Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d2a2d24-fc0d-3342-91ac-27058bcbcae5.roa
File: 9d2a2d24-fc0d-3342-91ac-27058bcbcae5.roa (raw, json)
Hash identifier: /i90YNWWHw2a+4hzNAT+QW9PK/pJ8ihe5xvxBz5UuKQ=
Subject key identifier: EA:6B:31:3C:B2:E7:E8:B1:6D:C0:1E:85:80:E8:33:05:B9:C6:D9:23
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A96FDE73615E518E69EEED380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d2a2d24-fc0d-3342-91ac-27058bcbcae5.roa
Signing time: Mon 21 Jul 2025 07:43:36 +0000
ROA not before: Mon 21 Jul 2025 07:43:36 +0000
ROA not after: Sun 19 Oct 2025 07:43:36 +0000
asID: 12687
IP address blocks: 172.94.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Jul 2025 06:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:96:fd:e7:36:15:e5:18:e6:9e:ee:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 21 07:43:36 2025 GMT
Not After : Oct 19 07:43:36 2025 GMT
Subject: CN=250be090-5a22-4b70-9be4-3a0c0072f441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:3e:92:9b:a7:85:66:0f:0f:84:49:f1:c1:
9e:bc:5a:0a:10:78:30:91:85:c1:57:7f:fb:42:56:
e6:f3:59:31:0f:54:1a:e5:2e:6a:27:24:6a:23:1e:
85:04:b8:4b:e7:75:03:41:a3:56:84:c7:c7:fb:93:
86:dc:46:97:2b:2d:27:98:1b:ea:00:f4:b0:5d:99:
23:b7:99:5f:9d:be:22:99:1b:d5:c7:3e:43:3f:05:
c2:e3:c6:8c:38:63:f8:9b:2a:74:8d:ad:bd:f4:9a:
fd:c8:57:c7:0c:14:be:18:48:68:88:a3:e5:3a:d5:
44:13:ea:d2:9d:28:a4:24:4c:37:35:d2:e3:5f:f5:
44:63:41:3d:29:c3:48:5a:a7:dd:0d:6e:44:64:b8:
81:a1:b2:ab:e5:fc:60:fb:03:65:d3:0b:9e:ca:7a:
04:1d:d9:e1:59:01:6a:bc:81:1b:05:75:bd:7f:56:
69:8b:fa:be:01:a2:ea:73:10:9b:b7:cd:e3:80:25:
31:80:47:b2:d9:8c:e2:4f:e7:d7:38:44:81:db:37:
6b:ec:13:48:ed:86:be:ea:f9:ac:10:09:3a:fc:88:
63:a2:9b:48:c8:a7:fa:9a:84:93:8f:73:76:17:6c:
e1:0b:6d:eb:c7:db:96:e9:35:c1:e0:a8:ef:0f:e8:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:31:3C:B2:E7:E8:B1:6D:C0:1E:85:80:E8:33:05:B9:C6:D9:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d2a2d24-fc0d-3342-91ac-27058bcbcae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f9:6e:77:3b:62:1b:39:82:bf:86:c3:c4:ff:0a:c1:0d:76:
76:8c:c9:d2:f0:3f:f4:10:05:78:22:44:bf:54:a9:28:55:c7:
e2:0d:6c:f6:e4:77:f8:36:25:a5:e3:a1:9a:05:6b:71:04:ed:
b4:07:28:4b:be:f7:a2:fc:e2:88:08:40:ba:e8:ae:93:1d:c4:
9f:b3:bb:c9:17:e9:53:f5:85:d6:96:83:b2:46:ca:58:2f:6a:
6c:9f:57:66:7a:60:72:57:eb:73:ea:f3:cb:b7:93:a8:1a:2a:
c0:4d:eb:31:5d:f0:24:3f:b6:7e:39:d2:9c:07:88:cd:e1:72:
a9:7d:c7:98:c7:bd:c8:4b:3e:3a:4a:87:d5:60:c0:44:a6:5a:
43:3e:61:0d:65:78:50:6f:f4:f7:28:7b:de:0b:83:b5:77:cd:
4e:56:50:04:eb:69:c1:af:d0:ed:98:37:57:29:cd:0f:5a:bb:
a4:57:31:ef:32:5f:b6:de:4e:e9:a9:eb:d2:31:ee:d9:ff:5f:
10:9f:05:3e:16:24:7c:ff:d4:e2:78:5e:5a:a9:82:54:61:81:
0f:ac:47:ae:2a:57:e7:3f:90:1a:95:0c:66:99:38:91:64:83:
79:69:f0:e9:0b:fa:88:ee:0f:6a:e9:79:4b:5d:b9:cf:f6:38:
93:d1:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:40:59 2025 by rpki-client