Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5de3a0c1-78f8-3086-89f2-39e5eff8eedd.roa
File: 5de3a0c1-78f8-3086-89f2-39e5eff8eedd.roa (raw, json)
Hash identifier: RAOoEJB06QwalX0r08NvV/8djxMIZgXlMg55MTOcqIo=
Subject key identifier: C8:1F:8E:D1:01:10:E9:67:51:9C:44:98:66:72:0A:D1:67:11:54:28
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858488F9450317C77B6F0659F0E40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5de3a0c1-78f8-3086-89f2-39e5eff8eedd.roa
Signing time: Thu 16 Jan 2025 06:26:19 +0000
ROA not before: Thu 16 Jan 2025 06:26:19 +0000
ROA not after: Wed 16 Apr 2025 05:26:19 +0000
asID: 329007
IP address blocks: 172.94.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:94:50:31:7c:77:b6:f0:65:9f:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 16 06:26:19 2025 GMT
Not After : Apr 16 05:26:19 2025 GMT
Subject: CN=ac53bf3e-2aa2-40a3-9fb2-36bcf5ab52a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:f5:52:54:3c:1e:82:ef:78:98:03:84:bb:
3d:8e:43:1e:3b:55:fc:af:f1:f0:c6:9c:83:a5:f1:
1e:46:1e:fd:91:5d:eb:ad:02:60:7a:21:b7:7c:8c:
8b:e6:4e:0a:29:6c:ea:5a:8d:60:19:e4:96:4f:5c:
80:0b:f9:d2:a2:6b:80:63:8f:05:48:cf:b3:30:e5:
33:54:3b:5f:d8:d0:d8:83:c5:c9:b0:61:62:4c:d7:
dd:ef:c3:59:cc:b8:48:60:d9:83:d1:60:2c:bb:6b:
8f:5c:75:6b:63:b4:84:70:75:33:de:09:b5:de:a2:
d2:db:72:5a:09:28:42:3a:b3:12:f3:78:bb:34:53:
b2:67:f9:c2:92:8a:08:d6:6a:c5:ea:e0:dd:32:0a:
3b:fb:8e:7c:e0:c9:37:38:f9:b0:23:35:7a:23:19:
4a:64:cd:bb:29:c6:00:36:84:94:15:b4:96:0d:fc:
f2:5f:59:62:c0:f7:0a:9c:52:df:11:5c:b0:b7:ec:
b3:25:0f:95:7c:53:6f:04:5d:d4:f0:6f:8e:18:a8:
cb:54:e3:98:52:a8:8c:69:4d:9c:96:23:76:d2:73:
de:53:d0:28:d9:c1:f1:72:1d:46:42:4c:9a:48:c9:
91:12:bf:69:05:02:09:1d:a7:68:3f:a1:12:a3:26:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:8E:D1:01:10:E9:67:51:9C:44:98:66:72:0A:D1:67:11:54:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5de3a0c1-78f8-3086-89f2-39e5eff8eedd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ae:9d:73:7f:3b:e5:3f:4f:05:5a:b6:44:56:56:52:3b:dc:
d7:28:a2:43:81:72:d6:bb:4b:60:24:09:ff:eb:7e:de:86:59:
9f:9e:dc:87:5d:0d:08:70:54:cf:d3:e4:3a:bf:d0:b6:9e:21:
05:27:ba:8d:30:40:f1:5f:a6:b4:d1:96:3a:62:26:cd:ef:5f:
33:fc:8c:6f:50:de:db:03:3b:a2:a6:b3:5d:46:01:d4:46:ab:
a2:df:c0:4f:fc:e6:32:09:94:30:2c:ed:8a:c7:3d:c1:b5:0b:
e3:b3:0f:83:7a:a5:ce:f7:98:7f:51:03:83:94:c7:8d:ed:c8:
a9:e9:10:5b:ae:77:5d:85:97:1c:07:77:b0:4f:86:09:7e:08:
fc:1d:b7:da:d0:f9:0c:d0:55:f4:d4:38:17:2f:1f:3f:06:52:
8b:16:dc:75:66:48:ef:1b:3a:54:0c:e3:ed:db:a4:e1:56:d9:
4a:c1:e0:1e:7b:89:0c:23:cb:51:c4:8b:6e:85:ae:0d:0c:4f:
34:11:1a:44:f1:64:13:d7:42:3e:42:eb:2c:68:5b:0d:dc:d0:
54:76:45:1f:ac:77:e9:09:30:23:71:fa:bc:dc:3a:10:eb:7b:
7e:7c:a1:ac:32:06:c1:74:cf:bd:f8:db:4f:9b:9b:2a:f7:f2:
04:4f:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:38 2025 by rpki-client