Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c05974f1-2a6a-32cf-8f3c-bf6a42c369d3.roa
File: c05974f1-2a6a-32cf-8f3c-bf6a42c369d3.roa (raw, json)
Hash identifier: /2kztYnoTv82Om6eetIBrMTCTlYmGi8Je48n0MQu1yk=
Subject key identifier: 17:35:22:04:8A:67:57:BC:05:6B:C4:77:40:1B:8B:48:84:90:E7:47
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858492642D3C983A4B89A911A7480
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c05974f1-2a6a-32cf-8f3c-bf6a42c369d3.roa
Signing time: Tue 11 Mar 2025 05:49:11 +0000
ROA not before: Tue 11 Mar 2025 05:49:11 +0000
ROA not after: Mon 09 Jun 2025 05:49:11 +0000
asID: 329007
IP address blocks: 104.37.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 06:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:26:42:d3:c9:83:a4:b8:9a:91:1a:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 11 05:49:11 2025 GMT
Not After : Jun 9 05:49:11 2025 GMT
Subject: CN=20ce9f61-c168-4051-a9a7-1d48240d79c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:e8:1c:3b:13:7a:78:37:22:c6:65:f0:df:
ba:60:72:53:34:d6:26:ea:78:f5:54:bd:6f:7c:57:
4e:4e:b3:cc:23:6d:03:13:bb:6c:a2:51:52:11:3d:
3d:f7:ba:33:0d:3a:de:15:b6:b1:b2:e9:75:0c:3d:
b8:e0:5f:bf:67:df:92:7f:9d:3a:06:c3:68:bb:b3:
dd:a5:f4:cd:28:da:aa:1b:2f:df:e3:c3:13:4b:d1:
0f:ca:96:c0:31:ed:3c:d4:a7:5f:1e:9e:1c:e9:a9:
5b:d2:d4:e2:10:41:1b:b3:cb:af:46:43:dc:36:05:
04:93:af:35:8e:23:c7:0d:2f:ff:72:71:d6:72:80:
19:5d:5e:aa:0f:d1:af:fb:2b:c7:eb:ea:a4:9b:c5:
9e:83:e0:3b:5a:9e:66:02:e4:d7:45:e1:cd:ca:b2:
cf:fa:49:ca:01:1b:d3:9e:b4:fd:56:3a:34:80:50:
e2:80:d1:d3:81:5d:7a:87:a7:63:b6:8d:cb:38:8e:
43:46:5c:93:05:66:36:e1:de:f1:35:6f:27:f8:62:
b8:ea:59:d1:8f:90:a8:a6:b3:68:c9:63:53:c8:00:
ef:da:09:78:33:0f:57:21:13:7f:51:36:00:04:15:
4e:a2:ac:c2:12:f1:93:f4:07:7c:1d:4d:20:9c:25:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:22:04:8A:67:57:BC:05:6B:C4:77:40:1B:8B:48:84:90:E7:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c05974f1-2a6a-32cf-8f3c-bf6a42c369d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:36:cd:d8:cf:04:9d:1c:66:3c:2f:49:04:a8:45:b5:be:b4:
1b:39:81:16:61:1d:b3:1d:bf:b8:bb:49:34:6a:a0:87:83:4d:
39:b0:d4:26:b8:51:11:38:87:0a:23:02:64:4b:4c:58:82:3e:
d1:56:8d:4b:4b:07:a5:06:b1:1c:a8:e5:97:82:7c:3c:34:92:
a6:14:b6:8f:04:f7:e9:c9:d3:c7:eb:73:6b:ab:ce:7d:b7:0c:
14:b7:bd:73:cd:d8:4c:f2:e9:c2:b0:35:a0:96:43:1b:85:76:
43:e3:a2:ba:b7:fd:53:fc:4b:a6:f1:32:99:30:2f:3e:f7:98:
32:a8:8e:ae:bd:6b:5b:c5:e0:a3:01:62:dc:53:98:60:ee:fb:
7a:21:89:fa:51:e6:bc:01:cb:3c:41:a7:97:71:05:99:56:be:
46:2f:31:7c:03:1e:6c:fb:b0:0e:eb:dd:0b:3c:00:97:79:08:
ee:e5:87:e1:ab:52:f4:c7:95:8f:bb:ce:75:4d:c9:5a:0c:63:
ba:d6:d9:62:ba:9a:be:98:9e:a3:65:12:91:77:bc:f6:a0:8f:
96:05:c4:38:14:11:84:dd:4e:0a:b1:a9:2d:42:52:d8:b2:67:
19:e7:eb:e3:84:35:90:36:19:02:e1:4a:ce:e5:4f:ed:da:6b:
dc:b8:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:03 2025 by rpki-client