Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/52ef522e-6ad8-34c3-8c8f-5f6a3ca182cf.roa
File: 52ef522e-6ad8-34c3-8c8f-5f6a3ca182cf.roa (raw, json)
Hash identifier: xjRi1aABiYFv7+zq4f10s99CPeXw/xJp7Rj2KCbkiZY=
Subject key identifier: A5:A8:B1:E3:88:DB:61:1D:7A:A0:55:B6:9E:64:22:65:54:F7:2A:8F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858488F989EDC58EF5EB292C04080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/52ef522e-6ad8-34c3-8c8f-5f6a3ca182cf.roa
Signing time: Thu 16 Jan 2025 06:35:00 +0000
ROA not before: Thu 16 Jan 2025 06:35:00 +0000
ROA not after: Wed 16 Apr 2025 05:35:00 +0000
asID: 329007
IP address blocks: 172.94.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:98:9e:dc:58:ef:5e:b2:92:c0:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 16 06:35:00 2025 GMT
Not After : Apr 16 05:35:00 2025 GMT
Subject: CN=99c2fc06-31eb-47e0-a8b8-9e1b81b09fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:bb:5f:14:3d:84:ee:64:ae:38:c6:ba:bf:
3c:01:00:f3:bc:70:29:19:1c:3e:cf:8a:4a:70:23:
35:dc:56:11:92:3e:73:5e:4d:dd:73:65:e7:f8:2f:
02:56:9e:d0:a2:2e:dd:11:2e:c7:9e:c5:f8:50:54:
9a:5f:a0:7b:c5:c1:35:02:91:8d:1f:9a:29:1d:5b:
28:6c:69:40:5e:d0:c1:f6:d5:e5:f8:c9:6f:1e:7f:
f0:13:83:9d:03:43:c7:a8:59:34:ba:1c:cb:5e:fa:
4b:97:04:19:8c:19:11:17:ba:57:63:ce:3a:ee:bf:
65:c6:a9:d9:0c:f3:9e:21:0d:f8:bc:c9:4e:48:56:
de:11:64:a9:30:e7:ba:38:32:17:43:ce:64:5d:bd:
61:9f:da:59:6e:c2:63:f0:1e:4a:57:50:6f:84:0b:
0e:25:70:77:46:1a:e6:91:b4:31:c9:c4:f2:fc:8a:
8c:b1:6f:00:cf:8f:3c:aa:3e:f1:99:41:27:fe:9e:
5b:7c:a2:ac:f4:18:d3:1c:5c:2e:75:11:eb:97:1d:
6b:45:c4:7d:1e:a7:3c:3e:88:fe:bc:e1:30:4e:4f:
36:e0:17:77:98:6c:e9:e7:84:c7:3e:c7:c2:99:a3:
05:4e:20:e6:c2:7d:ac:46:be:33:57:b8:c6:3c:8c:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:B1:E3:88:DB:61:1D:7A:A0:55:B6:9E:64:22:65:54:F7:2A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/52ef522e-6ad8-34c3-8c8f-5f6a3ca182cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ff:ef:93:a1:64:bc:3d:dd:87:0a:67:c2:14:67:42:89:fb:
40:60:ff:f4:7b:0b:c0:44:bc:14:7d:5d:54:61:9a:5b:01:fb:
f8:b1:51:5f:86:bf:6e:b5:81:50:ab:73:4f:49:7a:f7:ca:85:
1a:04:4d:d5:61:eb:b3:b0:d3:d8:31:0b:17:47:33:89:83:3b:
b1:6b:5a:87:72:83:0c:ec:b6:c8:6f:85:8b:86:eb:a6:a4:37:
6f:9a:21:25:d3:02:ea:34:b6:cf:26:f5:ab:96:ae:42:bb:56:
3c:91:0f:51:ab:6c:5a:52:a4:b0:b1:fc:54:c3:b4:30:78:54:
39:7a:e9:94:7d:da:03:74:78:00:ce:42:25:0d:56:a7:9f:e9:
d3:de:a8:9b:2f:61:a2:1f:5a:c3:67:82:e5:87:0f:85:df:a3:
4f:11:51:d2:b3:c5:63:83:e9:59:56:68:b5:2e:26:fe:7d:bd:
d0:43:13:91:48:7f:08:b5:64:47:8f:7c:45:45:cf:4e:89:f8:
8f:80:18:84:89:e7:a1:fe:cb:a6:ac:72:15:fb:8c:c9:06:25:
e2:a2:9e:7a:8a:21:bc:34:b6:98:f4:60:7a:6f:24:ef:7f:a2:
c3:13:0c:f9:6b:86:22:a0:0b:6c:e2:af:80:1c:04:2a:57:d9:
2c:54:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:04 2025 by rpki-client