Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64e3b005-0976-3d9a-920f-927b6554f98e.roa
File: 64e3b005-0976-3d9a-920f-927b6554f98e.roa (raw, json)
Hash identifier: 6yYlTsuTWSZ7cJTqs27pJxm3GoN0w24J1TBYkt201DA=
Subject key identifier: CA:13:46:BE:0E:B5:8E:8D:FE:42:99:B3:A4:F8:02:3B:37:61:8D:3F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584A37F95EEA0D65C74557C3BB20
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64e3b005-0976-3d9a-920f-927b6554f98e.roa
Signing time: Tue 17 Jun 2025 06:52:40 +0000
ROA not before: Tue 17 Jun 2025 06:52:40 +0000
ROA not after: Mon 15 Sep 2025 06:52:40 +0000
asID: 29802
IP address blocks: 172.94.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 11:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:37:f9:5e:ea:0d:65:c7:45:57:c3:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jun 17 06:52:40 2025 GMT
Not After : Sep 15 06:52:40 2025 GMT
Subject: CN=4551d273-356e-4fbd-8710-b973ac90c9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:35:09:7c:b1:14:96:f5:64:e8:f3:60:65:
41:a2:94:f7:9e:b5:fe:b9:64:bc:58:01:18:a9:2a:
1c:07:74:2d:f2:75:c2:93:fd:a7:07:c9:22:4b:92:
29:7f:14:88:55:7c:04:79:28:79:fb:f8:5c:48:ed:
30:32:d2:87:12:ec:6b:0e:20:d6:36:2c:ff:a6:d8:
91:21:bf:5c:11:79:b5:ba:25:f3:c0:cc:59:82:17:
f7:7f:77:45:8a:63:74:94:bb:9d:f3:a3:4d:f9:bb:
86:c6:28:06:f1:af:45:ff:ab:63:80:7b:18:8d:35:
ca:fb:37:a5:5f:2a:52:92:08:ad:88:dd:08:74:53:
0c:54:e5:54:ce:81:35:1f:28:24:f2:89:e0:c0:41:
e4:31:b4:cb:fa:64:c2:9b:f0:5e:0d:a2:a5:4b:43:
40:9a:a1:49:98:7b:1b:ad:f6:e2:0f:8b:ee:00:7a:
70:24:8e:fe:0a:49:b1:92:98:02:fe:15:23:3f:ca:
c9:b9:2c:25:57:34:43:ac:bb:8e:ed:08:71:c4:ff:
60:54:96:2e:8d:a4:bd:4d:6e:66:6c:4d:84:57:6e:
81:b8:2d:6c:20:3e:58:75:ac:f5:57:11:ed:90:83:
de:28:3a:66:f9:07:ac:c4:be:79:cb:3e:f0:f0:35:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:13:46:BE:0E:B5:8E:8D:FE:42:99:B3:A4:F8:02:3B:37:61:8D:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64e3b005-0976-3d9a-920f-927b6554f98e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:51:0a:6b:ba:8b:db:ba:68:bd:e9:2f:7d:3d:52:9c:be:76:
01:cd:35:2a:5b:c4:1b:44:9c:3f:68:33:1e:5c:28:6d:ba:41:
14:81:58:eb:cf:e6:62:6a:22:1e:73:e2:da:e6:e9:7e:38:02:
c7:86:06:38:f6:83:6a:4b:ec:24:92:c3:9b:b6:22:e9:f4:b7:
e0:a2:f9:8e:73:10:46:7e:b2:34:aa:b5:95:4d:8e:97:63:82:
9a:6f:2b:3a:61:4f:fa:c9:65:10:2e:e4:26:1f:4d:40:7d:c1:
f0:3f:de:c7:13:66:06:df:43:f9:9b:15:e8:d3:9d:37:8a:48:
12:67:dc:59:e8:54:9e:13:29:e6:00:a9:4d:43:e8:90:50:88:
94:72:ef:93:66:b4:d1:1a:87:2a:02:43:5d:88:56:42:88:58:
eb:68:cb:c4:58:57:24:3d:29:27:92:b5:7e:fa:c6:80:4c:52:
af:e9:95:13:ed:8f:ca:53:eb:bb:dc:d9:18:ea:4e:fa:f4:5d:
db:ab:ae:c6:bf:14:c2:68:0c:78:dd:91:5a:c5:93:b7:6f:c8:
8c:fc:9f:61:d3:32:e6:bf:0b:53:5a:ea:5d:6e:80:47:f1:3e:
67:16:a6:a8:1e:52:d1:be:92:bf:b4:f9:0d:85:38:a6:7a:e5:
c7:a8:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:18 2025 by rpki-client