Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/988ddea9-b419-34e3-b95a-eb75f8a841fa.roa
File: 988ddea9-b419-34e3-b95a-eb75f8a841fa.roa (raw, json)
Hash identifier: LOzgL/vv0bgxK2mVrtX1fJihwWgxgP3Ms8xol97xQxY=
Subject key identifier: DF:E2:D4:AA:A5:8A:6D:B5:3B:9A:F8:BF:CF:DB:D5:F5:77:67:A3:26
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858491848BDC68086E285BE173100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/988ddea9-b419-34e3-b95a-eb75f8a841fa.roa
Signing time: Thu 06 Mar 2025 05:39:47 +0000
ROA not before: Thu 06 Mar 2025 05:39:47 +0000
ROA not after: Wed 04 Jun 2025 04:39:47 +0000
asID: 9009
IP address blocks: 45.74.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 09:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:18:48:bd:c6:80:86:e2:85:be:17:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 6 05:39:47 2025 GMT
Not After : Jun 4 04:39:47 2025 GMT
Subject: CN=c5e0ecf5-2e88-4409-81d6-ef88f00c7e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:f1:e3:4f:0b:45:e5:16:e9:39:de:5a:bf:
06:7b:3c:dc:db:dd:51:45:41:0a:52:02:ba:88:9c:
78:ed:f2:12:77:44:8e:d1:f0:ec:fa:72:55:ad:c3:
8c:03:a2:34:a0:a6:54:d4:49:30:65:f0:47:57:45:
10:ee:1e:4b:88:03:a0:9d:fe:89:e2:89:ed:90:21:
75:66:51:38:45:09:a9:7b:52:04:b9:10:f8:7e:85:
79:43:e8:06:82:a0:bc:b6:6b:72:87:99:e4:de:a9:
84:e0:21:f3:7e:d5:f7:74:7b:94:be:96:ff:ab:ea:
be:5a:b6:ac:40:d0:2b:8e:01:72:9e:99:eb:59:ac:
81:67:e0:75:9b:5c:52:50:e2:e0:9a:3e:d2:da:9f:
e4:2e:f4:d7:fb:50:a6:62:af:a6:82:6c:5b:df:6c:
63:bf:84:71:b3:f0:ab:d0:e2:8e:5b:a3:94:cc:40:
7b:2c:ef:24:c8:91:cb:6a:59:c8:d3:7e:0e:98:1e:
2f:65:67:60:26:07:34:58:04:ef:d2:4c:73:42:c5:
ab:f7:3b:da:44:d7:ac:56:6d:ca:5c:17:16:2c:a7:
07:85:0e:31:47:4d:f6:90:99:70:0b:19:c4:86:25:
41:68:f9:4b:fe:5a:1d:3b:2f:83:8e:09:66:dd:fb:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:D4:AA:A5:8A:6D:B5:3B:9A:F8:BF:CF:DB:D5:F5:77:67:A3:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/988ddea9-b419-34e3-b95a-eb75f8a841fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:49:c6:0c:60:3d:bf:da:20:e5:d2:b5:4c:9e:2f:cb:6f:13:
51:10:42:b5:27:98:5d:6d:d8:bd:8b:0b:c0:03:11:65:e2:e9:
e0:6a:45:d2:34:f2:e1:50:c8:cc:e7:af:14:3e:c4:17:84:7e:
79:20:e9:45:22:3c:f9:c2:ec:cf:d3:a7:7f:18:d9:14:fc:bf:
23:5f:05:a2:96:14:f0:26:ed:f0:4f:59:fa:94:09:3f:79:76:
4e:08:44:f3:e2:b9:ad:1f:1f:6d:8e:27:98:9b:97:c1:6b:52:
04:d4:96:59:6a:c9:8a:a7:eb:59:1e:30:41:b5:40:cb:9a:4b:
a7:7c:da:c4:d2:d6:da:dc:b7:70:f4:fa:b2:ad:fa:83:91:38:
82:3d:2b:ab:f7:60:d3:a7:3a:46:7c:fc:3d:cb:78:c9:1e:16:
28:2d:54:e9:b7:d8:4e:0c:2e:b1:66:ab:83:6c:d8:d9:1c:1a:
6b:83:48:ea:dc:8a:40:49:2c:f7:80:a0:65:16:e2:5e:5e:1c:
46:95:5f:e8:5a:ff:af:cb:0b:37:f1:51:3a:a2:db:aa:f7:7e:
03:34:5c:88:34:c0:45:17:09:6e:b4:fe:e2:9f:f5:67:46:16:
6a:82:99:10:1c:67:ef:b5:d9:4d:c4:ff:51:05:48:10:34:83:
3e:c9:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:13 2025 by rpki-client