Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98a5f923-da82-3488-96b9-f4751965b54f.roa
File: 98a5f923-da82-3488-96b9-f4751965b54f.roa (raw, json)
Hash identifier: jP1H/6pm/KW8VFwDQPohZKpp5UZ/aqnXMoesf92y4NE=
Subject key identifier: A8:88:39:05:6E:24:21:80:4F:C0:50:11:A7:8C:52:83:66:4D:A3:16
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848BA0FBB9CBCFF49AF14BC2F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98a5f923-da82-3488-96b9-f4751965b54f.roa
Signing time: Fri 31 Jan 2025 11:38:56 +0000
ROA not before: Fri 31 Jan 2025 11:38:56 +0000
ROA not after: Thu 01 May 2025 10:38:56 +0000
asID: 329007
IP address blocks: 45.74.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 05:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:0f:bb:9c:bc:ff:49:af:14:bc:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 31 11:38:56 2025 GMT
Not After : May 1 10:38:56 2025 GMT
Subject: CN=167a4fae-0eab-4c3a-9194-005ffc53ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:fe:97:6a:28:80:e4:96:b7:28:51:37:42:
28:7b:27:2c:99:a3:ec:ea:97:93:ca:df:cb:ae:cf:
04:8f:76:a5:43:10:be:c8:8f:2c:34:02:93:14:a7:
02:73:30:d6:60:18:71:5d:9b:4e:c4:45:45:8b:ee:
26:fa:ef:31:80:bc:24:b0:92:4c:d8:65:b4:0a:7a:
a6:52:53:81:38:a9:f7:06:ae:ea:f7:ad:2c:10:bb:
ae:46:33:2c:6f:65:ef:ed:b6:ec:6a:93:0a:73:c5:
84:a4:2d:49:3d:8f:85:30:83:69:4d:01:7b:46:a0:
41:65:5c:3c:dd:70:f6:7e:04:2f:a5:10:a2:d6:06:
4a:f7:d0:ee:77:67:e2:ce:89:2e:d0:d1:00:59:12:
39:8e:b0:3a:55:46:e2:89:be:69:c2:d7:f3:58:fc:
5c:a1:60:0a:b9:71:41:5c:ee:13:fb:c8:cc:17:c6:
ef:d6:66:75:e4:ad:39:06:23:2a:e5:74:99:99:40:
63:6a:44:9c:8e:cc:19:95:a9:78:97:2b:88:31:dc:
2c:af:95:11:73:19:3e:62:d0:98:ee:6f:d0:a7:38:
b9:c8:e7:5e:09:d3:2c:00:72:00:e6:40:60:05:04:
9c:38:5b:4c:5f:12:a1:2f:39:15:10:1c:dc:70:91:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:88:39:05:6E:24:21:80:4F:C0:50:11:A7:8C:52:83:66:4D:A3:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98a5f923-da82-3488-96b9-f4751965b54f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:36:a6:7a:3a:e6:bc:d7:b2:f1:d4:06:c3:98:12:32:ef:33:
6e:e1:e3:fd:27:6a:b3:15:17:e4:18:13:42:c4:c7:12:14:79:
4e:93:59:65:3f:73:7c:55:cf:db:62:49:b4:27:73:03:9f:70:
a3:19:4e:25:e1:cd:8c:7d:58:7c:83:ae:b8:77:a9:59:87:e2:
1e:08:dd:e0:32:7f:0c:9e:05:22:ed:46:ae:0b:20:fa:c7:12:
2a:e1:d6:0a:a4:70:d2:e4:18:3b:fb:1d:76:41:be:8d:54:08:
2f:a0:5c:9f:3e:a7:19:45:3f:97:c2:e9:42:dd:bf:de:f9:b7:
67:57:26:51:93:e6:89:39:2b:fa:eb:bb:db:e2:fe:da:85:49:
02:af:ac:a8:df:72:2c:c8:5d:30:82:ea:35:f9:b0:72:83:f5:
28:c0:4a:c6:bb:71:1b:ed:00:18:d4:30:e9:ce:6f:58:82:7c:
46:57:16:2f:32:28:39:c9:b5:16:0d:cb:a5:9d:e8:30:66:23:
c2:f3:40:bf:16:1c:86:10:ec:28:f3:b9:71:39:85:0a:ed:e1:
c8:97:8d:e6:c5:cb:ba:d5:a3:f5:65:72:f2:88:7f:90:a2:ed:
32:84:cb:ad:b7:2f:05:3e:6d:ec:d3:47:c7:0b:84:87:56:77:
26:3b:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:52 2025 by rpki-client