Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/670c93c0-b1f3-3f96-afdc-3ada7e6a718d.roa
File: 670c93c0-b1f3-3f96-afdc-3ada7e6a718d.roa (raw, json)
Hash identifier: qwCr7qQvecSXXnshATfmuHSWjO8ctyzOF7jQru7u1wo=
Subject key identifier: EB:EA:C2:AC:05:2E:D8:A1:60:4B:F3:4E:DE:DB:55:25:8F:B7:72:67
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858492646C470B75DCD3E5417C600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/670c93c0-b1f3-3f96-afdc-3ada7e6a718d.roa
Signing time: Tue 11 Mar 2025 05:57:08 +0000
ROA not before: Tue 11 Mar 2025 05:57:08 +0000
ROA not after: Mon 09 Jun 2025 05:57:08 +0000
asID: 329007
IP address blocks: 172.111.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 10:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:26:46:c4:70:b7:5d:cd:3e:54:17:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 11 05:57:08 2025 GMT
Not After : Jun 9 05:57:08 2025 GMT
Subject: CN=b3004472-a4d0-43d1-b0ee-e028c66a108e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:ee:c1:20:3a:68:f1:56:c5:cf:24:ee:6b:
83:1f:3f:75:79:6b:10:cf:9f:a4:31:da:3e:39:19:
99:18:fd:b2:c0:8f:3b:c0:5d:8f:b0:93:f0:1f:0e:
03:c3:f4:93:48:d1:1d:08:15:13:9f:80:56:17:3a:
bf:47:38:2f:37:4e:6b:09:e1:8d:02:c4:66:ba:34:
eb:19:1d:2b:9a:33:3e:20:22:fe:a1:33:07:c4:d1:
ed:12:b1:f6:f1:6b:ab:b5:11:79:52:ae:4d:77:cf:
44:48:28:5a:b1:68:a0:6d:8f:d2:ba:0f:71:f4:5c:
f5:67:19:9d:57:59:8f:cd:65:30:06:26:1a:fb:90:
9f:88:bf:76:13:a4:2d:da:e3:94:b5:af:8a:f6:cf:
ed:43:88:4c:5b:12:cf:b0:75:39:07:50:ac:f1:05:
51:cf:c1:fe:26:76:8a:09:6e:f3:7c:b4:19:a5:67:
2d:5b:f8:f4:8d:d3:b5:db:8e:b2:55:89:68:55:6c:
fb:21:af:8d:9e:ac:58:fe:91:f1:01:b2:04:ac:7f:
1f:ad:3e:56:e0:f8:6e:79:d7:76:52:b7:dc:8d:cd:
05:c3:35:22:ae:24:f4:2b:48:86:eb:f3:54:57:83:
f5:20:be:a6:95:bd:b3:4f:6b:44:29:b2:b5:4b:46:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EA:C2:AC:05:2E:D8:A1:60:4B:F3:4E:DE:DB:55:25:8F:B7:72:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/670c93c0-b1f3-3f96-afdc-3ada7e6a718d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d7:9c:94:c4:9d:ed:59:cd:0f:c8:61:96:9c:aa:85:0a:a9:
83:2a:6b:04:bb:40:66:aa:9a:2a:24:c9:20:3f:e2:52:be:91:
52:ca:00:bc:59:b7:78:3e:35:a1:5b:c9:e9:af:26:47:2b:a1:
8e:6d:7e:a3:52:9a:2f:36:24:72:76:98:11:19:fc:d0:e9:b9:
89:29:86:18:fd:2b:e3:96:fa:15:70:ae:54:f9:79:4f:86:dd:
31:1c:2a:a0:cb:c2:c8:fc:86:86:e3:54:1e:33:2f:b3:05:2e:
17:b9:21:fc:0a:c6:61:89:9b:e1:41:d2:50:ca:93:48:ee:09:
a4:5a:67:f9:cd:32:45:eb:36:62:5e:be:99:6d:91:53:a4:15:
47:29:f3:7d:e0:c6:4d:b9:2b:dd:32:ba:16:bf:65:be:e5:ed:
99:f3:f5:0d:a7:ae:03:b4:96:1c:68:d4:89:ea:08:31:ae:a8:
04:c5:76:8d:99:8f:2d:eb:8b:26:58:7b:6e:b6:39:32:51:c9:
d7:f2:75:25:01:5e:58:6a:fe:5d:d5:e7:df:d5:28:3c:f8:ad:
d0:d7:75:58:0b:2c:20:0a:8f:d0:24:cd:fd:aa:49:9a:11:c4:
16:75:8c:95:a1:61:21:40:48:4d:8c:24:89:09:c5:2a:dc:6a:
82:a5:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:37:43 2025 by rpki-client