Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53bf5587-dfc1-366a-baf3-1c51fd961fcc.roa
File: 53bf5587-dfc1-366a-baf3-1c51fd961fcc.roa (raw, json)
Hash identifier: PbOKebTW5E7Ncn6TgSHhOSVl9hzdMAly06kSBGI6tzY=
Subject key identifier: A3:E3:28:F9:37:F5:40:E0:00:94:48:8A:20:41:40:2E:3F:4D:0A:90
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A75ABD53EEEB0D8DA060F0F00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53bf5587-dfc1-366a-baf3-1c51fd961fcc.roa
Signing time: Wed 09 Jul 2025 09:16:34 +0000
ROA not before: Wed 09 Jul 2025 09:16:34 +0000
ROA not after: Tue 07 Oct 2025 09:16:34 +0000
asID: 329007
IP address blocks: 104.250.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 11:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:75:ab:d5:3e:ee:b0:d8:da:06:0f:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 9 09:16:34 2025 GMT
Not After : Oct 7 09:16:34 2025 GMT
Subject: CN=ecb9fa62-ddfe-4778-bcca-542dd4247ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:5d:c3:2e:d8:49:26:97:c7:5a:61:f8:a8:
fc:26:b9:56:91:8a:e8:fa:3d:0d:6d:1f:08:96:9e:
56:a4:9c:49:7d:f1:5e:18:ad:0a:17:55:61:b1:ad:
f7:74:9c:b7:b2:7a:2f:f3:2b:c2:d1:ae:f1:b0:5d:
5b:c7:c5:77:6e:f2:60:37:eb:9c:46:03:75:9f:e9:
b2:44:60:ae:95:f1:a6:15:3c:52:b8:1f:9f:5b:30:
4d:58:33:89:44:f7:80:ee:61:b1:20:ab:51:f0:c0:
ba:8c:7f:0e:df:45:1e:84:3c:60:3a:98:63:2e:69:
7f:4c:09:80:de:52:79:c9:52:73:61:13:31:e0:8d:
cf:67:28:8f:06:7e:4e:21:61:1b:95:94:86:9e:8b:
3c:9a:6e:71:c3:e3:e9:fb:91:51:b8:ed:04:82:10:
9d:cd:c8:7d:9f:59:b8:55:53:4e:24:0f:d8:34:1a:
93:7d:66:d8:c5:03:9c:aa:b8:c7:b3:2a:0c:2a:94:
a6:3d:bc:7d:4a:b6:66:39:c6:74:d3:21:36:0a:59:
5d:1e:10:77:6c:a9:f0:eb:81:52:0a:d2:a6:83:83:
85:9c:57:cf:9e:1f:88:21:74:9d:ae:d8:61:0f:3e:
11:94:43:10:0b:d0:37:a3:de:b1:32:f7:30:23:a3:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:28:F9:37:F5:40:E0:00:94:48:8A:20:41:40:2E:3F:4D:0A:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53bf5587-dfc1-366a-baf3-1c51fd961fcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:91:73:09:db:8b:d8:fe:4d:d3:74:9e:1d:ea:0f:fe:cd:cd:
f1:93:09:43:ef:3b:23:37:19:62:f8:4b:cc:36:50:ea:e0:5b:
13:d1:d1:29:eb:7b:26:0e:24:e0:52:90:ed:e6:fa:74:29:fe:
42:b2:cd:1e:cd:67:8d:11:0a:37:27:ce:46:8e:eb:f9:bb:0f:
f3:ce:fa:0d:97:68:72:9d:15:74:36:ce:c7:98:e6:ac:ca:65:
72:20:f9:ca:1d:19:2e:e4:93:e9:9f:3f:45:5a:fe:53:80:f9:
c4:ae:19:79:7a:e3:5e:42:e9:c8:65:95:43:d7:a4:02:b6:6e:
89:63:21:04:b9:29:b2:fa:e5:2a:0a:82:f2:7b:a1:e6:cb:d6:
36:93:82:15:76:36:12:96:01:80:e2:a3:bc:52:b6:af:90:aa:
0b:23:a6:f4:48:b6:25:f0:df:af:4a:24:d0:e0:46:2c:90:35:
d3:79:d2:e6:66:b4:63:d1:e9:27:b8:13:ec:f3:04:f7:c9:e9:
fa:8d:d3:d3:c7:86:6f:63:68:14:85:0e:f7:16:63:14:7d:4a:
24:79:48:5c:8c:2d:4d:0f:8b:5b:ab:42:a2:a7:17:e0:ac:6b:
87:dd:9b:03:d0:5e:8d:02:55:f3:b3:55:37:83:73:35:41:68:
4f:a5:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:55 2025 by rpki-client