Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831d090c-2b3c-352a-a39b-b6d3d55c4b50.roa
File: 831d090c-2b3c-352a-a39b-b6d3d55c4b50.roa (raw, json)
Hash identifier: SbBY1SHkIIH6Ehz9ncpCvKYFxszOsEIWVUZNh+iY9E4=
Subject key identifier: 67:3E:28:B8:67:FE:BB:8E:E9:62:94:57:8C:18:3A:52:5F:1D:7A:E4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584BA90AEC8D6F7AF67938699800
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831d090c-2b3c-352a-a39b-b6d3d55c4b50.roa
Signing time: Mon 27 Oct 2025 11:41:19 +0000
ROA not before: Mon 27 Oct 2025 11:41:19 +0000
ROA not after: Sun 25 Jan 2026 12:41:19 +0000
asID: 216378
IP address blocks: 172.94.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Oct 2025 12:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:0a:ec:8d:6f:7a:f6:79:38:69:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 27 11:41:19 2025 GMT
Not After : Jan 25 12:41:19 2026 GMT
Subject: CN=c8d715c6-42da-46b9-9f89-e8f25eb9c7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:23:df:32:fe:4a:5c:69:e2:3a:06:33:82:
97:4f:dc:8f:8f:2b:94:5c:6e:9b:f9:e2:eb:e8:a2:
31:a1:66:7a:9b:37:4a:4a:fa:f7:fd:b3:31:8e:d9:
a6:c5:ac:a0:77:6e:71:1d:fa:f5:90:b2:52:64:48:
da:74:8a:e3:73:37:b3:6a:9b:06:e3:da:bd:ba:0d:
88:06:9b:49:ea:65:20:d3:25:94:74:e8:43:4c:27:
b9:1c:70:5a:a1:7b:0a:fd:15:3d:9e:2b:b5:7e:da:
70:88:8f:95:5f:38:65:c0:2e:cc:de:15:c2:65:be:
a8:33:c2:0d:84:fd:c6:1b:31:ac:9c:40:c5:22:e8:
b7:8d:6f:a2:20:f6:ad:c5:9a:e4:e6:c9:e2:a2:47:
20:03:8e:96:9c:10:61:7b:fc:38:ed:13:7a:a7:fe:
eb:d4:fa:65:c4:21:93:2e:fd:8c:ff:5c:4f:28:67:
23:5e:9a:f7:5e:91:2d:a9:c1:35:fe:92:26:e1:77:
53:e0:18:ee:19:47:21:d6:55:cf:99:cf:f0:64:e7:
da:81:ba:70:fb:85:1c:af:cc:11:1d:88:25:49:cc:
93:b6:75:4f:0a:2f:0f:8b:aa:c5:05:2e:c9:14:a4:
01:4b:6c:15:cf:68:fb:db:e8:b3:1b:15:4a:95:98:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:28:B8:67:FE:BB:8E:E9:62:94:57:8C:18:3A:52:5F:1D:7A:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831d090c-2b3c-352a-a39b-b6d3d55c4b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:c7:c7:f6:0e:83:6f:9e:45:ae:7b:3d:17:bb:19:b5:d7:9e:
22:47:0f:b0:2d:f9:b4:58:71:22:20:8d:98:67:8d:b4:88:0b:
38:d2:e4:c5:4f:eb:56:34:10:82:6c:09:6f:e5:53:b3:1b:49:
1d:f8:b8:1e:f8:8f:2a:08:86:91:93:09:3f:e0:9f:2d:5a:9b:
89:3c:40:bf:1e:72:8d:4d:54:8c:ff:20:56:5b:7e:81:56:f3:
6b:81:1d:a3:50:9a:2b:6e:8d:99:5e:5e:6d:cf:03:30:50:e3:
4b:22:3a:81:a2:ef:8a:3d:37:d3:02:6f:94:e1:75:47:ba:1d:
f8:7b:a8:c7:ce:94:7b:52:8d:84:df:04:b1:ea:75:83:71:47:
c0:89:b7:6c:7f:1e:0f:04:e1:41:a5:d8:ac:08:b0:67:67:60:
7d:60:c8:d7:fc:30:cf:00:7b:d0:98:11:09:fe:2c:55:82:da:
10:37:49:df:ec:06:b8:53:bf:89:6f:c0:ee:6e:57:0d:38:b5:
a8:7e:e5:8f:9c:fd:b1:95:87:42:ea:5c:78:b9:e7:84:6d:c7:
cd:1f:5f:71:eb:95:79:11:ab:c9:04:2e:dd:7c:3e:8d:ad:c6:
84:77:a3:b8:90:ae:c2:2b:5d:fc:e6:28:e6:6a:ef:90:73:79:
c0:5b:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 13:26:12 2025 by rpki-client