Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3de7c8ff-66cf-34d8-94b0-76aec838036f.roa
File: 3de7c8ff-66cf-34d8-94b0-76aec838036f.roa (raw, json)
Hash identifier: Zn7bp9Q8TNyM6OpZ5c9EnvXD7WBwuV0vwR4FC3QKbNA=
Subject key identifier: 37:25:17:E9:20:46:22:56:70:E3:FD:DC:4B:F1:39:80:74:08:AE:6D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848D37655BBFFC2132468288BC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3de7c8ff-66cf-34d8-94b0-76aec838036f.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 151106
IP address blocks: 172.111.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 09:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:55:bb:ff:c2:13:24:68:28:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=23f1a31e-50ae-46ed-8f04-02209662053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:ad:cb:d3:b2:66:0b:53:b2:21:6d:f8:fd:
0e:b4:97:28:2a:e1:44:fd:e1:cf:a1:48:ef:5c:b1:
0d:bb:5c:32:35:1d:26:8d:5c:77:99:7b:47:7d:a0:
0c:91:04:51:70:de:f7:23:a7:0c:06:36:37:e5:74:
d3:eb:84:f3:de:9c:e1:ed:3a:ae:46:2a:f0:1b:02:
e0:ac:25:b3:da:b8:61:b2:28:ec:1c:7f:b8:1b:4c:
45:87:9b:3d:f2:f8:75:51:03:da:65:93:09:79:a9:
f0:cd:7e:4a:cb:50:2d:d3:39:e5:c2:31:b7:3b:d6:
9a:07:4f:47:c6:91:d5:31:a7:7d:bd:6b:5e:49:34:
67:e8:ad:34:26:04:af:e0:06:f9:47:85:95:ae:b8:
96:c8:d6:cf:62:ae:a6:5d:ab:fe:2c:13:31:74:78:
bb:f3:15:a3:05:c4:0b:5d:c3:70:4e:ba:2a:4b:31:
a0:b3:0d:ce:92:66:3d:19:ff:c3:f2:1f:78:e9:93:
4c:fd:34:e6:e6:78:87:cd:c2:ec:bf:ad:6a:20:d9:
0c:ea:9c:22:14:2d:d0:59:1e:f8:c0:74:ae:8b:28:
69:86:bb:e1:c3:48:0b:cf:d8:51:41:3f:6d:c1:47:
93:a6:14:f4:37:67:28:b7:31:50:a0:22:87:cf:c6:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:17:E9:20:46:22:56:70:E3:FD:DC:4B:F1:39:80:74:08:AE:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3de7c8ff-66cf-34d8-94b0-76aec838036f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:43:de:6a:b5:96:81:e7:66:a9:fa:89:49:d3:bf:e6:c1:c1:
74:ac:ad:09:96:ca:2f:e9:ec:c2:e5:74:53:5e:28:aa:af:0c:
ca:56:2b:a1:26:66:28:39:2b:6d:27:b7:8e:46:cd:09:23:a2:
39:41:03:71:32:c0:99:57:33:9d:59:18:cd:b8:9f:06:29:f3:
c0:1e:65:f2:db:0b:af:2b:61:ec:94:e8:5a:5d:93:92:58:8c:
b3:4d:38:88:cd:31:49:5e:14:58:e5:0b:ea:d4:73:42:58:b4:
12:d7:f6:69:10:27:32:fb:07:dc:a3:f3:7f:7b:2e:20:2c:07:
d8:b6:88:87:51:65:3b:7d:90:d0:6b:15:e9:c4:6d:62:79:7a:
18:7e:cb:46:38:4e:b1:be:8b:80:44:11:2c:66:15:49:22:27:
9c:57:f5:24:8e:1a:01:c9:f2:ee:65:5a:28:bb:68:80:c1:e6:
6b:ba:6c:b8:e7:48:6e:05:6c:e2:ee:62:fd:b2:34:fb:cc:d0:
e5:da:fb:18:c0:46:c3:d5:8e:d1:9b:03:e7:a2:41:ee:d8:3a:
fc:20:79:21:18:92:e5:fe:e8:a2:bc:29:95:89:87:b8:38:1c:
20:de:5f:8e:22:50:a5:7c:d6:d5:50:03:de:59:72:49:c5:1d:
b4:9d:b7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:12:48 2025 by rpki-client