Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4f7956c-1c30-3954-85b4-33648205eb2f.roa
File: a4f7956c-1c30-3954-85b4-33648205eb2f.roa (raw, json)
Hash identifier: roN4Y7fOreV4BEUlAeNyECeNl6HoI/3F7brC1MxPDys=
Subject key identifier: DB:B7:70:5C:83:0B:02:3C:A1:B4:E2:D3:F5:A1:8F:52:CC:C4:B3:07
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489B0BF1741AD739797C543A00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4f7956c-1c30-3954-85b4-33648205eb2f.roa
Signing time: Mon 20 Jan 2025 09:01:15 +0000
ROA not before: Mon 20 Jan 2025 09:01:15 +0000
ROA not after: Sun 20 Apr 2025 08:01:15 +0000
asID: 329007
IP address blocks: 172.94.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 10:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:0b:f1:74:1a:d7:39:79:7c:54:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 20 09:01:15 2025 GMT
Not After : Apr 20 08:01:15 2025 GMT
Subject: CN=f98ed310-4d87-47c2-9448-081a931bfc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:34:86:5e:9e:f1:a4:72:6d:e4:0a:f8:1b:
fa:eb:8b:2e:d8:5b:ae:80:24:08:2c:2c:02:83:80:
96:da:5a:e7:7c:c1:0f:79:c7:01:5d:fb:81:5e:ed:
26:cf:6d:6a:02:0b:f1:22:0a:3d:9f:28:fd:8e:d0:
7c:22:ba:6b:9f:7a:88:f7:24:f7:c0:d6:83:9f:bc:
dd:1b:a5:f5:1e:4b:57:31:ec:c3:3d:a2:8b:05:64:
56:ad:e7:fd:76:bf:65:96:52:ec:3e:a8:ad:f4:c0:
5d:6d:ce:08:3d:7b:6e:fb:28:86:e7:17:29:2e:33:
08:44:fb:60:be:2d:b8:4c:d0:f4:e6:18:2b:ab:64:
e3:97:00:f5:75:e4:f2:fc:d9:75:2d:b7:2c:2e:9d:
4e:aa:b9:52:a7:57:0a:f7:bd:4c:54:1e:4b:37:c2:
96:75:b2:87:09:96:0b:e1:96:16:43:38:7c:f0:17:
ba:c8:86:69:cf:e1:f3:01:7d:64:c6:39:bc:35:42:
61:75:f7:0f:ea:27:f6:11:24:1c:0b:80:e7:d3:2a:
b3:9f:b2:b8:a8:37:29:53:03:40:bb:7a:23:cd:86:
a9:17:51:00:3e:76:30:6b:b6:8e:04:a0:c2:c6:39:
d8:55:4a:31:a5:db:d6:4a:94:8a:72:23:fb:34:0a:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:70:5C:83:0B:02:3C:A1:B4:E2:D3:F5:A1:8F:52:CC:C4:B3:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4f7956c-1c30-3954-85b4-33648205eb2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:8e:c9:ce:ee:4a:0d:97:d2:96:32:11:b5:2c:cc:5e:d0:9c:
bb:82:56:45:94:cb:c2:43:0f:4e:1c:3f:8a:50:ed:3b:4a:05:
2b:de:85:4d:24:89:8b:10:1e:e2:61:db:17:17:aa:7e:86:17:
2b:48:0a:fd:56:6e:87:bc:4f:8b:8a:23:96:16:25:ae:95:8f:
b9:19:b1:f8:6d:f1:91:c4:05:bd:11:38:52:86:62:16:1b:87:
9f:77:90:1a:4c:51:65:66:65:8f:34:e9:28:2d:4f:c8:2b:dd:
37:7f:ab:36:fb:b1:11:7b:43:58:32:85:83:2d:92:46:0c:c5:
5d:cb:38:f8:eb:00:f7:3a:04:ae:2a:28:da:4b:47:fb:05:18:
71:7b:59:96:53:2e:89:61:27:a3:58:13:9a:e2:50:8e:ae:f1:
8a:17:77:7f:9d:ee:25:ae:f0:71:0e:f2:d9:46:eb:b5:e3:e8:
9c:7f:2b:c6:f7:6b:2a:15:3a:b6:c3:e5:25:7d:08:24:98:48:
6a:1e:c5:7c:c6:02:11:be:3d:05:63:ba:f4:92:a7:9b:1e:50:
a3:03:4e:56:d0:07:d3:45:c0:b7:56:5f:98:eb:dd:0a:2d:2a:
7e:6f:1e:3d:df:45:cc:b0:28:03:1a:cf:a2:df:a0:c8:a1:07:
2e:5c:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:34 2025 by rpki-client