Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4d6d1666-de6d-33e5-a5cb-e4a3cdca9569.roa
File: 4d6d1666-de6d-33e5-a5cb-e4a3cdca9569.roa (raw, json)
Hash identifier: iRYmDd01x+Jd7RQbNp27jCrrzdsSyGw3MsVSBZTnVTQ=
Subject key identifier: C8:14:6C:C4:1C:93:C5:3C:88:45:8D:91:FA:1F:99:47:CE:9E:AB:0A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858491849AB79586ED1AB30EA2140
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4d6d1666-de6d-33e5-a5cb-e4a3cdca9569.roa
Signing time: Thu 06 Mar 2025 05:41:40 +0000
ROA not before: Thu 06 Mar 2025 05:41:40 +0000
ROA not after: Wed 04 Jun 2025 04:41:40 +0000
asID: 9009
IP address blocks: 104.37.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 05:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:18:49:ab:79:58:6e:d1:ab:30:ea:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 6 05:41:40 2025 GMT
Not After : Jun 4 04:41:40 2025 GMT
Subject: CN=f43a18ba-244a-44bb-bb54-c7e781f8025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:04:ae:39:c5:1b:8c:3b:a8:d7:dd:1f:98:
06:3a:0e:67:7f:e0:8e:34:ac:11:51:a0:91:83:cd:
0f:f6:26:99:46:dc:57:0c:22:59:9f:6a:6e:d3:21:
4a:18:d7:b4:01:8f:3c:27:46:0e:36:42:92:32:cd:
89:ba:03:09:88:21:9d:a9:b8:bf:e3:a8:07:4f:55:
bf:33:6e:b2:34:3a:a1:33:d8:ac:67:23:2e:01:88:
80:8c:1d:7f:a7:33:3e:15:e3:90:57:d5:1b:42:8b:
aa:bd:4d:6e:1e:0b:5e:25:3c:af:ab:e7:81:8a:e4:
81:ab:ee:72:dc:0b:cc:c6:a2:e5:6a:88:1b:46:e8:
24:5a:7e:2e:01:89:c7:6e:bd:22:9b:57:39:76:2d:
99:50:b8:c6:aa:08:09:af:3d:5b:a5:54:a9:64:37:
1f:75:6e:c9:61:4a:95:70:de:cf:7e:33:31:74:61:
0b:ee:77:c0:0c:e7:bc:75:0f:3a:ad:b9:7a:81:89:
8c:aa:98:de:91:79:74:47:d4:d4:02:fa:54:ef:1b:
b3:1b:c5:7c:8c:f5:33:d1:e1:9d:54:d6:c4:76:58:
9c:7a:4b:fd:4b:e3:6d:f7:f3:06:f6:01:f1:2b:66:
35:de:33:47:7c:d3:1a:bf:a0:bc:8f:40:c4:a8:49:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:14:6C:C4:1C:93:C5:3C:88:45:8D:91:FA:1F:99:47:CE:9E:AB:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4d6d1666-de6d-33e5-a5cb-e4a3cdca9569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:04:35:fb:4e:de:67:68:09:de:51:42:79:13:95:26:36:2d:
b4:d3:da:80:37:ab:27:2a:9b:f8:2e:69:9f:03:bb:5a:ce:57:
2e:71:b3:02:8f:ab:b6:b0:29:b2:07:e0:1c:85:9f:86:71:bb:
6a:99:c2:f7:2d:fc:c1:7b:f9:64:02:56:25:ed:b5:2f:2a:14:
26:1b:dd:18:6a:fb:75:f9:5d:ac:e2:04:b4:e4:88:3d:cb:11:
72:23:9c:0e:66:bf:8b:f7:f5:83:f4:72:84:c7:3b:0c:fa:dd:
8b:0d:23:25:e9:d7:da:82:34:5f:8e:45:4c:e3:c6:55:ac:a6:
a7:6b:ad:56:44:56:93:d7:5b:9a:3c:78:3c:8c:ab:c0:97:b5:
77:21:59:d0:c1:32:5c:aa:10:4c:b6:c1:a3:e0:10:46:98:6c:
76:ba:79:43:79:d5:55:01:95:0f:8b:a4:f2:dd:f9:10:b0:af:
5e:51:d4:60:f7:f2:99:17:f2:4c:3e:4b:27:44:4a:f6:c8:cc:
65:f3:a6:74:29:2d:68:a2:40:70:b3:d9:f8:67:f7:fc:0f:0e:
0e:f6:c6:27:c9:6f:88:5b:6d:5c:56:32:3b:ce:2c:63:c1:c4:
34:6f:70:71:fa:e2:f6:11:56:df:e6:d2:a9:96:3f:fd:79:42:
16:2f:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:12 2025 by rpki-client