Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ac125d72-a4cf-3963-8185-d01b511894bc.roa
File: ac125d72-a4cf-3963-8185-d01b511894bc.roa (raw, json)
Hash identifier: I+2lNYko/qhb+cydXCwczx7jJWmTIGo2SJhlVeWE53o=
Subject key identifier: B6:5E:DB:AB:97:75:F5:00:1F:E0:A4:A2:A4:A6:80:A9:70:B0:9D:7F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489B0BF185747D5F224CCDF380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ac125d72-a4cf-3963-8185-d01b511894bc.roa
Signing time: Mon 20 Jan 2025 09:01:15 +0000
ROA not before: Mon 20 Jan 2025 09:01:15 +0000
ROA not after: Sun 20 Apr 2025 08:01:15 +0000
asID: 329007
IP address blocks: 172.94.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 06:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:0b:f1:85:74:7d:5f:22:4c:cd:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 20 09:01:15 2025 GMT
Not After : Apr 20 08:01:15 2025 GMT
Subject: CN=1fa4cf65-c036-4ca0-ac63-f63b9839d71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:3d:39:69:26:3a:91:62:a3:25:c5:29:82:
db:da:22:f8:17:74:0e:a7:44:0b:5f:30:78:8c:49:
14:0f:c6:b4:d5:23:8a:03:c1:33:a5:98:e9:4b:9e:
09:39:94:2e:c0:71:55:17:49:de:02:42:d5:be:af:
73:54:8f:66:5a:1d:e4:79:3d:81:fb:c2:18:0a:59:
01:92:e6:75:0a:0e:82:ed:66:7e:52:60:0c:df:10:
df:66:47:83:fb:ef:e7:42:e0:d4:4d:a6:c8:4b:25:
4b:2b:3d:83:7b:1e:cb:04:e4:a2:3d:e7:e2:68:d2:
1c:0c:a6:34:72:a9:11:78:02:47:4a:1a:40:ef:c9:
9d:fc:97:8c:44:c8:3c:62:95:88:71:98:91:f4:65:
4d:02:04:d0:e7:b0:35:e3:ac:d9:73:de:a4:13:fc:
cb:66:52:cb:e7:07:c8:78:fb:fa:11:64:82:8b:19:
01:5d:ff:43:c4:87:c8:14:32:87:4b:98:d4:a5:f0:
5c:51:25:84:e6:f0:c3:0d:46:f5:b1:e0:ff:a7:a9:
f0:8e:7a:16:34:92:30:fb:59:e1:00:f9:bb:9a:91:
7f:83:6b:e7:ee:c6:52:29:a3:d6:f8:bc:e3:23:f0:
3e:42:da:40:cd:d0:37:44:9e:52:22:45:82:f5:4e:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5E:DB:AB:97:75:F5:00:1F:E0:A4:A2:A4:A6:80:A9:70:B0:9D:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ac125d72-a4cf-3963-8185-d01b511894bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:67:59:eb:0b:1e:66:25:70:45:36:e1:08:49:d9:30:7f:19:
02:28:dc:2c:db:d7:c0:95:47:97:52:13:ab:cc:11:26:48:f1:
d4:f6:f0:a9:61:a0:b5:22:f5:e7:00:eb:de:d5:39:45:66:8f:
8b:d2:86:af:8e:30:db:4b:24:bc:0c:f7:73:e4:30:e4:b6:c6:
03:43:fa:3c:9b:f0:39:c3:59:a3:5b:22:d7:cd:d0:f5:cf:33:
0f:47:6a:98:a3:b1:f2:f3:2f:1a:78:f8:a2:68:87:15:09:36:
a9:e7:d9:1c:8a:20:dd:61:74:c1:e8:68:73:90:47:fb:cd:79:
84:ca:3c:a3:b6:0e:f2:8e:4e:56:54:95:67:a7:cf:5e:ef:d2:
a6:af:7e:61:ce:e5:91:db:c2:90:e8:52:b5:1d:ab:f8:b0:76:
52:6c:f0:6d:27:06:7a:02:aa:8f:6f:ea:64:08:1a:8a:19:39:
11:59:d3:6d:81:0e:1a:e4:10:e8:2c:4b:74:d4:9e:eb:60:ad:
ac:84:0e:8b:49:76:d7:06:52:64:8d:b7:12:a8:89:e3:af:63:
66:8e:d8:cc:04:a8:03:46:ca:aa:ac:5d:ae:44:80:19:ec:46:
f6:0e:41:97:21:ba:12:4d:0b:c0:ff:a9:dd:70:15:1d:b5:fe:
87:b3:56:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEibC/GFdH1fIkzN84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyMDA5MDExNVoXDTI1MDQyMDA4MDExNVowLzEtMCsGA1UEAxMk
MWZhNGNmNjUtYzAzNi00Y2EwLWFjNjMtZjYzYjk4MzlkNzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXI9OWkmOpFioyXFKYLb2iL4F3QOp0QLXzB4
jEkUD8a01SOKA8EzpZjpS54JOZQuwHFVF0neAkLVvq9zVI9mWh3keT2B+8IYClkB
kuZ1Cg6C7WZ+UmAM3xDfZkeD++/nQuDUTabISyVLKz2Dex7LBOSiPefiaNIcDKY0
cqkReAJHShpA78md/JeMRMg8YpWIcZiR9GVNAgTQ57A146zZc96kE/zLZlLL5wfI
ePv6EWSCixkBXf9DxIfIFDKHS5jUpfBcUSWE5vDDDUb1seD/p6nwjnoWNJIw+1nh
APm7mpF/g2vn7sZSKaPW+LzjI/A+QtpAzdA3RJ5SIkWC9U65pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZe26uXdfUAH+CkoqSmgKlwsJ1/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWMxMjVkNzItYTRjZi0z
OTYzLTgxODUtZDAxYjUxMTg5NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxnWesLHmYlcEU24QhJ2TB/GQIo3Czb18CVR5dSE6vMESZI8dT28Klh
oLUi9ecA697VOUVmj4vShq+OMNtLJLwM93PkMOS2xgND+jyb8DnDWaNbItfN0PXP
Mw9HapijsfLzLxp4+KJohxUJNqnn2RyKIN1hdMHoaHOQR/vNeYTKPKO2DvKOTlZU
lWenz17v0qavfmHO5ZHbwpDoUrUdq/iwdlJs8G0nBnoCqo9v6mQIGooZORFZ022B
DhrkEOgsS3TUnutgrayEDotJdtcGUmSNtxKoieOvY2aO2MwEqANGyqqsXa5EgBns
RvYOQZchuhJNC8D/qd1wFR21/oezVrU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:27 2025 by rpki-client