Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b3f727a-be7d-379a-9b9e-ea4d90a1b529.roa
File: 8b3f727a-be7d-379a-9b9e-ea4d90a1b529.roa (raw, json)
Hash identifier: ti5TFlkIIcsQcVOOOO2xYi9BnLm070UWenX+ifL0okg=
Subject key identifier: 11:7A:99:07:35:11:A3:42:82:BD:4E:7A:4B:99:32:49:06:E1:7B:C4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848CC7B9F62C9C808C0235BD680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b3f727a-be7d-379a-9b9e-ea4d90a1b529.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 20860
IP address blocks: 172.111.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 10:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9f:62:c9:c8:08:c0:23:5b:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=c48b4797-593a-4939-9595-cdf5a9093e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:65:e8:67:f9:93:36:47:7f:18:99:a5:47:
b5:73:f0:fc:56:17:10:49:4f:95:61:cc:43:8b:12:
bb:43:ca:41:27:f4:69:74:a7:5e:34:4b:b8:ce:2c:
33:66:e1:57:a3:18:55:4a:40:88:ae:81:61:99:1d:
68:d4:07:0e:4c:b9:33:26:5a:a7:93:fa:42:f8:0a:
03:00:c1:4f:5a:34:de:5e:e7:ee:a6:f9:45:76:1e:
be:77:6e:4a:08:13:4e:b7:fd:46:7d:30:cb:4e:88:
27:60:3b:8e:0e:51:94:91:fa:89:c9:f4:cc:64:2c:
7f:cb:00:d7:01:f0:44:86:a5:18:18:6c:d8:fd:42:
29:45:27:67:3e:4c:9d:cb:fe:a5:76:d7:38:9d:45:
27:da:2c:85:3f:5e:78:74:9d:ed:d5:41:0d:83:da:
c7:5b:6d:39:00:aa:64:72:ec:e4:a6:47:e5:40:1c:
55:b3:02:17:90:89:c1:b2:ab:48:0b:48:ba:9b:af:
fc:d4:e6:de:0e:1a:4c:78:54:d0:61:1f:49:04:0f:
50:c5:59:1d:dd:19:4f:00:88:2d:9b:29:be:3d:ec:
34:38:82:82:d2:d8:3f:15:86:f7:9c:f4:01:c2:eb:
f2:61:8c:ed:17:b1:1b:c8:e6:46:cb:b0:80:46:f3:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:99:07:35:11:A3:42:82:BD:4E:7A:4B:99:32:49:06:E1:7B:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b3f727a-be7d-379a-9b9e-ea4d90a1b529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:5f:76:d7:c2:bf:07:33:db:bc:73:46:5c:47:47:f1:cf:d7:
19:8d:21:af:48:e4:e7:bb:bc:38:13:0c:61:8f:61:75:6e:7b:
e1:09:79:c6:82:22:8c:7e:61:b8:0c:10:a3:f7:52:11:b2:86:
a0:02:32:79:ac:08:58:89:ca:7d:3f:08:4e:7c:fd:7f:97:18:
1e:4c:7f:6b:90:b2:fd:54:e6:a2:57:15:95:17:9c:5d:ec:99:
dc:08:36:41:c3:eb:f2:a3:3f:e8:69:d9:a3:14:c1:3f:fd:1c:
f6:d8:8c:24:ad:8b:fb:42:14:e1:7a:86:69:cb:b6:c7:c5:8f:
97:aa:38:c4:f2:80:cf:ff:6e:d9:dd:0b:d6:09:c1:8c:33:fc:
f4:9e:99:09:6c:4c:93:0f:e5:fd:33:f4:94:ae:44:0b:39:e5:
fd:15:f9:e0:9c:21:87:01:14:de:0e:81:ec:d4:79:fc:e7:92:
04:93:e3:0d:9b:b9:ea:ef:ff:6e:09:fd:6c:c3:8f:1d:87:a8:
61:af:ce:6f:c0:cb:b7:9e:38:df:2b:ca:74:46:98:42:a2:4d:
cd:60:ee:cd:c2:fb:6d:49:fb:91:23:86:1c:81:d3:da:99:97:
1c:10:9f:55:09:00:53:14:fd:7d:f6:8f:62:fb:0e:a8:d1:ed:
62:47:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:50 2025 by rpki-client