Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40c18507-e951-3c83-afc7-4264cf12c7a9.roa
File: 40c18507-e951-3c83-afc7-4264cf12c7a9.roa (raw, json)
Hash identifier: /tFiI9gMRdgAVkA5lHa5z+cFmPg4hp7WqxUVqH5XjCk=
Subject key identifier: 6B:B4:AC:01:F1:49:26:A8:33:0E:8F:3C:4E:1C:B8:27:83:2A:4F:E2
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A9FE777001A8B7ECD7B825DC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40c18507-e951-3c83-afc7-4264cf12c7a9.roa
Signing time: Thu 24 Jul 2025 12:20:40 +0000
ROA not before: Thu 24 Jul 2025 12:20:40 +0000
ROA not after: Wed 22 Oct 2025 12:20:40 +0000
asID: 9009
IP address blocks: 172.94.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 12:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:9f:e7:77:00:1a:8b:7e:cd:7b:82:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 24 12:20:40 2025 GMT
Not After : Oct 22 12:20:40 2025 GMT
Subject: CN=a8653cdc-8fee-474a-92c6-92b85f32d54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7e:83:2c:d3:4c:9c:02:9d:31:48:b2:f3:87:
01:59:46:d9:40:5b:36:1b:56:e2:8f:13:a9:2d:6a:
cb:c6:75:6c:6c:45:ba:f2:86:55:14:91:8c:21:0f:
0e:25:90:94:4c:f9:f8:28:1a:5a:6b:61:45:78:e7:
d7:6e:46:79:2e:06:26:43:b4:6b:bc:ba:89:8a:f7:
70:9f:94:38:fe:ec:ef:ff:d5:81:54:85:28:ed:47:
e9:04:6b:f4:ed:92:22:c2:7f:83:2c:ef:c7:0b:28:
e0:ba:f5:00:9c:8c:34:04:93:9c:fe:0b:e5:2d:76:
18:40:22:2e:7c:cf:d7:a8:df:e6:b3:24:e2:c2:45:
39:ea:27:16:85:b1:1c:11:0d:f0:99:4d:26:c9:84:
c5:27:fc:c3:f2:59:87:22:f7:f4:3d:80:1e:ca:f4:
95:14:50:cd:57:e1:d3:da:b7:95:29:42:6d:e9:86:
36:0f:98:52:01:0d:5f:8f:b6:75:3d:e7:52:96:2c:
78:15:8d:9a:ff:e5:73:ce:ec:b4:bb:75:37:fe:c8:
d5:6b:48:e1:4e:10:65:03:84:72:8b:94:46:4d:e9:
29:31:ca:2a:c6:e4:41:c8:c3:85:41:ba:f6:5a:49:
af:33:4d:4d:7b:12:e2:53:d7:0c:65:f6:75:ba:85:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B4:AC:01:F1:49:26:A8:33:0E:8F:3C:4E:1C:B8:27:83:2A:4F:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40c18507-e951-3c83-afc7-4264cf12c7a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:1e:97:0e:55:25:46:e6:f1:a2:fa:2e:fb:92:23:a2:42:93:
96:07:af:2f:d3:67:fb:d4:b3:98:84:85:27:87:77:62:3f:a9:
97:33:0e:4e:00:8c:3d:16:10:37:e3:39:9a:d4:47:07:c9:60:
5e:c1:3f:4f:81:b0:1e:8f:d0:b6:38:76:9d:fd:6e:ef:14:fa:
31:c9:64:a9:71:d8:73:7f:39:75:9f:04:53:95:d7:f2:be:c6:
02:55:16:29:ba:e4:1b:07:57:d3:c2:22:8c:ed:8b:08:99:43:
b5:4a:19:5f:ff:b2:c8:16:21:a3:01:85:74:ed:b5:ef:34:71:
85:64:5e:31:a8:71:83:d1:dc:32:ff:fe:90:c2:c6:76:c1:2f:
86:f1:45:fc:57:35:a4:3a:5d:18:23:a1:f4:78:0c:1b:4e:1a:
b3:a6:6e:b2:c2:17:0a:ef:ee:04:94:0a:b0:9b:90:1f:5e:b7:
62:5b:65:24:ce:08:d8:84:2c:bd:11:41:13:26:9b:99:cf:37:
e7:14:b3:50:40:74:85:0e:04:82:f1:2e:24:20:69:9f:43:ff:
8f:b6:87:0c:b2:b4:72:f2:58:54:48:3a:d2:bd:28:53:12:37:
2b:ae:54:8b:4c:01:93:d6:d9:e5:94:4f:8b:8b:a9:96:9b:b8:
51:7c:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:39:39 2025 by rpki-client