Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/610f8b00-7378-3c8f-a870-f7580db6cde6.roa
File: 610f8b00-7378-3c8f-a870-f7580db6cde6.roa (raw, json)
Hash identifier: JStQEdP8NWjAK/9PsEJ//4kd9O3dGJ7gkYq+JSKH4MU=
Subject key identifier: 2C:1D:CC:47:67:64:84:EE:D0:42:69:19:8F:D9:8F:32:D9:B5:B6:05
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848FFA16C564037D31AD389E040
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/610f8b00-7378-3c8f-a870-f7580db6cde6.roa
Signing time: Tue 25 Feb 2025 09:43:16 +0000
ROA not before: Tue 25 Feb 2025 09:43:16 +0000
ROA not after: Mon 26 May 2025 08:43:16 +0000
asID: 329007
IP address blocks: 172.94.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 14:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:a1:6c:56:40:37:d3:1a:d3:89:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 25 09:43:16 2025 GMT
Not After : May 26 08:43:16 2025 GMT
Subject: CN=703dcd54-f4c3-4b7a-b067-1be48cb940a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:fc:78:6b:81:bf:29:30:93:1a:c0:22:74:
c3:34:a8:10:55:a6:51:ac:a1:f1:90:e3:7c:d9:d0:
fb:d2:33:bb:26:06:84:03:39:f6:d7:0c:0c:d7:5e:
19:1d:21:68:0f:d0:eb:f8:15:9d:a4:70:58:47:3f:
b7:bd:35:4c:89:47:3f:5b:87:64:15:eb:87:08:27:
78:e1:36:b8:46:df:d5:79:5b:d7:d2:11:13:76:5f:
90:e1:ec:b9:a6:8a:4a:a9:43:ff:02:16:84:3f:d4:
be:1f:d1:a8:35:2b:fe:dd:ac:57:95:42:2b:44:c0:
a9:7d:39:96:b5:38:81:dd:02:f0:4f:58:eb:a9:54:
21:13:ee:46:5d:ff:9c:89:68:d3:a3:35:4a:50:e2:
f0:95:04:19:9d:a8:49:1a:8d:6a:6d:24:9e:74:f6:
86:a1:24:1a:08:34:9f:30:73:52:7a:f4:d8:9f:a2:
a9:52:4e:5b:fd:c8:97:01:dd:94:6b:cb:79:44:6a:
0a:bc:94:be:7c:51:e3:14:a9:54:99:79:52:3b:81:
3c:ad:db:e0:a9:bb:1f:42:49:e8:0d:4a:1e:14:d7:
77:a8:fa:40:59:e3:ab:d3:8f:6d:22:c0:61:68:b8:
da:bd:b1:ac:99:ee:a6:4f:42:e3:0c:36:f5:dc:37:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1D:CC:47:67:64:84:EE:D0:42:69:19:8F:D9:8F:32:D9:B5:B6:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/610f8b00-7378-3c8f-a870-f7580db6cde6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:1f:46:a5:6a:65:a8:06:25:a3:e7:64:5d:8a:96:fc:16:78:
4f:8b:39:95:bd:27:a5:49:4d:5d:3c:13:53:85:b3:fb:64:36:
e0:42:8f:5a:bd:14:ad:d3:48:ee:2c:c9:2f:d8:2d:5a:61:8f:
20:df:ed:15:25:14:25:81:31:f1:4a:0e:72:4d:29:30:47:86:
a6:ae:1f:17:d7:e9:db:16:ea:11:f0:2c:0f:3c:22:cf:05:6c:
bc:f5:97:ff:05:f5:ae:4c:0d:e0:87:fa:b1:c6:26:8f:24:0f:
fc:c7:99:e5:98:08:af:04:8e:66:0e:ba:e0:6b:23:48:66:eb:
20:c0:4c:31:5d:20:de:ac:8e:42:fa:20:6a:ad:3a:76:71:b7:
02:a8:60:7c:70:09:db:17:75:7b:9f:8d:20:9a:df:67:e4:67:
e2:62:05:35:63:b0:67:e5:2f:7b:a6:48:49:cd:29:75:d1:99:
e2:53:f2:91:fe:1e:7f:7e:12:70:1a:fd:41:b5:80:39:93:94:
58:90:d5:d6:6b:1d:b6:33:27:d5:7b:76:39:70:20:ff:bf:0d:
d1:32:88:95:e4:77:4a:8f:a1:2c:02:1a:ba:01:cb:76:72:a4:
f4:16:e7:1d:37:4f:18:03:f4:53:c3:5c:50:cf:66:64:f0:5f:
b1:62:bc:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/oWxWQDfTGtOJ4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIyNTA5NDMxNloXDTI1MDUyNjA4NDMxNlowLzEtMCsGA1UEAxMk
NzAzZGNkNTQtZjRjMy00YjdhLWIwNjctMWJlNDhjYjk0MGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriH8eGuBvykwkxrAInTDNKgQVaZRrKHxkON8
2dD70jO7JgaEAzn21wwM114ZHSFoD9Dr+BWdpHBYRz+3vTVMiUc/W4dkFeuHCCd4
4Ta4Rt/VeVvX0hETdl+Q4ey5popKqUP/AhaEP9S+H9GoNSv+3axXlUIrRMCpfTmW
tTiB3QLwT1jrqVQhE+5GXf+ciWjTozVKUOLwlQQZnahJGo1qbSSedPaGoSQaCDSf
MHNSevTYn6KpUk5b/ciXAd2Ua8t5RGoKvJS+fFHjFKlUmXlSO4E8rdvgqbsfQkno
DUoeFNd3qPpAWeOr049tIsBhaLjavbGsme6mT0LjDDb13DfSmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwdzEdnZITu0EJpGY/ZjzLZtbYFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjEwZjhiMDAtNzM3OC0z
YzhmLWE4NzAtZjc1ODBkYjZjZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkfRqVqZagGJaPnZF2KlvwWeE+LOZW9J6VJTV08E1OFs/tkNuBCj1q9
FK3TSO4syS/YLVphjyDf7RUlFCWBMfFKDnJNKTBHhqauHxfX6dsW6hHwLA88Is8F
bLz1l/8F9a5MDeCH+rHGJo8kD/zHmeWYCK8EjmYOuuBrI0hm6yDATDFdIN6sjkL6
IGqtOnZxtwKoYHxwCdsXdXufjSCa32fkZ+JiBTVjsGflL3umSEnNKXXRmeJT8pH+
Hn9+EnAa/UG1gDmTlFiQ1dZrHbYzJ9V7djlwIP+/DdEyiJXkd0qPoSwCGroBy3Zy
pPQW5x03TxgD9FPDXFDPZmTwX7FivGc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:26 2025 by rpki-client