99:32:d3:e9:9b:53:ed:6d:20:da:
c2:3f:24:8b:3e:98:e3:b1:9c:e5:27:9d:a5:ac:3d:
05:c9:6f:2d:81:9f:4c:ba:45:38:52:31:6e:ab:41:
f3:0d:81:bd:73:cd:1d:01:45:2f:a4:28:fc:2d:be:
95:8b:bf:50:86:21:37:68:60:31:5e:c2:bc:9f:de:
8d:bc:f0:ae:6a:9f:e4:50:f8:b1:1f:79:6a:29:8a:
bd:cd:4e:c1:64:0f:e1:52:fc:34:32:81:f4:cd:2a:
a0:dd:e8:09:2d:0c:e7:6b:c8:da:b8:c2:ec:f9:e5:
9f:34:00:70:d3:de:f5:34:97:61:b7:17:e7:64:d2:
c3:84:50:f6:aa:0c:4c:92:9d:cc:c6:59:82:de:32:
d7:95:a2:97:af:46:b7:71:47:24:d5:87:3e:d2:10:
a8:ab:73:cb:28:d3:a9:fa:f5:e8:21:2a:6c:2a:db:
4e:74:3d:76:b9:4d:85:07:81:fc:2f:09:d0:d8:fa:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FA:68:3B:87:AD:53:DE:E2:A6:00:97:99:E1:0D:71:91:EC:FE:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0299041d-6eb6-3d41-a336-fcaaf84ae1e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:7e:a7:d6:b6:93:a6:57:d1:67:65:9c:13:05:f9:16:ba:37:
32:e1:1c:49:61:5f:f7:55:fe:ac:6a:52:7c:ea:81:35:02:83:
72:d5:0e:27:e7:6e:45:1b:2b:76:fa:5d:2a:ac:69:ad:61:a6:
51:bd:e0:b3:21:a1:a4:00:82:14:35:18:a8:07:74:57:25:10:
fe:40:8b:ff:41:20:b2:6d:42:b3:7a:a3:d4:2e:c4:79:0a:aa:
70:c1:d1:77:71:d7:ba:34:47:5e:53:b9:31:6c:12:5b:d6:03:
77:81:15:82:e0:55:17:98:26:00:69:c8:84:ac:7e:69:6c:4b:
86:80:19:cd:ec:d1:e2:21:1f:d2:44:2f:dd:f5:b2:ec:8b:07:
c9:1a:2d:bb:73:33:15:da:9f:05:b3:0e:41:01:ae:b8:c7:2e:
34:6f:da:4a:20:07:2a:eb:00:7a:13:c8:d4:11:d2:e4:83:2b:
fc:03:1a:8b:dd:b0:7b:e5:b1:4c:20:89:28:c7:47:18:fc:bd:
54:26:33:82:29:20:5a:d8:4c:f2:0b:e3:70:fc:c2:c9:99:ae:
13:b1:05:57:60:59:02:60:f4:15:63:ee:92:ab:10:8e:55:88:
20:60:be:e8:d1:7f:a8:29:73:45:58:96:03:3b:5e:cc:2c:f1:
3a:a7:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:20:13 2025 by rpki-client