Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f1b20828-baee-3323-964a-931c51b35937.roa
File: f1b20828-baee-3323-964a-931c51b35937.roa (raw, json)
Hash identifier: zoxzzyU4MJbaMrFTvUZ9G5DH5NnjsaGY+HdLrKCFBvk=
Subject key identifier: D1:27:DF:6C:17:4D:CC:6C:83:A3:1B:3D:A7:1F:DA:AA:49:87:6D:69
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848AECBF6BB55821598EE4AC380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f1b20828-baee-3323-964a-931c51b35937.roa
Signing time: Mon 27 Jan 2025 10:48:30 +0000
ROA not before: Mon 27 Jan 2025 10:48:30 +0000
ROA not after: Sun 27 Apr 2025 09:48:30 +0000
asID: 208485
IP address blocks: 172.94.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 07:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ae:cb:f6:bb:55:82:15:98:ee:4a:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 27 10:48:30 2025 GMT
Not After : Apr 27 09:48:30 2025 GMT
Subject: CN=afa3c8f7-71b2-489f-81bf-b353e2603819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:4a:2b:6c:fb:ed:4b:25:62:2d:ae:39:eb:
85:5e:e7:67:a2:da:71:49:e5:9e:22:bf:fd:a6:2b:
fa:b0:44:f1:72:78:65:87:3a:79:0a:e5:a8:a2:b4:
bc:f4:c7:6b:fb:d4:02:00:8e:9f:61:fb:77:cf:0e:
88:13:eb:13:e2:19:bc:c1:28:36:20:3c:d2:57:be:
85:45:61:70:54:62:2e:2e:39:6d:06:5b:81:17:d7:
51:0d:c8:e0:04:cd:85:a0:13:b0:73:38:86:72:5f:
03:c1:99:1e:73:9c:e5:de:9a:3b:c3:bc:2a:88:81:
81:c1:b3:99:c8:94:cc:99:67:1b:4b:32:1f:10:d9:
29:8a:ab:f7:1d:9d:99:5d:f4:b1:41:0e:e6:b4:b7:
2a:71:a0:85:e9:7b:e5:68:57:9f:9d:a7:03:6a:0b:
68:bd:53:bb:89:14:cc:b3:b2:6e:8f:11:0e:1d:38:
2a:a8:82:dc:70:6f:64:04:f1:c3:d6:3b:0a:a1:7e:
b8:9e:51:50:49:bc:f7:0a:d0:7e:f5:0d:25:14:95:
9b:77:b2:46:b5:56:d9:1a:1f:ba:37:ff:80:c2:98:
5a:b4:ab:24:ed:e1:d2:d8:a8:82:14:c0:a6:f3:01:
e8:59:e0:90:6a:fe:77:4d:78:36:15:e8:37:81:17:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:DF:6C:17:4D:CC:6C:83:A3:1B:3D:A7:1F:DA:AA:49:87:6D:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f1b20828-baee-3323-964a-931c51b35937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:0d:44:21:52:d4:83:2c:cc:cf:81:54:6f:13:86:9b:55:65:
be:56:38:b6:c1:10:af:51:3c:1b:06:a6:ea:a5:76:db:94:4a:
d2:74:55:57:7c:42:76:50:b9:f3:a3:b8:ed:35:bd:80:2f:1b:
06:93:c0:07:c3:f3:4b:b7:0e:40:6f:17:4c:a1:df:88:ca:9c:
df:d5:f0:17:43:da:c9:b8:69:80:1e:c4:4a:a6:c6:16:b4:71:
38:86:be:11:73:53:45:2b:78:a7:db:b8:2f:62:45:50:56:4b:
d3:16:dd:15:b0:2e:7f:d8:aa:19:7d:5b:00:ec:a8:f0:91:2e:
12:60:ec:41:23:b9:fc:64:55:60:4a:3d:5f:7c:d1:c1:3f:fb:
de:10:4b:c4:ac:1a:11:c9:c9:94:7c:3f:aa:1d:d7:06:68:0c:
44:56:42:60:28:8e:ca:00:33:54:27:1c:b0:99:30:c9:26:d4:
34:74:02:00:01:c5:3f:d2:24:c7:ee:57:d9:a5:bb:a0:79:75:
76:bb:d3:14:cb:98:2e:97:88:4c:65:e5:a2:cc:c0:d1:cf:66:
6f:47:b8:ac:cf:9e:bc:28:6a:cf:57:51:eb:0b:5d:25:9b:a7:
50:a0:bb:63:fe:1a:b1:1c:4e:cf:55:72:46:d8:3e:43:41:52:
e5:78:10:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiuy/a7VYIVmO5Kw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyNzEwNDgzMFoXDTI1MDQyNzA5NDgzMFowLzEtMCsGA1UEAxMk
YWZhM2M4ZjctNzFiMi00ODlmLTgxYmYtYjM1M2UyNjAzODE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZRKK2z77UslYi2uOeuFXudnotpxSeWeIr/9
piv6sETxcnhlhzp5CuWoorS89Mdr+9QCAI6fYft3zw6IE+sT4hm8wSg2IDzSV76F
RWFwVGIuLjltBluBF9dRDcjgBM2FoBOwcziGcl8DwZkec5zl3po7w7wqiIGBwbOZ
yJTMmWcbSzIfENkpiqv3HZ2ZXfSxQQ7mtLcqcaCF6XvlaFefnacDagtovVO7iRTM
s7JujxEOHTgqqILccG9kBPHD1jsKoX64nlFQSbz3CtB+9Q0lFJWbd7JGtVbZGh+6
N/+AwphatKsk7eHS2KiCFMCm8wHoWeCQav53TXg2Feg3gRedWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEn32wXTcxsg6MbPacf2qpJh21pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjFiMjA4MjgtYmFlZS0z
MzIzLTk2NGEtOTMxYzUxYjM1OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQNRCFS1IMszM+BVG8ThptVZb5WOLbBEK9RPBsGpuqldtuUStJ0VVd8
QnZQufOjuO01vYAvGwaTwAfD80u3DkBvF0yh34jKnN/V8BdD2sm4aYAexEqmxha0
cTiGvhFzU0UreKfbuC9iRVBWS9MW3RWwLn/Yqhl9WwDsqPCRLhJg7EEjufxkVWBK
PV980cE/+94QS8SsGhHJyZR8P6od1wZoDERWQmAojsoAM1QnHLCZMMkm1DR0AgAB
xT/SJMfuV9mlu6B5dXa70xTLmC6XiExl5aLMwNHPZm9HuKzPnrwoas9XUesLXSWb
p1Cgu2P+GrEcTs9VckbYPkNBUuV4EJY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:26 2025 by rpki-client