Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3790daf-a161-3e5e-a75a-def11a8f1caa.roa
File: c3790daf-a161-3e5e-a75a-def11a8f1caa.roa (raw, json)
Hash identifier: MVexJ0G3YuWOkfSVJYXcGWmDE71qN+gSZD94TG+8F2E=
Subject key identifier: F2:31:6A:B7:59:94:8C:D8:3C:DC:E1:BC:8B:DD:5C:67:6A:6F:D1:4F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848AEC97D08562B0D9C00F2FF80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3790daf-a161-3e5e-a75a-def11a8f1caa.roa
Signing time: Mon 27 Jan 2025 10:43:31 +0000
ROA not before: Mon 27 Jan 2025 10:43:31 +0000
ROA not after: Sun 27 Apr 2025 09:43:31 +0000
asID: 208485
IP address blocks: 172.94.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 06:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ae:c9:7d:08:56:2b:0d:9c:00:f2:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 27 10:43:31 2025 GMT
Not After : Apr 27 09:43:31 2025 GMT
Subject: CN=f73aef3c-c1ea-4a2c-b902-5951f1378489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:d3:a7:cf:56:fd:56:bd:df:2e:7b:47:ed:
82:97:0e:32:74:78:6d:a5:74:74:95:e4:88:71:be:
b9:b9:5f:b0:ec:f3:ce:59:ac:91:63:30:d2:8f:19:
9a:ec:2d:00:b9:0f:d4:1f:e7:d5:8e:14:a0:c1:f0:
9c:1a:da:14:74:ab:64:94:6f:b4:93:d4:be:ce:27:
d2:2b:e8:b3:d5:1a:a5:d9:39:e2:ac:9d:4c:07:ef:
28:67:ef:1c:fb:56:28:06:24:e8:c7:b6:0a:31:60:
3c:b1:f1:7a:62:0b:59:41:62:77:e2:9f:ad:8c:dd:
bb:b9:c3:82:0d:17:5e:d9:ca:fa:a3:f7:34:41:df:
ca:7c:3b:bd:a3:92:bf:9a:41:7c:c2:ec:0d:c8:58:
24:5a:5d:92:01:13:9a:b6:f4:d3:b4:9c:e4:26:a4:
f3:0c:b8:b2:49:19:00:69:d3:97:68:c7:2a:00:c2:
2e:57:ec:67:6c:4f:1d:6a:c0:95:52:35:14:2a:79:
52:1f:f9:d5:61:6d:df:46:5e:f4:90:c6:ea:02:ac:
7a:f4:ac:86:01:64:b3:d4:ca:f7:7f:cb:ca:2a:6a:
b3:50:97:74:10:77:21:f2:0a:51:94:2d:d2:5f:98:
52:19:3e:62:6c:47:2e:4d:63:83:20:65:bb:63:2a:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:6A:B7:59:94:8C:D8:3C:DC:E1:BC:8B:DD:5C:67:6A:6F:D1:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3790daf-a161-3e5e-a75a-def11a8f1caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:10:ad:5f:42:38:31:0b:61:65:82:eb:a5:6d:6e:25:97:10:
b5:91:df:8f:9c:65:bd:07:8d:4c:c6:db:8f:19:5d:3c:7d:46:
30:ee:ba:0e:53:9b:9d:ce:ef:73:2c:f5:8d:14:d7:c3:1b:d0:
87:41:56:ef:87:fc:9f:15:f4:b4:e7:2d:25:6f:86:26:e8:33:
84:f4:ca:f7:0b:58:fd:aa:78:7b:dd:3c:1b:3a:1f:a5:18:46:
e9:61:a6:7a:15:a0:c6:1e:10:ec:b9:1c:09:f2:cf:1b:d4:a3:
16:c5:2a:46:38:b0:90:12:9b:48:88:e6:ec:a9:cd:68:ab:9c:
d1:79:8f:c1:5b:89:e3:21:11:d7:d9:aa:be:34:db:62:81:97:
f2:81:0e:c8:10:b9:41:fd:ee:41:9f:0f:55:0f:a7:e5:6f:62:
62:ff:cf:71:dd:ab:64:17:98:15:5e:d4:80:9c:e8:de:87:de:
ca:59:26:d1:3c:f8:8e:85:58:32:59:85:6e:28:03:7e:38:e9:
d8:b2:60:71:cd:cc:f6:a1:a2:5b:95:f6:76:ef:81:e9:93:5d:
bc:70:38:39:be:ea:91:ff:8c:d4:13:8c:84:97:cf:36:aa:da:
fa:d2:d2:d7:80:a0:5e:7b:d4:cf:19:d0:3b:c6:71:9c:64:15:
d4:41:d7:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiuyX0IVisNnADy/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyNzEwNDMzMVoXDTI1MDQyNzA5NDMzMVowLzEtMCsGA1UEAxMk
ZjczYWVmM2MtYzFlYS00YTJjLWI5MDItNTk1MWYxMzc4NDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmofTp89W/Va93y57R+2Clw4ydHhtpXR0leSI
cb65uV+w7PPOWayRYzDSjxma7C0AuQ/UH+fVjhSgwfCcGtoUdKtklG+0k9S+zifS
K+iz1Rql2TnirJ1MB+8oZ+8c+1YoBiTox7YKMWA8sfF6YgtZQWJ34p+tjN27ucOC
DRde2cr6o/c0Qd/KfDu9o5K/mkF8wuwNyFgkWl2SAROatvTTtJzkJqTzDLiySRkA
adOXaMcqAMIuV+xnbE8dasCVUjUUKnlSH/nVYW3fRl70kMbqAqx69KyGAWSz1Mr3
f8vKKmqzUJd0EHch8gpRlC3SX5hSGT5ibEcuTWODIGW7YypJYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIxardZlIzYPNzhvIvdXGdqb9FPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzM3OTBkYWYtYTE2MS0z
ZTVlLWE3NWEtZGVmMTFhOGYxY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMQrV9CODELYWWC66VtbiWXELWR34+cZb0HjUzG248ZXTx9RjDuug5T
m53O73Ms9Y0U18Mb0IdBVu+H/J8V9LTnLSVvhiboM4T0yvcLWP2qeHvdPBs6H6UY
RulhpnoVoMYeEOy5HAnyzxvUoxbFKkY4sJASm0iI5uypzWirnNF5j8FbieMhEdfZ
qr4022KBl/KBDsgQuUH97kGfD1UPp+VvYmL/z3Hdq2QXmBVe1ICc6N6H3spZJtE8
+I6FWDJZhW4oA3446diyYHHNzPaholuV9nbvgemTXbxwODm+6pH/jNQTjISXzzaq
2vrS0teAoF571M8Z0DvGcZxkFdRB10I=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:28 2025 by rpki-client