Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/83e652a5-88dd-3e02-9f25-7cac698d7c4f.roa
File: 83e652a5-88dd-3e02-9f25-7cac698d7c4f.roa (raw, json)
Hash identifier: R6QgUUA5zTY3SIoGEcqgVKhGWI0whnJNXr8D/IOzvSo=
Subject key identifier: B3:6C:56:3A:BC:94:B0:EC:54:B5:22:B8:05:52:04:78:C0:C1:A0:1F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584971D5FC8AB167443A9ED4E600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/83e652a5-88dd-3e02-9f25-7cac698d7c4f.roa
Signing time: Mon 07 Apr 2025 07:31:19 +0000
ROA not before: Mon 07 Apr 2025 07:31:19 +0000
ROA not after: Sun 06 Jul 2025 07:31:19 +0000
asID: 208485
IP address blocks: 172.94.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 11:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:d5:fc:8a:b1:67:44:3a:9e:d4:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 7 07:31:19 2025 GMT
Not After : Jul 6 07:31:19 2025 GMT
Subject: CN=66931fc3-7d40-463d-bfb4-3596fef66a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:4b:60:c7:07:11:fd:87:f1:0a:d3:3b:67:
d2:f6:1e:f0:92:ba:47:ee:47:f4:95:0c:95:6a:57:
58:9b:74:3c:3f:48:63:c7:4b:9d:03:b1:c9:33:6f:
e0:60:6e:99:18:33:e6:5c:60:87:6b:76:4a:d1:32:
27:10:e5:5f:51:c0:aa:ea:64:ec:24:f7:ca:1a:ab:
ff:6d:45:b7:a8:d6:7f:94:53:47:e0:87:74:57:68:
5d:55:e3:37:97:c2:53:ed:b4:d4:eb:ef:d1:5c:98:
76:d0:96:f6:34:05:56:9e:3a:c8:1a:dc:cd:83:9d:
4b:81:34:0d:57:db:8d:80:0b:62:ff:4a:ab:d9:66:
aa:15:c5:14:ae:23:ee:67:ec:af:c3:5f:2b:1b:4d:
77:78:fe:01:fe:91:4b:65:af:5b:44:11:71:81:a6:
03:8e:6f:3a:48:ee:0c:78:db:68:51:89:7c:7a:bf:
6d:02:66:8f:f3:c8:4d:a2:d6:52:04:71:67:b4:33:
3a:02:27:f9:43:9f:f7:62:03:08:81:80:5f:47:a9:
6d:fe:f6:de:61:2c:48:9f:8e:4c:62:16:05:97:c0:
2d:cb:55:c3:97:b6:1f:57:41:ae:77:03:7f:1c:8c:
0f:ce:33:ad:28:7f:d5:31:63:33:d5:d7:7f:1f:54:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:56:3A:BC:94:B0:EC:54:B5:22:B8:05:52:04:78:C0:C1:A0:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/83e652a5-88dd-3e02-9f25-7cac698d7c4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:60:1a:6e:c3:cd:30:8b:77:30:92:93:af:a6:21:51:55:f9:
08:32:91:62:d5:15:70:48:17:80:fa:ed:a8:f0:a6:5a:81:5c:
e3:90:a8:3d:dd:69:87:7c:c1:f6:df:9f:83:27:7e:17:73:7d:
f0:3d:44:5c:1c:c9:15:7b:e6:2d:2b:7a:5d:37:df:17:21:ee:
7f:bc:ac:fe:69:11:70:22:cf:44:76:0c:ea:20:26:f1:28:2a:
a5:88:53:79:2a:3f:99:a1:20:ed:35:cf:97:3e:62:15:8a:02:
c6:f5:09:b9:fd:ca:10:6e:89:6f:5d:66:ed:15:2c:ab:76:f3:
f6:af:3a:27:69:5a:7b:05:c6:0c:93:b0:4b:76:8d:1d:a5:f0:
9b:93:54:bf:e2:d0:31:30:52:71:83:41:f6:76:2c:2a:b3:4f:
30:71:cf:7c:35:65:bf:bc:da:bc:c6:36:7b:0e:13:c6:b0:73:
56:4e:34:90:fa:e7:ff:dc:ae:1f:8f:62:e2:01:d7:5a:bc:7d:
44:87:dd:c3:79:de:e2:ad:3e:3e:df:c7:7d:8d:96:84:b5:8f:
8f:ad:a5:8a:36:70:df:ee:75:15:c3:8e:79:ee:22:d6:10:c7:
36:6f:7c:c5:b1:02:27:04:83:c2:98:e4:f8:bc:11:5c:61:49:
0a:3e:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:43:08 2025 by rpki-client