Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/342b108d-d9e8-3c47-94b7-380420c9d015.roa
File: 342b108d-d9e8-3c47-94b7-380420c9d015.roa (raw, json)
Hash identifier: lyMuV3yNwwzbhV6r3JQc3AdXNURKMQBTi5n1VaWozEo=
Subject key identifier: 66:79:1B:38:8D:8B:97:43:06:40:D5:E6:79:F5:A1:B4:6C:2D:E8:54
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584BA90B60BC52A32B3E294E0CE0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/342b108d-d9e8-3c47-94b7-380420c9d015.roa
Signing time: Mon 27 Oct 2025 11:42:14 +0000
ROA not before: Mon 27 Oct 2025 11:42:14 +0000
ROA not after: Sun 25 Jan 2026 12:42:14 +0000
asID: 216378
IP address blocks: 172.94.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Oct 2025 12:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:0b:60:bc:52:a3:2b:3e:29:4e:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 27 11:42:14 2025 GMT
Not After : Jan 25 12:42:14 2026 GMT
Subject: CN=0596015b-817e-4b10-9829-b024327d8047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:3a:33:d0:18:e1:59:51:50:b8:6b:3d:0c:
be:cf:af:45:e6:50:c5:ae:73:bd:41:eb:ea:7c:59:
a7:dd:64:b9:63:33:6d:da:4e:37:f8:da:0c:4a:03:
d8:b4:2f:9b:24:6c:1c:1d:51:08:57:18:d2:f2:27:
dc:d1:0a:8f:f7:83:6d:ec:07:ff:6b:51:b3:f3:bc:
fc:62:e7:64:34:db:39:50:05:a3:0b:78:68:6f:57:
33:28:d3:b3:d8:55:6e:58:90:43:04:1b:dc:ee:b0:
71:ed:26:bf:18:12:dc:6b:7e:0f:be:a8:14:f0:57:
9e:0b:7d:73:8e:48:19:a3:30:df:eb:3d:d3:88:01:
b6:79:0d:19:f2:11:78:50:7a:1d:3e:56:4d:7d:7d:
b5:b3:8f:7c:1c:36:b7:da:3d:88:57:b5:33:76:e9:
cc:42:d6:46:b2:dc:fc:67:27:62:5e:f4:c6:ed:60:
db:d8:58:b6:6b:cf:5c:ee:bf:2b:02:6a:e7:8c:dd:
88:05:11:60:6e:16:f3:3a:85:16:a2:04:97:7a:98:
97:0a:1d:0c:a8:23:75:eb:94:c6:cd:f0:46:5b:f5:
12:c6:ef:4a:1b:90:3d:1c:73:3e:2e:00:60:f9:e8:
6c:0b:9e:c6:06:1c:47:a6:8d:52:a8:1d:a6:ce:0b:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:79:1B:38:8D:8B:97:43:06:40:D5:E6:79:F5:A1:B4:6C:2D:E8:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/342b108d-d9e8-3c47-94b7-380420c9d015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:9c:8b:25:4f:7e:82:d9:3d:92:2b:58:12:61:5a:8e:d1:20:
6d:c9:c3:e4:e6:50:b7:11:12:6e:57:dd:e8:af:4f:51:29:de:
96:db:aa:ce:42:cd:08:5b:c0:ed:17:62:1c:9d:60:01:62:78:
fb:62:01:e5:32:d3:c5:e9:c9:55:1b:36:66:27:40:57:c7:31:
18:34:64:be:c0:af:50:a7:e4:b7:a0:de:93:85:a3:14:22:26:
1a:a4:62:34:a3:e6:5d:ae:fc:68:f7:c9:65:29:1f:ef:92:f1:
85:04:00:68:f7:3f:c8:c8:9c:d5:f6:45:51:0d:bc:57:a7:80:
f2:2f:e2:5e:12:b5:e9:2a:c2:64:cb:ae:ff:0d:43:ab:e4:71:
67:e4:fb:a5:ab:a1:ef:d8:86:54:96:da:f8:ad:eb:89:e6:87:
fa:99:6a:c9:e8:30:97:f7:7f:6f:a5:7b:3c:d1:96:70:17:49:
ba:0f:dc:27:ce:6e:f2:c6:36:b9:44:5d:94:70:4c:d0:91:bb:
ba:0e:6f:9e:18:3c:39:f2:ca:11:8c:4a:eb:a5:a1:94:e9:f1:
95:34:27:2d:a2:b5:00:d6:53:f5:d6:50:91:eb:73:24:dd:fe:
30:e7:24:be:60:5e:67:96:7e:47:41:a3:db:1c:e3:c7:ae:4a:
34:81:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 13:26:10 2025 by rpki-client