Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/600cfd5e-2d83-3f77-8bb6-483e14862c89.roa
File: 600cfd5e-2d83-3f77-8bb6-483e14862c89.roa (raw, json)
Hash identifier: nt/lb80C8SsDaXnL78VNdiLx+RnpQ17sAT0i5zy9Dfo=
Subject key identifier: 9B:CE:CF:14:06:E1:D2:F9:17:75:EC:2C:57:DD:93:1C:48:60:DB:30
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A7B9D14DE449CA5029C049180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/600cfd5e-2d83-3f77-8bb6-483e14862c89.roa
Signing time: Fri 11 Jul 2025 12:21:41 +0000
ROA not before: Fri 11 Jul 2025 12:21:41 +0000
ROA not after: Thu 09 Oct 2025 12:21:41 +0000
asID: 9009
IP address blocks: 45.74.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 12:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:7b:9d:14:de:44:9c:a5:02:9c:04:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 11 12:21:41 2025 GMT
Not After : Oct 9 12:21:41 2025 GMT
Subject: CN=2e69c7c6-8c83-4dfb-b9ef-01de6262d537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:62:90:a9:02:9a:c1:df:69:02:eb:18:2d:
92:2e:7e:46:5f:ce:8e:47:0b:b3:1b:2a:7e:58:24:
54:f0:42:e0:72:8c:c0:98:bf:f2:17:c6:a8:c1:3c:
76:ca:94:22:28:77:83:20:57:e5:20:d0:58:ad:da:
11:ae:74:79:d2:43:7b:7c:c2:5c:56:e7:e5:20:d3:
f4:6e:a9:3a:b9:65:42:cd:f8:14:38:df:c1:86:d8:
a6:e8:75:0b:cc:87:49:a3:bf:f1:47:aa:2a:6a:c9:
71:10:7d:ef:0e:2c:08:79:5d:03:91:11:0d:bc:e4:
dc:7c:7d:ef:18:85:b2:a8:e4:dc:d5:eb:aa:b7:7d:
4e:6f:5e:9c:4b:bb:80:3b:a8:15:c2:90:85:12:59:
0e:4c:b0:ea:64:b7:48:c7:ca:df:73:3b:bf:da:ef:
61:23:f7:1c:48:55:b7:bf:1e:91:4f:29:3f:b5:41:
d5:33:9c:54:99:ac:52:79:0f:1d:cd:9d:2c:0f:68:
72:81:75:ed:c3:88:ae:0c:c0:0a:aa:3d:7e:67:93:
79:61:b0:9c:84:87:a9:7f:db:87:ec:8f:1d:a0:48:
0f:d3:e5:a1:a3:e0:21:15:5b:e5:bd:37:05:8d:11:
bf:ca:71:c8:c8:ec:24:51:fa:6e:0f:64:4e:16:23:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:CF:14:06:E1:D2:F9:17:75:EC:2C:57:DD:93:1C:48:60:DB:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/600cfd5e-2d83-3f77-8bb6-483e14862c89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e2:e9:83:be:96:0c:47:0b:7f:ab:ce:90:8d:39:f3:1c:7c:
99:1a:d8:11:32:43:81:55:e8:89:3a:93:f5:79:d1:54:b2:4a:
31:26:63:f9:e6:52:1c:b2:b3:37:3d:16:38:28:53:fb:9a:ad:
3b:f5:93:b8:f1:e9:fb:33:ed:2f:7c:cc:e9:34:56:88:63:37:
d8:52:a4:99:87:30:45:a4:f5:11:a3:4b:88:64:6b:fd:65:93:
58:78:a0:c6:e0:10:14:b9:98:b7:8e:3b:01:d0:49:94:2e:fe:
68:44:ad:99:ff:e9:2b:65:65:4e:2a:5f:32:d6:92:44:7f:3a:
ec:d5:04:1b:ac:09:9a:83:dc:ea:73:47:7f:b6:e6:49:22:1b:
4b:11:b9:cc:88:38:c6:98:fe:29:bb:2d:26:10:f1:87:64:3d:
a7:27:7f:c2:9b:90:40:8d:63:13:c8:9f:cb:ba:47:f7:39:3b:
72:4d:a7:1e:1a:6f:2c:3b:30:7a:c7:d5:62:00:78:98:d4:00:
b5:95:b5:55:dd:48:c1:f2:18:96:d2:7f:ce:89:43:9c:66:ac:
04:13:97:f6:ff:83:4c:fe:7f:4a:ad:33:d7:be:55:87:62:2b:
6b:9a:2b:60:9e:bd:2d:d3:92:9e:04:42:4f:9d:86:cc:ab:0e:
93:06:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:12 2025 by rpki-client