Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/601833ee-40d5-3e0c-9122-3ae3c70cfe2e.roa
File: 601833ee-40d5-3e0c-9122-3ae3c70cfe2e.roa (raw, json)
Hash identifier: yzTcho3/GRgtNx03lzkcvbrjUYtKmdGN3WgP6CBdttM=
Subject key identifier: 94:57:87:0C:47:1A:CB:B1:10:B7:54:0C:8D:98:27:42:97:0F:F7:CF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858498B7F4FB758CBBE8529397648
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/601833ee-40d5-3e0c-9122-3ae3c70cfe2e.roa
Signing time: Wed 16 Apr 2025 12:07:42 +0000
ROA not before: Wed 16 Apr 2025 12:07:42 +0000
ROA not after: Tue 15 Jul 2025 12:07:42 +0000
asID: 329007
IP address blocks: 172.94.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 06:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8b:7f:4f:b7:58:cb:be:85:29:39:76:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 16 12:07:42 2025 GMT
Not After : Jul 15 12:07:42 2025 GMT
Subject: CN=aff2d970-e6f9-4006-bcac-2ea4d29efe00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:60:6c:4d:f9:e3:6f:4a:71:c9:69:24:99:
95:ab:c9:14:ae:bf:81:16:2a:f3:d9:ae:a9:c0:ab:
e1:a4:80:f4:d8:17:29:b0:66:3d:91:bb:c6:1e:ad:
6b:9f:2b:8f:23:ad:e8:43:6a:f9:61:99:94:f1:b7:
c5:c5:3c:17:42:29:ae:ad:10:e5:d8:87:9a:ea:93:
ab:36:51:c2:4c:5b:d2:2b:ce:a9:e1:58:50:9b:f4:
39:c7:85:b5:49:c2:f0:1c:26:36:c1:dd:8d:f8:7d:
52:66:d0:d9:bd:84:e9:16:dc:76:2f:09:49:ea:31:
16:7d:f4:e4:bf:69:23:48:67:ce:0a:29:bf:d4:af:
bb:3a:0d:1c:13:b8:f4:44:5b:5d:f1:b2:14:54:82:
70:88:71:73:99:c1:4e:03:70:5c:1b:7e:1c:bf:aa:
63:74:7c:83:a8:68:55:0d:15:15:36:ce:7b:b5:58:
ee:55:61:65:4b:28:12:a9:0e:4b:7f:45:44:8e:95:
d9:56:bf:5d:46:64:34:f2:61:b3:56:0b:d9:43:06:
7c:ad:48:61:b8:5b:0f:63:28:62:09:6d:25:05:1b:
61:bd:28:c5:e3:d0:d0:00:2d:0c:73:64:99:1a:f3:
e1:ae:98:13:87:c4:d7:79:32:9f:c4:5d:e7:e7:7c:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:87:0C:47:1A:CB:B1:10:B7:54:0C:8D:98:27:42:97:0F:F7:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/601833ee-40d5-3e0c-9122-3ae3c70cfe2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:c0:d8:a1:60:2d:b9:4f:b3:4a:56:05:ab:93:69:c7:f4:ea:
7d:d9:21:81:42:e9:7d:ef:e4:f1:c3:0e:01:5a:6b:93:57:7f:
bb:07:52:3c:d7:de:59:ca:c4:24:4e:ac:88:66:ba:8a:7a:78:
af:95:4f:50:fe:4f:83:d2:25:b2:96:0f:85:81:d7:20:1e:96:
46:13:82:fc:94:5e:41:ea:c8:c2:62:e3:4a:e5:a7:f5:ec:12:
a2:a1:ba:c8:8c:e8:fc:8b:c0:8c:29:8c:42:4b:cc:4f:de:2c:
f6:ab:1a:ba:fa:90:0d:ea:dc:b2:a6:cc:bb:68:ad:d8:2a:08:
93:a9:3b:d1:ad:ed:ad:7e:45:59:69:73:a9:51:d9:17:f7:b7:
15:14:5d:6a:2d:96:b8:b9:50:e5:35:42:d5:5a:69:67:14:25:
d8:2e:29:19:fe:88:09:db:fc:33:67:42:fc:9d:2c:ab:f9:af:
cf:4e:cd:56:c5:e2:23:af:69:d9:64:40:d3:20:c8:ea:b4:49:
31:31:25:73:40:8c:2f:b3:a2:46:72:f9:42:cd:64:30:08:bc:
52:b0:59:58:05:d4:02:87:f8:89:5d:ce:97:1c:49:82:2e:68:
92:62:be:ed:78:b6:91:42:c3:32:8b:58:d9:52:c0:8d:27:97:
d5:c3:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:49 2025 by rpki-client