Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d827d3dc-15a1-3580-8aea-94196cdde6ff.roa
File: d827d3dc-15a1-3580-8aea-94196cdde6ff.roa (raw, json)
Hash identifier: jYNFcK+H5JfVQpLsTO75X8RfM45gc2yzVzbJw8vj3YU=
Subject key identifier: C9:EB:8C:4C:67:C9:4F:26:9D:1A:8F:C4:36:35:4B:22:7E:3F:FE:45
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848AECC4EDFC3C5ABC20C3D8180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d827d3dc-15a1-3580-8aea-94196cdde6ff.roa
Signing time: Mon 27 Jan 2025 10:49:12 +0000
ROA not before: Mon 27 Jan 2025 10:49:12 +0000
ROA not after: Sun 27 Apr 2025 09:49:12 +0000
asID: 208485
IP address blocks: 172.94.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 06:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ae:cc:4e:df:c3:c5:ab:c2:0c:3d:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 27 10:49:12 2025 GMT
Not After : Apr 27 09:49:12 2025 GMT
Subject: CN=797fa0b9-c6d2-4aa7-aedc-75c4df22e867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:a8:42:cc:9a:1c:b4:6e:e5:30:81:0f:b2:
09:de:63:2d:27:32:76:ba:ed:f5:6c:d2:44:ea:b7:
ab:b0:4b:15:27:82:e0:da:ff:7c:f8:40:a2:98:39:
bc:0d:3a:64:d4:4b:6d:d4:02:15:4c:eb:74:a9:bb:
13:c9:9b:2a:d2:2c:fb:06:74:20:03:ce:5d:b7:5e:
b0:6d:ea:84:44:02:c8:0b:63:46:35:42:f1:d8:b4:
57:e1:cd:38:3a:34:46:1b:a3:07:b3:1c:ae:e8:03:
4d:71:38:a8:18:73:b3:9d:26:a8:e2:93:8f:37:42:
55:45:8b:9c:a3:aa:1a:96:91:e4:71:a3:29:94:df:
33:aa:ca:ee:36:5a:d3:58:4c:26:c1:ec:24:0b:f6:
be:fd:ac:1e:31:90:26:71:3a:61:c8:06:a8:f3:0b:
15:22:ed:a6:6a:82:80:65:c4:12:96:0b:da:43:7b:
f9:44:89:b6:d9:2c:c9:4f:b7:ad:c4:81:22:a8:2b:
c5:5e:fe:6e:05:ed:14:c2:9f:80:0d:79:a3:70:33:
f1:f5:c6:b8:9d:cf:97:1f:4b:30:d0:08:f1:50:63:
1d:a7:86:12:33:19:c0:d0:5f:d1:05:49:15:3b:21:
12:5c:31:cb:d8:a0:04:7e:83:78:15:f0:c8:5c:df:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:8C:4C:67:C9:4F:26:9D:1A:8F:C4:36:35:4B:22:7E:3F:FE:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d827d3dc-15a1-3580-8aea-94196cdde6ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:2f:fd:79:4b:62:22:02:92:ce:6c:a7:6e:ad:0c:29:d5:74:
63:f8:b5:ce:24:2a:4d:11:24:41:72:9b:22:b6:78:28:37:ff:
72:05:0d:cc:5d:8f:b6:a4:7c:01:24:84:63:0c:41:84:dd:5a:
13:59:cf:4b:96:41:b0:b9:4b:ef:3f:ce:ea:f6:c3:b2:06:71:
21:56:6d:20:5f:65:47:ed:bd:2a:a8:66:4c:27:ea:7f:09:92:
4c:a0:37:49:c1:ad:f4:29:e0:44:7f:9b:a7:63:58:5b:81:d5:
67:0a:c4:0e:27:08:40:af:fc:ba:82:40:34:36:d6:71:9a:6c:
1a:cb:9f:40:a1:73:95:8a:87:ec:f5:e7:a1:77:8a:9f:49:04:
53:35:92:b6:1c:f6:71:0a:4e:13:4c:5f:43:1c:a0:90:32:10:
e0:0e:bd:93:01:0a:c4:82:2b:e7:70:db:00:f1:29:34:0e:f3:
a4:53:b4:58:1a:b7:5c:61:51:bf:ef:7d:9b:c9:5c:9e:ff:8c:
7c:96:96:1a:87:95:67:a5:cf:eb:f1:8d:79:40:00:a9:11:2d:
9e:f3:8e:38:e9:66:72:2f:b3:5f:b4:43:a9:e4:96:bd:6e:af:
63:af:86:de:e3:cc:1b:32:16:da:48:64:65:05:0f:d1:c1:1b:
e8:62:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:43 2025 by rpki-client