Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/51178c3c-66f4-38e3-b82c-aa54126dc8d9.roa
File: 51178c3c-66f4-38e3-b82c-aa54126dc8d9.roa (raw, json)
Hash identifier: t046da3wiPZ+fz8Hh7jIgbF8HGzsr2XB2a6pWr4Mu7s=
Subject key identifier: D9:7C:1D:01:5C:01:1B:30:14:7D:F3:3F:34:D2:83:A2:5C:F2:99:A0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858492644879BDBEBE811964788E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/51178c3c-66f4-38e3-b82c-aa54126dc8d9.roa
Signing time: Tue 11 Mar 2025 05:52:37 +0000
ROA not before: Tue 11 Mar 2025 05:52:37 +0000
ROA not after: Mon 09 Jun 2025 05:52:37 +0000
asID: 329007
IP address blocks: 172.111.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 10:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:26:44:87:9b:db:eb:e8:11:96:47:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 11 05:52:37 2025 GMT
Not After : Jun 9 05:52:37 2025 GMT
Subject: CN=9aa3f477-cf21-4492-81f2-871a9ea61531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:8b:1d:81:b6:dc:42:bf:31:ca:c3:c7:4d:
76:c4:62:fc:3d:62:c7:3e:8e:3b:b0:ce:63:ee:cd:
5d:58:47:96:46:32:87:6c:30:b1:f6:9d:1a:9e:69:
b4:1e:8e:03:03:4c:87:8a:f6:bb:b2:94:9a:92:2e:
68:05:92:38:c0:1e:75:5b:7d:42:14:7b:5c:e8:e9:
f0:21:e8:75:bf:ca:4a:18:98:6c:d9:79:b2:f5:cd:
8d:d5:d6:ac:c3:e9:7a:0b:8b:27:e0:ea:1b:16:20:
0c:45:c3:80:4d:ca:73:df:28:48:c6:29:f0:bc:00:
56:19:74:0f:31:7c:1a:81:4f:52:da:bc:ff:04:fc:
01:86:61:5e:67:76:49:57:1a:83:ff:2b:8d:4c:9f:
cc:e1:2a:e0:e9:f9:93:97:27:f2:5d:5e:8a:e1:7e:
96:83:e3:3f:01:c0:e2:0f:85:cf:74:fe:db:18:ce:
0f:41:10:47:66:6d:5d:40:21:ee:38:4a:71:2b:76:
3a:6a:a3:f7:02:fe:2f:dc:c9:63:ae:1a:13:a8:85:
e5:0d:43:71:0e:a5:67:f9:c0:25:c3:72:78:6f:ad:
b5:14:16:9f:f7:41:67:34:75:ce:e8:0f:dc:28:42:
69:64:a7:69:19:21:93:07:23:3d:04:60:d1:48:89:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:1D:01:5C:01:1B:30:14:7D:F3:3F:34:D2:83:A2:5C:F2:99:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/51178c3c-66f4-38e3-b82c-aa54126dc8d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:58:18:38:92:c1:b7:5a:aa:87:c6:2d:1a:de:76:34:63:ef:
95:34:5b:49:a8:bc:ca:57:67:c5:82:4f:81:82:0c:72:33:1a:
9b:d8:ad:eb:86:eb:ed:e9:35:44:b8:05:e2:fe:87:53:1d:f6:
eb:ce:e8:a8:9d:d8:02:8b:22:43:71:ec:a0:82:48:7f:f8:e5:
82:72:f8:5b:4d:0b:f9:df:ec:03:30:49:31:ff:c4:e6:fb:4a:
77:12:a7:69:10:f1:0e:f0:3e:a0:bc:f5:47:65:1f:17:9c:d5:
78:da:9c:96:0a:97:99:1c:35:c5:70:5a:2d:1f:0e:ae:de:d3:
2e:83:fe:4f:a6:50:ab:3d:68:74:fa:cf:86:04:68:c2:2a:98:
60:d0:5c:57:85:20:9a:dc:c7:74:49:af:0a:6d:4b:81:ad:85:
83:be:5e:e1:9a:60:1c:71:da:a7:78:e3:ac:2e:0f:c0:35:ee:
8f:6b:88:07:e4:af:73:50:4c:b9:76:9d:13:0b:db:f5:6a:5a:
2e:d5:d5:9a:9b:6f:bc:93:a8:4c:b0:c9:ba:06:d7:41:ed:93:
62:28:b6:e0:65:fa:96:27:0d:fa:95:59:7f:79:3c:c9:0c:0e:
0b:09:b4:3e:ae:64:d8:93:58:78:fd:6e:13:c2:93:47:2a:de:
82:f9:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:14 2025 by rpki-client