Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2af97534-732c-313e-be77-6559957ec04d.roa
File: 2af97534-732c-313e-be77-6559957ec04d.roa (raw, json)
Hash identifier: OivgxuT1zWK7ehkNmz060WxFq2eBFNspjPmvSuZ8pz0=
Subject key identifier: 40:21:98:48:46:90:FC:F4:E4:34:2F:58:F6:38:95:EC:C9:AE:9B:08
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584BA90BF148B3FB00CC76A235C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2af97534-732c-313e-be77-6559957ec04d.roa
Signing time: Mon 27 Oct 2025 11:43:22 +0000
ROA not before: Mon 27 Oct 2025 11:43:22 +0000
ROA not after: Sun 25 Jan 2026 12:43:22 +0000
asID: 216378
IP address blocks: 172.94.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Oct 2025 12:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:0b:f1:48:b3:fb:00:cc:76:a2:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 27 11:43:22 2025 GMT
Not After : Jan 25 12:43:22 2026 GMT
Subject: CN=64154b51-3860-40f0-bac1-b3507e8c766e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:b5:b9:0f:7e:10:3f:71:c0:37:b8:46:0c:
ad:c7:dc:9a:72:bd:9f:e2:a1:b8:d5:10:39:61:c1:
7f:1f:09:2b:80:f5:60:8b:c6:e8:e6:4f:4d:91:3c:
72:b5:0c:6a:a3:12:98:03:c4:f8:e0:4c:43:0d:db:
0d:c1:4f:cb:d5:ee:a7:a2:b7:7c:68:07:ff:a7:e3:
d9:b2:b0:29:b8:16:b3:db:79:49:6e:2a:c7:21:82:
94:6d:1c:5b:b3:ab:82:7e:2a:83:2b:17:21:8a:87:
7b:d8:7b:82:4f:d0:1a:ac:a3:4b:ff:a4:21:9b:59:
bc:91:f6:30:9a:4b:49:3f:6a:be:69:c3:1d:0d:91:
4f:1b:37:8a:d7:75:64:93:fa:ca:d0:73:e0:6a:eb:
c2:f6:e3:31:11:fd:16:7a:f7:98:38:9a:fd:f4:4d:
00:9e:47:91:05:68:32:0d:02:7a:50:cd:39:7e:4d:
a1:3e:0c:1d:8e:2e:c0:d7:9e:45:34:58:6d:5e:4a:
0a:42:99:89:c9:f3:70:97:15:b7:06:31:6e:94:a5:
94:f1:2d:6c:cd:fa:91:9e:d5:3e:55:74:b7:64:a7:
67:67:69:7e:fd:a4:28:5f:41:6e:cd:22:9d:b2:ab:
e0:77:94:7d:a2:0b:f4:6d:bf:4c:c3:f8:b9:94:db:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:98:48:46:90:FC:F4:E4:34:2F:58:F6:38:95:EC:C9:AE:9B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2af97534-732c-313e-be77-6559957ec04d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:60:dc:33:0a:10:05:90:25:38:fa:45:41:93:35:26:7b:09:
8c:41:f4:d8:05:33:60:1b:27:e5:37:da:2f:ae:30:db:c4:da:
b1:5b:bb:5c:93:6a:79:58:27:35:f6:ab:7d:12:69:1f:8b:6d:
72:1a:e1:a5:fc:bd:7a:25:ff:e5:72:e8:e7:a8:09:d9:44:0a:
6a:43:aa:0e:6d:74:34:2b:c2:0b:7e:31:db:b8:9e:47:05:58:
e9:98:52:8a:eb:7a:d7:b6:ef:d7:bb:54:d9:ae:84:70:61:f6:
0f:00:08:36:74:2b:58:2f:a4:a5:bd:e9:3e:c7:5d:70:fd:a3:
4c:1b:de:a5:b6:6c:88:99:5c:a8:7f:fe:81:1a:ce:08:dc:72:
72:a0:db:1c:06:0d:43:26:f2:c8:ce:6f:e5:e4:06:82:c0:17:
bf:19:b2:de:3d:ff:cf:8a:b8:1e:d0:37:11:c8:cb:fb:54:b9:
a9:b9:8e:91:f3:52:4e:bd:b4:ee:e4:ea:e3:99:53:9d:12:43:
d0:03:e9:73:0f:5c:b5:ac:13:3b:51:0e:b6:6c:ef:47:c4:9f:
99:19:3d:a7:68:14:51:bb:d0:71:b0:1d:a5:4b:ac:c8:dc:98:
2b:46:0b:43:8a:f3:b6:6a:ec:d4:1a:81:8b:b3:5b:ba:7b:38:
2b:c1:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 13:26:10 2025 by rpki-client