Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79168dca-1e85-3304-a494-a2e2d9c19f78.roa
File: 79168dca-1e85-3304-a494-a2e2d9c19f78.roa (raw, json)
Hash identifier: cGgDi7Idk7rd3gt6KohbI+vuqVjQeD2Hu0zwbvkgo8w=
Subject key identifier: C3:AA:11:05:77:7F:2F:AD:62:4E:C2:55:D4:A3:28:62:06:28:77:13
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584ABDF1750C28CDD1E8866C7500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79168dca-1e85-3304-a494-a2e2d9c19f78.roa
Signing time: Mon 04 Aug 2025 06:35:03 +0000
ROA not before: Mon 04 Aug 2025 06:35:03 +0000
ROA not after: Sun 02 Nov 2025 07:35:03 +0000
asID: 9009
IP address blocks: 172.94.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 12:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:bd:f1:75:0c:28:cd:d1:e8:86:6c:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 4 06:35:03 2025 GMT
Not After : Nov 2 07:35:03 2025 GMT
Subject: CN=e40603a7-a3fc-4c9c-92cf-5815015476fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:18:1b:df:5f:da:82:52:9c:e7:a7:82:0f:54:
6e:3f:c1:ec:fa:85:e5:6d:96:ff:c2:aa:58:5e:78:
95:47:12:ea:4d:03:71:d0:3b:94:ac:1b:a7:94:11:
9f:c3:40:e1:6a:87:0c:47:0c:64:2d:c7:2d:49:42:
d3:fb:86:c0:73:23:c1:44:e5:53:c1:b2:08:eb:dd:
8d:f4:39:82:26:fd:23:46:17:6b:f6:1e:5d:e9:f4:
ac:de:ac:06:bc:e8:73:f7:de:bb:ac:e7:d4:23:d2:
19:6a:2b:4c:54:95:11:6c:ce:d6:f3:3b:d5:52:4e:
1b:72:5e:30:2b:f5:d4:61:00:ff:e4:74:f9:ec:80:
52:52:18:35:58:ed:a5:d4:1f:44:bf:89:b2:ff:94:
03:bd:59:f1:cb:c2:49:54:05:f6:d8:f5:57:9c:b3:
c3:15:53:ff:16:f2:45:51:23:6f:03:a7:9d:d2:89:
fb:dc:f2:fb:98:01:0a:18:c8:c4:b3:e6:0f:2d:87:
6b:0d:da:ba:2c:08:d7:a5:86:77:a1:6a:c4:3f:2d:
f0:c7:af:ff:e0:3c:f4:f8:6b:8b:84:28:80:e4:c4:
7b:e4:af:f6:d6:65:b2:56:eb:a6:5f:a0:6f:58:ca:
a5:80:8f:5b:8d:6a:5e:1b:f6:1b:43:52:65:15:44:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:11:05:77:7F:2F:AD:62:4E:C2:55:D4:A3:28:62:06:28:77:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79168dca-1e85-3304-a494-a2e2d9c19f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:5f:7b:b7:f8:b8:2d:00:f9:0e:ed:b6:05:b1:0c:17:af:77:
47:d7:fc:75:fe:9a:51:6b:e2:fc:2f:77:b9:d6:26:21:f0:12:
3b:82:d5:b3:ce:66:77:10:76:9a:fd:38:21:56:11:cb:35:3c:
75:79:7d:71:20:b5:24:4f:97:71:58:a6:77:f5:0c:40:4c:ff:
db:c7:72:10:63:92:83:97:ac:64:81:a6:d6:c7:21:fd:bc:bf:
1d:40:78:a2:a3:c9:5d:6c:6a:ee:bd:9c:7e:43:87:06:47:f8:
a7:61:99:8a:ad:8d:eb:4c:ca:09:03:e1:88:6c:81:67:aa:d0:
3b:a9:8e:6f:e3:bb:8e:97:6e:b7:1b:61:f4:45:2f:d4:47:43:
6e:53:c3:3f:52:e1:58:6a:0b:0e:41:e2:1e:5c:c8:f9:9b:38:
1f:05:18:c6:dd:0a:0f:0a:d4:2e:f1:d3:29:83:4c:91:ff:14:
33:15:ce:ff:f9:e1:43:87:82:55:3f:f2:74:c2:4d:91:d8:d2:
7c:d3:5c:8a:26:20:9d:f5:99:4f:a9:66:00:f1:2f:c0:d7:6d:
6f:bb:9a:b6:95:6a:22:56:ed:82:72:43:06:73:d3:af:2d:6a:
51:ea:fb:75:1e:69:88:4d:45:46:73:a6:c1:ac:41:9e:78:2d:
06:aa:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:15 2025 by rpki-client