Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9332f98d-83e5-3b67-adae-91fa5592ee63.roa
File: 9332f98d-83e5-3b67-adae-91fa5592ee63.roa (raw, json)
Hash identifier: Gnbj+tcFFkbmoIzMe3EOtXangm7ZmVmvbTDNDQKLC6Q=
Subject key identifier: 43:D1:86:37:24:2D:2C:B6:E1:83:56:B6:E8:F4:29:00:28:97:62:4C
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489E138E8B532B4DCFBECFFC80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9332f98d-83e5-3b67-adae-91fa5592ee63.roa
Signing time: Tue 21 Jan 2025 11:04:01 +0000
ROA not before: Tue 21 Jan 2025 11:04:01 +0000
ROA not after: Mon 21 Apr 2025 10:04:01 +0000
asID: 329007
IP address blocks: 172.94.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 07:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:13:8e:8b:53:2b:4d:cf:be:cf:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 11:04:01 2025 GMT
Not After : Apr 21 10:04:01 2025 GMT
Subject: CN=52209000-57a9-4346-b951-be8f269954f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:31:96:3a:e5:6e:ec:fb:ad:4f:e8:09:e9:
6c:9b:0d:5e:aa:90:e1:bb:7f:1a:db:8d:bc:41:a3:
cf:a8:05:85:7a:14:21:39:10:a2:5b:f3:8f:89:f7:
40:14:fa:1a:a7:2d:62:20:a1:e3:70:59:04:78:39:
da:ea:f1:62:d5:7b:fb:c7:7b:ac:2d:23:a2:88:1b:
39:a6:be:10:d9:ed:d4:c1:9a:6b:84:ab:3b:6c:76:
75:80:0d:ef:41:00:c3:f2:14:34:77:24:91:46:ce:
e3:2f:de:85:e7:88:82:81:0f:d4:4f:a7:a1:07:ed:
c9:d7:b2:03:3e:57:f4:d2:cb:59:b8:c0:85:8e:c8:
32:88:a0:11:2a:c3:b7:40:87:57:8e:b0:15:0a:b9:
09:fe:63:9d:ce:9b:f2:5e:61:ee:92:47:6a:fd:68:
cc:c5:96:70:9e:4b:03:ce:12:13:51:b3:2d:1a:42:
06:d4:6b:c2:59:a0:9d:d0:73:45:85:51:52:58:36:
d1:9f:94:7f:79:e7:d6:40:3a:64:41:28:4d:75:2a:
93:49:0c:cb:29:89:6e:6d:12:d7:b5:7b:eb:b8:eb:
26:08:5f:a9:40:65:5e:a8:be:5b:3d:e5:f1:1a:ef:
51:f1:9a:be:db:30:a0:37:53:a7:73:34:4c:1c:aa:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D1:86:37:24:2D:2C:B6:E1:83:56:B6:E8:F4:29:00:28:97:62:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9332f98d-83e5-3b67-adae-91fa5592ee63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:5a:b3:ee:5d:1b:c1:35:2f:e7:b2:fe:59:0b:26:51:7d:f6:
b1:c5:80:b2:3e:f0:18:30:a0:75:ba:85:e9:b9:60:0e:cf:f0:
2d:07:ea:f8:9d:12:d4:c0:b2:00:0e:cc:06:aa:64:aa:7b:31:
99:e6:10:1d:a7:b7:4b:34:6b:06:a5:95:0e:0a:c1:1a:b6:c0:
d6:95:d6:b3:74:31:5a:9e:e6:9d:b8:2c:8e:52:cb:f5:5d:a0:
e5:6a:b9:26:b9:2e:ff:c7:ce:4c:44:7f:5e:43:06:6a:b2:f8:
fb:ff:dc:3c:e7:41:af:39:96:2e:0b:06:27:06:3c:74:99:06:
5d:6c:7a:52:09:d6:80:34:7d:83:75:8b:a3:ca:83:a0:f8:f2:
1f:67:1e:30:05:bf:d0:69:dc:52:6a:c9:ed:a6:87:bd:e5:ff:
fe:12:b2:b1:be:4e:e1:1d:3f:04:25:f5:e3:30:99:27:06:d7:
eb:ca:24:16:ca:eb:b7:4d:78:b7:6d:22:ad:59:9c:ee:fc:6c:
fc:2e:6f:48:06:0c:ee:3b:3b:a8:48:58:03:a5:11:ce:90:7e:
f5:71:7f:18:04:11:ba:a0:09:f0:5f:d6:bd:08:5f:29:95:28:
34:29:56:a4:57:43:e2:88:51:c8:2a:de:71:08:50:da:5d:3b:
4e:fa:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:48:36 2025 by rpki-client