Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1868dac8-6ccf-3345-90de-dd909a271d02.roa
File: 1868dac8-6ccf-3345-90de-dd909a271d02.roa (raw, json)
Hash identifier: 8yA7syGRpvxvuy4DdoxHrZIoLTFAYgMoB7yTrWpyX1E=
Subject key identifier: D5:3C:E3:06:10:29:45:2A:A7:5D:6D:A1:A6:16:5F:EC:BB:08:20:A3
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848FD0CE7064E9B8E06439B2300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1868dac8-6ccf-3345-90de-dd909a271d02.roa
Signing time: Mon 24 Feb 2025 11:32:24 +0000
ROA not before: Mon 24 Feb 2025 11:32:24 +0000
ROA not after: Sun 25 May 2025 10:32:24 +0000
asID: 329007
IP address blocks: 172.111.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 06:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:0c:e7:06:4e:9b:8e:06:43:9b:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 24 11:32:24 2025 GMT
Not After : May 25 10:32:24 2025 GMT
Subject: CN=7981c46e-1f47-4141-8f37-70444daaa72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:6b:1b:7a:78:9d:6e:5d:44:f6:06:f9:31:
84:f9:96:0e:6f:87:38:cc:55:dc:00:86:23:c4:4c:
06:33:53:5c:8f:b0:b8:d4:93:65:5c:7d:b5:21:af:
09:dd:35:c5:29:bb:a7:9d:3d:16:8a:c4:ea:5e:70:
29:7d:3a:0a:75:92:73:65:84:b2:15:1b:d5:12:f7:
8e:34:c3:79:27:ec:b9:ed:d5:e1:29:3e:43:a8:59:
59:24:dd:78:f0:20:8d:f9:b4:57:9d:b5:7a:25:7d:
64:df:bb:1b:fa:33:4d:ab:90:11:99:ea:ca:e0:83:
96:1e:aa:d8:c8:7e:c8:43:87:d5:8f:80:4f:65:ae:
98:d1:06:8d:da:58:27:30:eb:f0:ff:c3:64:22:0a:
f5:29:11:b3:ac:3d:33:a3:62:9d:07:bd:3d:da:7c:
7c:1b:37:82:71:6f:9b:ce:8f:16:d6:6b:ec:8d:bd:
d8:0b:94:3a:6a:d0:12:58:ab:75:dc:c9:78:ad:b0:
36:e0:17:f9:39:1b:b4:42:a0:05:99:1d:5d:c5:95:
be:8c:14:93:c7:bd:78:06:40:e8:d3:e7:bb:59:09:
dd:82:62:d2:e9:76:5a:ab:43:bd:73:c0:7a:c7:35:
74:c9:f1:ec:e6:4c:eb:e9:02:54:ae:58:da:2a:4c:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:E3:06:10:29:45:2A:A7:5D:6D:A1:A6:16:5F:EC:BB:08:20:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1868dac8-6ccf-3345-90de-dd909a271d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d5:83:ca:b0:d6:82:76:ce:4f:e3:f6:02:62:55:64:3a:b3:
ec:83:af:75:4e:f1:26:ea:21:f0:25:a7:56:c4:b8:da:1b:f9:
59:6d:91:20:8d:45:1b:e9:ca:e6:b0:3f:95:2d:b2:7b:e7:cc:
ac:93:9d:e4:a0:22:c1:6c:38:49:a6:13:73:ab:2f:27:fb:c0:
f9:18:b9:3f:b2:22:f8:42:5c:ed:b8:d3:58:34:55:24:1a:dd:
1f:c7:a1:75:47:04:59:15:fb:ce:ff:66:a4:8d:7b:a6:27:c7:
09:28:00:ee:b1:49:ff:a5:4c:ec:dc:7e:74:e5:40:24:b0:4e:
6f:6b:e1:01:75:5f:38:fd:d6:97:63:30:1e:0e:3a:8a:a2:73:
b3:fa:71:89:01:d3:c8:be:b2:43:34:1b:ab:26:12:09:f1:4f:
03:f6:3d:f9:1f:1e:8e:2a:77:cc:f0:ca:11:ff:ce:dd:f5:d0:
2a:01:c9:c1:7b:1d:04:17:4e:6d:7d:8a:cf:15:62:2a:40:68:
bd:2f:b2:37:84:23:07:93:b2:10:32:84:cc:33:73:3d:aa:ba:
6d:1b:60:16:66:b6:8d:1b:64:ae:16:86:f4:33:f5:5e:bc:52:
c3:45:c6:ee:35:24:39:74:40:3e:51:fc:83:96:2a:53:79:f4:
ce:8a:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:45 2025 by rpki-client