Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cf3c278-8104-3f91-817b-d56e23ac2e8d.roa
File: 1cf3c278-8104-3f91-817b-d56e23ac2e8d.roa (raw, json)
Hash identifier: H7Z/On/+XhN6Q8VeC5tGK9CvCxftplXCghNT6W760lI=
Subject key identifier: 18:51:DC:FB:DE:A0:53:ED:47:FF:AE:93:BD:77:4E:5E:B7:9A:71:9A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858491006344211F0B0F3264F3E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cf3c278-8104-3f91-817b-d56e23ac2e8d.roa
Signing time: Mon 03 Mar 2025 06:39:16 +0000
ROA not before: Mon 03 Mar 2025 06:39:16 +0000
ROA not after: Sun 01 Jun 2025 05:39:16 +0000
asID: 329007
IP address blocks: 172.111.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 05:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:06:34:42:11:f0:b0:f3:26:4f:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 3 06:39:16 2025 GMT
Not After : Jun 1 05:39:16 2025 GMT
Subject: CN=7c38c996-4ad7-4fe4-afbe-8aa6dc8f1201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:02:87:f8:a2:62:b4:0f:2b:40:96:7c:ac:
ea:b0:b4:72:e0:2f:42:db:af:97:fa:bb:69:1a:e0:
37:3c:54:8b:cb:07:a9:f5:78:26:ac:04:77:27:ab:
94:e2:f1:39:e5:5e:34:f2:23:64:52:22:9d:6f:f9:
03:0a:a8:82:d5:a5:a0:1a:18:cf:e5:c9:d2:5b:97:
91:1e:bf:e8:27:91:2c:e8:ae:e4:ee:c8:e4:c9:04:
ed:f8:15:c5:fd:6c:5c:cb:0e:66:ff:e9:00:1e:5d:
41:17:da:ba:6c:65:a7:d0:1b:f2:6c:69:89:f2:b6:
5a:7b:c8:5e:e5:0e:fd:9a:30:3b:ab:88:7b:1a:13:
ee:bb:ca:b4:7e:86:69:bc:23:9f:5e:ef:a6:27:93:
1c:13:2e:b9:1e:f0:42:cb:c4:cb:7a:b5:8b:4b:72:
13:c4:ee:59:b8:51:cf:5a:9d:aa:aa:c3:13:a4:4c:
e6:00:43:f7:b3:3e:0a:4d:04:21:3b:44:c2:ea:63:
28:02:eb:87:ad:5b:f0:53:f6:46:49:ca:cf:a7:6e:
ac:e7:f0:eb:8e:cf:cf:b9:7e:64:03:8f:78:11:50:
fa:01:b3:66:c4:c5:c3:34:ca:d4:ae:81:3b:49:46:
ee:b7:ba:c7:04:ac:e5:cb:2d:83:57:cb:de:34:30:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:DC:FB:DE:A0:53:ED:47:FF:AE:93:BD:77:4E:5E:B7:9A:71:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cf3c278-8104-3f91-817b-d56e23ac2e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:8b:cc:88:56:97:89:4a:3e:e4:dc:d1:c8:f7:80:e0:f3:ca:
de:cb:47:a7:b5:58:95:d2:7f:66:3f:2c:bd:b8:54:15:f4:81:
49:2a:3e:04:44:54:41:c8:fd:d7:58:d1:34:76:44:cd:17:7a:
ac:cc:9d:c2:cd:6b:cd:79:0d:95:05:1a:ba:eb:6b:fd:9f:c8:
a6:7b:3b:dd:01:57:72:c6:df:47:ee:e7:01:70:e5:ad:06:17:
8a:55:de:b5:39:fa:f9:ff:0f:6f:b3:6b:9e:6a:f2:00:0f:59:
36:bb:6f:36:17:41:28:5c:40:b1:cf:97:d9:33:30:a0:e7:33:
de:c9:3a:22:32:74:15:d5:54:93:aa:7e:27:1f:3d:71:e7:2c:
64:ff:cf:43:ca:18:31:72:3d:9b:b0:f4:a2:af:1f:8f:a6:54:
0a:f0:c3:5c:6f:c9:9f:5f:96:91:6f:24:d6:d9:bb:3d:90:18:
42:f3:fe:1d:97:b4:7c:78:bc:ac:ba:cc:21:0b:e1:25:a8:6e:
a9:96:37:54:bd:b4:d1:71:1c:35:bc:ac:08:9c:19:4a:cb:b7:
5b:75:76:c3:2e:39:63:53:af:e7:4f:61:a8:03:c9:1d:42:7d:
4d:6a:3c:b5:f2:21:09:d2:34:b5:c7:f1:21:b5:4e:b5:28:d0:
97:13:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:07:44 2025 by rpki-client