Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a31e1cf-ef49-3172-89aa-31b1fd7af1e2.roa
File: 5a31e1cf-ef49-3172-89aa-31b1fd7af1e2.roa (raw, json)
Hash identifier: kDJ0RqoDvbK/UkamtudN45Zd9ulCau6pvHKtO+WBSZk=
Subject key identifier: 67:45:6F:9D:AB:AA:86:C0:D4:17:50:7E:E7:05:36:32:00:E4:F7:C3
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A066BE40E8E78A247181B7980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a31e1cf-ef49-3172-89aa-31b1fd7af1e2.roa
Signing time: Fri 30 May 2025 12:53:00 +0000
ROA not before: Fri 30 May 2025 12:53:00 +0000
ROA not after: Thu 28 Aug 2025 12:53:00 +0000
asID: 208485
IP address blocks: 206.123.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jun 2025 09:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:06:6b:e4:0e:8e:78:a2:47:18:1b:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 30 12:53:00 2025 GMT
Not After : Aug 28 12:53:00 2025 GMT
Subject: CN=c54bed9c-7d55-4356-800f-87258b146be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:35:ca:ea:a7:d1:7b:a2:6d:33:d9:90:af:
2e:c7:16:f2:d1:89:da:88:95:ed:13:f1:83:73:7e:
dc:4e:e7:6d:17:16:aa:a9:55:8d:72:60:b4:b7:05:
5d:0e:fa:1a:87:95:96:01:7b:a7:69:7d:55:1a:92:
fd:b6:34:f8:8f:bd:0a:a0:e6:86:47:62:64:3a:bc:
b4:0c:27:09:5a:47:1f:7c:d5:4d:b7:f4:41:59:f2:
f1:77:20:d0:10:1d:41:da:d6:e8:00:48:41:ea:fa:
b2:fb:6b:cc:88:94:7a:73:a3:bb:0b:99:3d:43:58:
8f:c8:f5:f8:aa:4e:e0:98:72:78:81:c5:01:26:4a:
79:f7:98:48:d9:30:18:92:26:05:9f:42:a2:dc:5b:
6b:83:9e:4f:af:b5:17:16:d2:a0:ac:f4:2e:2a:78:
26:00:c2:48:e3:1c:fa:79:9f:40:68:17:42:45:04:
b8:7f:86:d7:32:8a:1d:ce:e1:7e:bd:77:5d:b3:d3:
31:0f:ee:e0:8c:7c:53:6e:4e:05:c4:84:93:d5:ce:
af:39:3c:c4:02:0a:74:72:cc:c5:74:e1:f0:b0:e4:
41:14:60:17:ac:97:43:53:55:59:9f:aa:8a:5f:da:
82:ca:fb:6e:76:9f:ec:1f:b6:bc:55:37:fc:5b:ea:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:6F:9D:AB:AA:86:C0:D4:17:50:7E:E7:05:36:32:00:E4:F7:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a31e1cf-ef49-3172-89aa-31b1fd7af1e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:3c:8e:c3:9d:a5:c9:ae:b9:01:a4:64:2f:a9:b7:a6:aa:21:
5e:92:5c:9f:71:0b:d0:6f:4e:f7:3e:a5:09:2a:17:9f:a0:43:
3d:d0:9c:92:89:13:e0:06:1e:2d:b1:15:84:63:c5:82:c1:a6:
e4:21:0e:57:0b:ac:ed:92:d3:a8:ae:25:bb:54:80:4a:5b:83:
6e:a6:42:64:3a:94:f5:7a:2b:47:5b:25:6e:c8:c3:22:fc:bf:
2a:6f:95:75:1b:87:8a:87:3d:57:ed:bc:b0:a0:bd:da:c5:92:
88:07:e0:83:0b:5b:53:e0:78:41:b1:98:de:23:59:bd:fa:52:
c0:88:95:a0:fd:d7:1c:d8:14:c7:af:58:77:ea:66:b6:0b:f7:
24:cf:de:f9:72:0d:d5:2c:fc:ec:1c:b7:ef:9f:41:e1:d8:51:
1b:c2:40:5b:a9:e9:c7:fb:a5:83:e0:8e:40:9e:49:98:02:40:
95:6d:07:12:87:4a:d6:5d:e0:db:be:d4:5d:31:c1:9a:0d:09:
69:c2:08:96:fc:7d:76:b7:9b:0b:ab:06:30:2a:d1:68:77:50:
bd:c3:d0:fc:52:21:f1:84:65:d8:94:5e:0d:16:9c:fa:a6:38:
a2:7e:3b:70:d3:12:cc:7a:10:10:94:bf:9f:d5:c7:c6:cb:41:
c9:62:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:02 2025 by rpki-client