Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e9167532-c4b3-3989-87c7-8bd3b2b4a5a2.roa
File: e9167532-c4b3-3989-87c7-8bd3b2b4a5a2.roa (raw, json)
Hash identifier: n6V7gYRdpesfbFe8jzkH3Mg6FmqU4IrJvAkCMzCe004=
Subject key identifier: 66:62:50:F3:11:6E:ED:09:5D:C8:30:AB:B0:59:8D:40:BD:BD:D1:66
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858493CA45CABFC5DBD3CE12FB380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e9167532-c4b3-3989-87c7-8bd3b2b4a5a2.roa
Signing time: Wed 19 Mar 2025 06:13:30 +0000
ROA not before: Wed 19 Mar 2025 06:13:30 +0000
ROA not after: Tue 17 Jun 2025 06:13:30 +0000
asID: 329007
IP address blocks: 172.94.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 06:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:a4:5c:ab:fc:5d:bd:3c:e1:2f:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 19 06:13:30 2025 GMT
Not After : Jun 17 06:13:30 2025 GMT
Subject: CN=8f4d56fe-6970-433f-bd75-cb3956cf0504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:12:20:c2:0f:d3:95:8c:c4:96:cc:23:f9:a2:
67:5f:71:ab:ca:17:d0:c8:52:a0:37:14:db:ab:af:
a7:7a:93:14:5b:af:d3:1b:2e:0c:42:6b:8f:59:94:
9e:9a:33:db:87:1c:cb:23:df:1d:21:9f:76:28:70:
85:23:b4:d7:0c:15:03:68:34:4f:ee:70:22:3e:0a:
97:ab:47:84:c0:8a:74:f5:3f:37:8a:65:5e:20:05:
0a:ca:35:0d:28:ad:c6:52:3b:5b:c8:e5:54:f9:75:
99:09:ad:8f:50:06:83:67:64:86:7a:34:ef:33:81:
fe:a6:a2:a0:89:94:35:b8:86:97:00:ca:ef:a9:b4:
d8:0b:f0:f1:52:3a:8d:16:4f:a0:3d:6d:b1:fc:2c:
16:a8:97:fe:65:9f:e7:12:bf:00:63:5f:8a:ed:c0:
a0:47:21:7e:6a:fb:0a:08:26:d0:b0:37:87:de:49:
e0:a8:c9:f2:97:34:9a:e8:b7:02:e9:fb:24:d6:1f:
62:d1:fd:b9:ec:ef:54:9f:a4:87:f6:41:51:69:30:
d8:12:f7:2b:c5:50:a3:35:56:17:22:00:13:65:1e:
2d:31:27:8e:a8:0f:28:5f:e7:6b:e6:e6:31:b9:70:
e7:84:e4:41:6c:3b:d6:42:1e:72:e8:0c:9d:04:9e:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:50:F3:11:6E:ED:09:5D:C8:30:AB:B0:59:8D:40:BD:BD:D1:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e9167532-c4b3-3989-87c7-8bd3b2b4a5a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:61:9d:7f:35:e4:ee:cc:a5:4a:4f:d5:32:fa:eb:b6:f4:81:
9c:78:a6:f4:b3:a0:61:40:17:fb:86:88:bd:5d:d7:39:d8:92:
ee:55:5a:38:a7:26:a9:d2:b2:fa:23:c7:66:fa:27:33:00:31:
ed:05:15:c1:84:13:bb:bc:29:da:aa:a6:65:8e:0c:3c:63:1b:
82:58:a8:d4:5c:42:02:88:be:6e:d4:c1:3b:36:d4:11:b2:5f:
a6:30:82:d9:d8:f9:da:cb:47:b9:2a:cd:0a:8a:9c:3a:e8:62:
00:73:48:02:9b:ac:6f:2d:ec:86:c6:cd:16:34:42:02:d0:04:
43:30:ed:54:9f:74:a1:43:8e:99:a9:d2:ba:5e:41:4c:21:ab:
96:97:f5:cc:75:49:2b:e5:d3:04:3d:70:8b:4b:f4:f9:bf:8c:
74:07:99:54:6f:3b:56:fb:49:7e:37:d2:7f:75:9a:90:3f:89:
b4:8d:25:4e:22:f4:55:53:a8:28:3d:f3:26:8d:8c:01:f5:77:
07:df:24:77:e6:68:e6:19:c2:38:84:be:7b:01:61:79:e6:cb:
29:71:f3:5d:d5:e7:be:f5:bd:8d:b9:50:a7:b2:9d:4f:65:72:
32:52:29:88:3d:86:89:01:22:5a:98:f3:8d:45:74:4d:32:39:
09:3c:60:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:07 2025 by rpki-client