Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d23a8203-96c8-3201-bacd-7a639d9ba05d.roa
File: d23a8203-96c8-3201-bacd-7a639d9ba05d.roa (raw, json)
Hash identifier: 3p8pKrypRMG6VjuitsQnJD7hpN5KGeZo0QqNoB6rWHs=
Subject key identifier: 7A:5C:09:DF:9A:E8:17:58:28:40:EF:A5:C6:75:45:45:76:0B:8A:C6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848FF9D254015A139ED90020080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d23a8203-96c8-3201-bacd-7a639d9ba05d.roa
Signing time: Tue 25 Feb 2025 09:34:39 +0000
ROA not before: Tue 25 Feb 2025 09:34:39 +0000
ROA not after: Mon 26 May 2025 08:34:39 +0000
asID: 329007
IP address blocks: 172.111.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:9d:25:40:15:a1:39:ed:90:02:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 25 09:34:39 2025 GMT
Not After : May 26 08:34:39 2025 GMT
Subject: CN=f540a22f-9d3d-4570-901d-8ce4f89ad61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3f:02:f9:c7:52:38:65:e0:67:14:b6:54:b8:
17:69:bc:1c:e6:62:d9:98:33:77:0f:e2:2d:45:7e:
97:ff:da:ad:2f:8b:1c:46:f8:d1:45:ee:cc:1f:91:
b4:f3:69:ac:d8:23:94:71:c0:38:6b:44:f1:86:a4:
b9:63:af:ef:3f:70:8f:bf:cf:01:dc:79:84:cd:52:
af:14:f7:09:d6:cc:ef:6e:a9:fc:74:f5:73:07:3b:
33:04:64:8a:06:96:95:6a:70:75:d1:2e:6b:38:72:
3f:c4:52:0b:b4:54:e2:cf:20:6c:5e:40:80:e0:4a:
9d:cd:91:fd:0b:dc:85:60:54:ce:4b:5a:12:fb:a5:
eb:b6:3f:40:84:b7:3e:4e:00:70:5d:04:4f:c2:cb:
37:2a:ca:03:3c:4a:08:c6:d0:3d:88:e1:b3:ca:4f:
2f:e6:53:57:9e:e6:c0:d7:3b:85:89:e2:0d:14:f8:
73:06:25:09:a3:5b:ed:34:d6:a3:b8:5e:30:aa:d8:
aa:0e:86:5d:33:6f:f4:97:b6:39:e8:f8:cb:c8:c1:
a9:95:29:52:85:95:23:33:0b:38:74:36:94:a2:60:
2a:6c:68:53:36:88:af:89:c4:f5:ac:22:c7:8d:50:
c6:30:e9:42:f8:55:ba:e4:97:91:40:7e:21:db:d5:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:09:DF:9A:E8:17:58:28:40:EF:A5:C6:75:45:45:76:0B:8A:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d23a8203-96c8-3201-bacd-7a639d9ba05d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:04:fd:da:42:65:0c:3c:70:78:77:f1:1e:4a:2f:8d:ae:a6:
40:b2:6f:d4:58:32:04:25:33:23:af:63:4f:ee:d3:44:9a:d7:
48:2a:1e:f2:35:5a:3e:c5:25:f3:33:8f:04:c1:c0:78:15:cf:
4b:0e:2a:33:40:da:4a:ea:79:f2:eb:a3:ed:5d:71:32:9d:f2:
99:30:70:e3:45:17:ca:95:60:eb:6f:9f:21:bc:e1:7f:c8:c5:
9e:6a:c5:44:9e:64:a2:3f:6f:cc:67:c0:ba:6d:1e:05:25:59:
ef:60:4a:10:2c:75:4b:2c:4a:da:85:f7:9f:b0:9d:6d:c4:30:
3c:45:56:49:90:da:a4:7b:95:e3:c5:34:5a:63:75:ed:ba:a8:
24:b0:e3:fc:b1:05:ea:c5:90:5b:b5:c9:27:dd:b3:25:0b:f4:
4b:97:4f:09:5c:cf:9d:e5:8f:30:fa:a3:20:6c:69:21:f7:7f:
cc:18:fc:61:fc:4a:a9:eb:a3:28:f6:93:a4:9a:5b:28:4d:c5:
10:cc:c5:49:d8:5c:55:99:6e:18:97:2e:47:fb:27:af:e5:57:
50:2c:66:d2:88:98:56:5b:94:b1:37:93:dc:8e:1f:73:c3:9b:
19:e3:0c:d0:ec:10:5f:26:59:b9:82:46:2a:75:02:c3:80:0b:
02:45:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:25 2025 by rpki-client